Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa
File:                     323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa (raw, json)
Hash identifier:          XGicldnSIB9VjX0GciP96J2hOBIgtQEJPJtVbAcj5e0=
Subject key identifier:   5B:BE:25:21:EB:F0:E7:93:41:37:CE:FF:7F:CC:4A:6B:F8:E4:E6:78
Certificate issuer:       /CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
Certificate serial:       24BE05C71505927B254C408CFB784F4325ABCA1F
Authority key identifier: 72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa
Signing time:             Sat 30 Dec 2023 03:00:01 +0000
ROA not before:           Sat 30 Dec 2023 02:55:01 +0000
ROA not after:            Sat 28 Dec 2024 03:00:01 +0000
asID:                     264126
IP address blocks:        2804:22d8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:be:05:c7:15:05:92:7b:25:4c:40:8c:fb:78:4f:43:25:ab:ca:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7211E397FC311B7F5E5E07709E2579ABEEE6AAA7
        Validity
            Not Before: Dec 30 02:55:01 2023 GMT
            Not After : Dec 28 03:00:01 2024 GMT
        Subject: CN=5BBE2521EBF0E7934137CEFF7FCC4A6BF8E4E678
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fd:4d:1e:05:dd:7c:7d:1b:db:40:84:c7:cc:
                    51:f2:ae:28:95:9e:1a:96:df:2f:ca:dd:c0:59:2f:
                    38:59:dc:30:4b:b1:c0:44:7f:e7:88:7a:5f:a1:51:
                    92:b9:52:2d:61:22:31:e8:f4:d7:9a:57:02:1b:00:
                    cc:d1:bb:85:bb:f2:98:3d:2b:e4:68:51:49:01:15:
                    0e:1d:70:54:5f:45:08:31:f6:c9:c5:8e:ed:3d:c2:
                    35:d1:9c:c0:b3:0d:a9:fb:70:40:95:c9:ff:99:9a:
                    11:56:18:b8:60:7a:1d:13:0f:79:0c:5c:f6:cb:e9:
                    dc:fc:a3:68:64:61:cb:8b:71:d9:0e:47:b7:98:85:
                    14:0f:3e:60:5d:c8:53:25:30:e4:e0:94:82:32:4a:
                    51:67:24:f6:3c:7a:1b:28:9f:f0:7c:ed:82:9d:dc:
                    67:d6:bc:df:cd:39:64:64:dd:71:47:3f:1e:86:c8:
                    71:bc:c7:97:57:73:f0:ad:34:46:7c:59:20:f7:cd:
                    82:4d:47:33:fc:67:98:a5:67:b2:92:2f:b9:80:60:
                    71:ae:e4:2b:04:e7:41:6f:a5:e5:95:e0:dc:8d:0f:
                    9b:0f:03:b1:70:dc:6e:51:5c:c7:06:b4:f6:be:19:
                    c4:76:36:46:bc:fd:c3:5f:d9:a2:31:c5:81:24:52:
                    0d:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:BE:25:21:EB:F0:E7:93:41:37:CE:FF:7F:CC:4A:6B:F8:E4:E6:78
            X509v3 Authority Key Identifier:
                keyid:72:11:E3:97:FC:31:1B:7F:5E:5E:07:70:9E:25:79:AB:EE:E6:AA:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7211E397FC311B7F5E5E07709E2579ABEEE6AAA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HA2hcG4eAuXDGBPaYttKhctFgvwbwF5PGM5D2URxVk9/0/323830343a323264383a633030303a3a2f33342d3334203d3e20323634313236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22d8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         55:a9:19:0c:98:c2:34:c0:b4:03:9a:ab:06:96:8d:dc:a6:7e:
         59:c5:83:c4:61:fd:15:72:6d:b1:91:ae:05:67:f2:42:1b:e2:
         71:37:b7:cf:c8:33:9a:57:59:78:04:6e:63:53:c1:57:41:1e:
         a8:6b:e9:eb:98:99:48:b8:ed:cc:e4:95:55:14:71:71:40:05:
         77:ed:b6:97:b0:05:1f:2d:5f:a8:ea:ed:56:f8:99:e4:ab:9e:
         f9:e0:63:9b:b4:14:8c:b4:f3:7c:05:16:54:13:6d:43:3d:95:
         fc:99:67:42:b2:39:86:5d:fc:37:9d:dd:dc:9f:a3:1e:6e:61:
         47:cc:87:b5:40:4a:f9:87:9c:e4:bd:41:b3:4d:fd:de:71:0d:
         5b:62:0c:c3:b7:88:db:b2:87:e8:d2:06:2a:9a:8d:5e:06:cf:
         a0:b8:e9:24:44:ca:69:ec:a2:08:d7:4b:1d:6f:ed:e9:8f:31:
         5d:2a:3b:c8:dd:87:b8:39:a8:98:9b:f9:95:17:f2:1e:51:15:
         80:d2:3d:23:10:d4:2e:9a:63:47:41:8d:3a:2a:8a:83:9a:58:
         49:0f:15:e8:1c:ad:ba:42:aa:41:4f:c7:59:fe:7d:18:0f:c5:
         75:36:90:d6:fb:ba:1e:fc:ed:51:d1:f1:88:0a:37:31:dc:8e:
         b2:db:c7:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:40:53 2024 by rpki-client on console.sobornost.net