Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a666430303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a666430303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          xzs2mcuANi+go4hcREuFAE7uWbudaod6lh+lxeu8j48=
Subject key identifier:   99:51:23:1A:BA:6B:2F:A8:7E:8C:39:0E:6A:EC:24:9D:54:05:2C:69
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       6DC3CF142F3FC37C847DFEDC6F5A63F4C88A1934
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a666430303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:41 +0000
ROA not before:           Sat 24 Sep 2022 00:41:41 +0000
ROA not after:            Sat 23 Sep 2023 00:46:41 +0000
asID:                     264242
IP address blocks:        2804:24cc:fd00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:c3:cf:14:2f:3f:c3:7c:84:7d:fe:dc:6f:5a:63:f4:c8:8a:19:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:41 2022 GMT
            Not After : Sep 23 00:46:41 2023 GMT
        Subject: CN=9951231ABA6B2FA87E8C390E6AEC249D54052C69
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:17:14:68:77:64:9f:b1:c4:dc:a1:ee:b7:95:
                    ef:1d:74:14:68:2c:c6:74:0d:80:3f:00:94:72:1f:
                    b5:f8:a9:10:4a:55:43:c8:93:08:b8:fe:72:31:f5:
                    60:e9:ea:30:8c:d3:5a:37:21:05:94:cb:28:22:3b:
                    2a:dd:d6:0a:15:84:a3:17:a4:9b:e2:27:45:98:3b:
                    8f:0f:a0:4a:7b:39:d2:dd:47:d7:cd:3c:6d:f7:f8:
                    7e:4b:94:39:fc:9e:76:53:10:a5:c1:20:fb:e7:22:
                    de:7c:7e:fa:08:ba:44:78:58:34:af:20:c5:2c:86:
                    ac:4d:a0:df:99:53:e5:bd:55:56:9a:e3:e3:03:d4:
                    92:f6:e6:dd:ae:c0:3a:d4:8d:03:b8:ce:44:f7:fb:
                    9f:2d:4d:53:a3:21:e4:1f:01:60:b1:69:35:d0:ac:
                    d4:07:7e:a4:e5:e8:13:8d:3f:a3:fe:ed:d4:26:ca:
                    71:b6:6e:f1:40:de:48:c2:7e:17:ac:e3:4f:ac:e9:
                    d8:3d:93:f2:e4:45:07:0b:dd:48:92:8f:7b:73:30:
                    0f:a6:35:2e:82:8e:cd:8b:0b:e0:32:ac:ca:9d:53:
                    a9:ba:3f:19:4a:7e:e6:62:47:75:39:31:b2:98:14:
                    ce:bb:b3:9b:fd:66:8a:c0:50:40:72:b1:33:0d:53:
                    3e:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:51:23:1A:BA:6B:2F:A8:7E:8C:39:0E:6A:EC:24:9D:54:05:2C:69
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a666430303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:fd00::/40

    Signature Algorithm: sha256WithRSAEncryption
         31:d9:c8:a1:b4:88:f8:cf:c7:09:e4:61:ef:29:f4:12:af:55:
         81:38:09:2a:4b:a2:73:6b:cb:92:37:a1:48:98:13:64:d0:e3:
         11:c2:fc:ea:36:32:69:af:2d:97:c7:1a:4a:b6:da:64:47:d8:
         44:7a:94:1f:33:8f:c2:70:85:69:e9:b2:fd:fd:c3:6c:3d:a4:
         a6:30:5c:13:de:63:15:4f:e9:02:10:31:f9:8a:60:92:3f:69:
         f9:43:52:55:d5:ed:49:83:17:3f:7a:8b:6a:23:bd:30:d0:55:
         cf:fe:c6:66:f3:d2:e0:ec:0e:36:96:a6:1d:98:64:2a:40:00:
         42:49:a3:b2:e3:07:80:3a:b4:c9:f5:87:5e:be:91:63:66:aa:
         f8:b5:e3:d5:55:e8:99:0c:8f:1f:3b:5e:49:f7:2c:8f:b3:f3:
         c5:b7:a4:8c:09:1b:5c:97:93:c7:99:76:09:e5:0a:b4:cf:fb:
         d6:9b:f2:e7:58:22:7b:43:65:eb:d3:ba:5e:c3:c6:04:ff:47:
         b1:d4:01:61:f1:97:9e:20:eb:6d:cc:53:b8:a9:1a:13:f8:dd:
         de:6e:bc:c0:30:73:c7:24:d9:e5:37:48:9d:7f:02:3f:01:45:
         fe:3c:6b:ae:28:d0:39:24:42:84:fd:aa:23:67:51:59:7c:81:
         c0:ab:99:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org