Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a3a2f34382d3438203d3e20323634323432.roa
File:                     323830343a323463633a3a2f34382d3438203d3e20323634323432.roa (raw, json)
Hash identifier:          KhSYlwqupHp1gsMPcnh5Cje76OB5kzsWY8ViNGbRiRg=
Subject key identifier:   F9:5C:80:DA:7A:7E:69:9B:BB:42:63:67:79:63:40:FA:01:C5:D8:33
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       417F5048128E253F4C39ED9640021D4C7AB82F56
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a3a2f34382d3438203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:24 +0000
ROA not before:           Sat 24 Sep 2022 00:41:24 +0000
ROA not after:            Sat 23 Sep 2023 00:46:24 +0000
asID:                     264242
IP address blocks:        2804:24cc::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:7f:50:48:12:8e:25:3f:4c:39:ed:96:40:02:1d:4c:7a:b8:2f:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:24 2022 GMT
            Not After : Sep 23 00:46:24 2023 GMT
        Subject: CN=F95C80DA7A7E699BBB426367796340FA01C5D833
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:a4:07:ba:04:a0:33:6e:0b:bc:5c:58:fd:
                    e4:ef:ee:a8:c0:58:83:65:13:71:64:74:b9:a0:bb:
                    cb:8a:10:42:56:1e:0a:5e:1d:0e:da:12:db:8b:25:
                    be:e2:08:28:5b:18:3b:e9:9a:5a:31:e8:37:20:e6:
                    a2:a2:8a:ae:67:9e:35:4b:27:8a:be:a2:e0:3c:5a:
                    16:e7:43:89:f1:b8:23:09:f6:c1:9a:7c:f4:6d:77:
                    eb:d2:70:43:3a:08:d3:f8:e3:fb:1c:ea:ef:40:7f:
                    54:4e:9d:d6:43:cf:ae:43:bf:73:47:67:d8:24:be:
                    e2:53:8c:1f:f1:6b:78:d2:d9:18:14:81:23:e5:bf:
                    45:49:53:e5:c2:b1:49:ec:eb:a5:fb:52:e8:f5:76:
                    46:be:68:1f:ca:52:71:48:06:75:0d:d0:f5:e0:ad:
                    60:f8:e4:69:65:78:b2:c0:70:99:86:41:ef:d4:78:
                    e5:0f:a5:d8:fe:0c:e1:da:1d:6b:f3:c6:32:93:60:
                    c6:83:63:79:fb:b1:04:a1:59:65:79:90:d0:b6:ea:
                    d9:6c:2e:6e:86:f3:57:21:9f:d0:49:0b:09:20:03:
                    a0:69:ba:8c:41:8a:3f:f0:f9:68:6b:c6:fb:c5:3c:
                    2a:a3:46:3f:dd:1a:8d:ca:a7:6d:0b:44:72:d7:4d:
                    70:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F9:5C:80:DA:7A:7E:69:9B:BB:42:63:67:79:63:40:FA:01:C5:D8:33
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a3a2f34382d3438203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:32:10:ec:c0:2c:2b:62:05:7e:d4:84:42:28:a5:89:27:71:
         a0:bf:26:b5:02:a2:51:3e:e6:5b:37:e4:87:be:24:b0:d2:9b:
         e4:12:33:4c:3e:f6:58:1e:e7:c0:fa:41:07:e5:39:11:5a:ff:
         24:43:4b:d4:a1:8b:41:06:07:99:d1:5c:bd:a1:b2:79:16:01:
         9a:f4:08:44:9e:97:cd:8a:05:f4:76:c3:56:bf:c3:7b:f7:7b:
         03:1c:5f:b4:6d:60:ef:ea:6d:f9:09:71:3e:33:d8:e4:0f:ad:
         b4:3e:d8:2d:fa:ad:43:0f:75:24:53:ef:a7:9c:37:5c:f0:24:
         45:ef:c7:12:7f:58:0b:1f:ec:8e:79:73:e3:37:f1:61:a6:be:
         94:c2:d6:b2:fd:5d:69:8d:02:96:02:6d:e7:73:37:15:57:c2:
         e3:63:d6:16:8d:ce:8e:55:a1:16:be:cb:eb:5e:f3:71:e8:66:
         74:b7:37:88:4a:d8:74:ac:32:64:31:c4:dc:ff:aa:16:3d:79:
         bb:9c:6c:23:68:26:92:62:93:45:32:e8:5b:e7:a1:c4:7f:cb:
         bd:4d:32:9b:3f:70:47:8f:e9:43:f5:28:40:65:8d:f2:d6:93:
         45:c1:38:46:c5:d1:cd:d7:09:47:0b:e2:53:b5:57:ee:96:30:
         fa:b9:1c:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org