Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a396130303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a396130303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          C/zl9Vho1hkZJi7eqdM9vP5jKNtvt1ytevxY7ymUeWs=
Subject key identifier:   6B:DB:EA:E1:6E:3D:43:99:A1:91:5B:53:DE:57:93:A9:66:43:F2:33
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       2F2E32954AF7D82D4D335639C8C2E4A7E83A7966
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a396130303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Thu 09 Feb 2023 06:20:08 +0000
ROA not before:           Thu 09 Feb 2023 06:15:08 +0000
ROA not after:            Thu 08 Feb 2024 06:20:08 +0000
asID:                     264242
IP address blocks:        2804:24cc:9a00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:2e:32:95:4a:f7:d8:2d:4d:33:56:39:c8:c2:e4:a7:e8:3a:79:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Feb  9 06:15:08 2023 GMT
            Not After : Feb  8 06:20:08 2024 GMT
        Subject: CN=6BDBEAE16E3D4399A1915B53DE5793A96643F233
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:f8:42:8c:c9:45:99:17:20:e5:d5:92:0a:21:
                    64:c6:39:68:41:00:4c:65:9b:98:0a:2b:ed:f6:2f:
                    5d:5a:83:6b:a5:e3:3a:51:44:16:56:26:f2:8a:b4:
                    26:4a:27:a6:41:6d:6f:49:a8:05:ec:bb:6c:97:79:
                    0c:16:4e:4f:4f:b2:53:ec:f8:11:e9:e7:2a:9d:c9:
                    5d:1e:5c:b4:30:59:54:e5:85:f3:a0:b9:03:6e:04:
                    a7:18:94:61:c0:bd:91:91:a9:3b:aa:5e:67:c0:f5:
                    40:ea:50:f4:23:bd:5b:08:0c:15:ec:29:7c:a4:97:
                    d3:ee:2c:53:55:14:44:aa:3c:27:ed:20:c0:7e:7b:
                    00:91:ce:d0:47:4b:8f:de:8f:37:65:0f:7c:2b:77:
                    d3:d1:71:27:43:14:ba:fd:fc:f8:fa:aa:6b:17:33:
                    40:ab:ce:8d:54:93:54:78:f2:15:29:01:3c:62:4a:
                    68:af:0f:e9:55:a4:77:26:2c:95:95:23:a5:dc:f6:
                    f4:1e:60:ac:ed:29:29:0d:ce:7b:29:c7:02:16:0f:
                    7b:bf:97:97:c9:94:af:87:a6:3e:5f:a7:4f:ca:b6:
                    c9:0a:30:e1:61:c3:b6:31:d1:77:67:44:e6:14:e9:
                    72:d6:07:9c:7f:e7:2a:70:7b:b7:e9:55:b8:8f:ea:
                    d0:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:DB:EA:E1:6E:3D:43:99:A1:91:5B:53:DE:57:93:A9:66:43:F2:33
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a396130303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:9a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3e:19:61:39:8b:64:0b:c7:70:4e:48:e2:0b:fb:91:c1:b6:ea:
         3a:3d:3b:63:25:69:43:3f:6d:19:e2:a5:fb:94:f0:4d:e6:f9:
         87:83:a5:ae:9c:d1:1f:fb:66:b9:eb:fb:66:aa:db:d9:80:38:
         ad:19:aa:fb:20:09:01:9d:f5:1f:54:64:ba:09:13:40:01:ea:
         9e:9e:0a:0b:46:84:81:c6:b0:37:b8:fb:51:29:2b:69:e4:c6:
         b0:50:d7:c3:1f:02:b0:18:15:73:2c:11:21:d8:40:89:a8:12:
         fc:f6:4d:82:23:39:09:cd:22:e8:f4:8d:c9:27:3a:fb:10:4b:
         8b:a5:da:aa:83:c1:21:96:9e:f8:e2:d0:5f:54:07:b2:a9:87:
         e8:e9:77:88:01:ec:0a:f1:25:23:b1:36:f4:c6:0d:b1:a2:08:
         0e:30:20:68:74:db:10:83:02:c3:4f:09:c1:ea:f2:8d:4f:26:
         81:09:3b:c6:ee:a0:f7:dc:1e:7c:31:a0:c4:7f:76:e6:63:35:
         f7:69:a6:f4:61:0a:71:7b:f0:f4:ae:37:18:7b:9b:63:83:5e:
         16:07:44:18:ae:1f:28:4b:af:62:46:84:9c:7e:05:07:bc:4c:
         c8:9e:ec:46:97:cf:a5:18:b4:49:a1:4f:ec:08:da:be:db:81:
         6a:db:02:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org