Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a393330303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a393330303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          /VyPApdZGe5mxVwH/jjtkZxwEGSrflJ5xHcwTvI8Av4=
Subject key identifier:   CB:CA:53:5E:DE:18:45:14:D9:63:72:64:23:C6:01:21:58:C2:83:3E
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       1FE27391A7A158CB0A6FB683D73D3F4F5EBF514C
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a393330303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:36 +0000
ROA not before:           Sat 24 Sep 2022 00:41:36 +0000
ROA not after:            Sat 23 Sep 2023 00:46:36 +0000
asID:                     264242
IP address blocks:        2804:24cc:9300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:e2:73:91:a7:a1:58:cb:0a:6f:b6:83:d7:3d:3f:4f:5e:bf:51:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:36 2022 GMT
            Not After : Sep 23 00:46:36 2023 GMT
        Subject: CN=CBCA535EDE184514D963726423C6012158C2833E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:13:fd:4a:fb:d6:dd:dd:73:a1:a9:a0:64:6c:
                    6f:f8:0e:d8:03:ca:75:8c:28:47:69:b6:13:69:24:
                    6b:1e:7a:e3:1f:78:40:fe:44:e8:a5:7b:85:d4:21:
                    94:66:9a:b2:70:45:fd:86:54:6a:1c:22:1a:ce:8f:
                    68:9a:e4:05:ce:43:77:29:c5:86:d1:08:fd:e0:52:
                    42:34:1b:9b:c6:10:c2:72:01:ca:4d:7d:dd:3e:b1:
                    6d:1e:62:e4:ea:d2:bf:5b:11:d5:99:27:0d:b3:3c:
                    02:64:b6:37:b8:c5:f0:96:97:64:8d:71:87:80:d6:
                    41:ee:f5:11:83:60:5a:d7:5c:66:c8:18:7b:77:3d:
                    79:e6:4b:1c:83:da:95:9b:ba:63:f8:5b:7b:8a:56:
                    47:ae:ed:30:9e:a9:b0:97:bb:fb:d1:78:b0:cd:d4:
                    81:7a:d4:ff:3d:f3:c9:4c:88:c5:67:c2:d3:44:70:
                    4d:e8:5a:f5:73:fd:46:88:58:06:1a:7c:96:4f:03:
                    cd:23:6d:d9:0a:f3:9e:a3:24:be:06:2c:11:ec:54:
                    29:f9:6a:13:3e:a7:70:02:e9:99:99:2b:ba:01:64:
                    bf:19:30:0c:a1:d1:4e:76:b9:10:21:d0:1c:23:6d:
                    5e:6c:80:9f:f4:fa:5e:39:35:6e:f6:bc:63:9b:19:
                    24:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CA:53:5E:DE:18:45:14:D9:63:72:64:23:C6:01:21:58:C2:83:3E
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a393330303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:9300::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:1c:7a:f6:83:00:99:fb:eb:f1:22:7c:4f:7d:6b:5a:6d:28:
         64:37:39:38:6e:9c:88:61:f6:b2:18:f0:28:44:ba:e9:a4:ab:
         7e:c8:6e:3e:76:cc:a6:7e:21:87:48:48:cb:b3:72:0c:fa:76:
         8d:d8:36:3b:d1:68:a8:65:a0:a7:ff:b4:92:ea:de:e6:08:0c:
         95:37:62:10:7e:b1:84:74:26:fb:ee:91:b7:b8:aa:7e:95:f5:
         3f:d5:d9:08:8c:a8:9b:2a:3f:09:a7:b5:a7:7c:b3:a1:3a:4f:
         3f:1a:9d:4f:4a:66:fb:35:7a:68:cc:92:04:c0:91:0e:33:17:
         d9:53:f7:25:c8:38:85:b1:55:9c:7c:1e:ca:b3:37:bb:ab:71:
         5f:1b:38:d4:d4:87:7b:47:6f:2e:e7:32:b8:9d:ed:4b:a4:7f:
         61:31:d4:9d:df:c9:20:c3:71:1b:fb:ff:05:84:06:6a:3d:cf:
         8f:28:6f:a7:20:be:11:ff:cc:fd:28:8b:bf:75:16:5e:41:4c:
         cf:38:08:83:dc:eb:25:f7:5d:49:ea:6f:93:50:7c:e0:18:18:
         75:4e:1e:d8:c0:bb:1e:df:d3:cd:7c:75:d0:81:ca:c1:41:24:
         cf:37:5c:db:fa:48:a7:97:29:7a:a1:88:c8:9c:7a:c8:53:a2:
         53:c3:ac:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org