Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3430303a3a2f33382d3338203d3e20323733373237.roa
File:                     323830343a386235383a3430303a3a2f33382d3338203d3e20323733373237.roa (raw, json)
Hash identifier:          2BpwQc6r/lX960JpiJqU6b7eYmptK7dL61PPkqb3krA=
Subject key identifier:   4A:F0:78:9F:69:3B:C6:DD:7A:0B:3D:B3:CE:AF:97:F3:45:CE:0F:28
Certificate issuer:       /CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
Certificate serial:       588C3C7DF2A2627A83BBA3DC36505CA2D12F660C
Authority key identifier: 0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3430303a3a2f33382d3338203d3e20323733373237.roa
Signing time:             Thu 18 May 2023 18:57:26 +0000
ROA not before:           Thu 18 May 2023 18:52:26 +0000
ROA not after:            Thu 16 May 2024 18:57:26 +0000
asID:                     273727
IP address blocks:        2804:8b58:400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:8c:3c:7d:f2:a2:62:7a:83:bb:a3:dc:36:50:5c:a2:d1:2f:66:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
        Validity
            Not Before: May 18 18:52:26 2023 GMT
            Not After : May 16 18:57:26 2024 GMT
        Subject: CN=4AF0789F693BC6DD7A0B3DB3CEAF97F345CE0F28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:67:37:4b:87:7a:1a:54:df:6b:46:d1:85:f1:
                    e7:64:a2:6c:78:15:39:89:96:91:2c:9a:bc:27:22:
                    2f:d4:17:f6:82:56:f8:18:ef:5f:78:e4:b0:d8:fa:
                    1b:fb:d1:f2:85:00:aa:a3:c5:39:12:ba:19:18:e7:
                    68:cf:0a:59:2b:8a:b1:8e:2b:28:b8:77:8c:1d:5a:
                    b2:bf:b7:aa:6d:e5:b6:e2:4d:d3:83:da:c0:06:91:
                    08:a5:77:11:0d:37:0d:1e:d1:f3:f2:55:79:6f:cf:
                    97:03:80:26:48:67:a9:4c:e7:dc:e8:0a:bc:ae:bf:
                    11:8e:b3:3b:7e:d7:ea:27:9d:c9:1e:e6:13:fe:5f:
                    4b:a7:82:6c:42:a8:d4:69:a3:9a:13:de:b2:b3:4d:
                    28:15:6c:ef:1a:21:3f:72:b0:49:b5:ef:ad:15:7b:
                    65:76:c4:32:6c:1b:1c:fb:b7:04:2d:4a:e1:dd:e8:
                    84:5b:6f:ba:34:7f:f1:15:0e:98:fa:29:52:71:9f:
                    e1:30:87:72:93:90:20:19:d3:97:b5:71:2d:a7:63:
                    f9:e5:33:42:07:0b:16:05:7f:77:7f:22:14:27:46:
                    ea:0b:d1:2e:dd:cd:be:bc:37:77:b1:9a:4d:cd:41:
                    89:1a:ec:33:d3:ef:9f:d0:9d:fa:46:48:b3:82:17:
                    05:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:F0:78:9F:69:3B:C6:DD:7A:0B:3D:B3:CE:AF:97:F3:45:CE:0F:28
            X509v3 Authority Key Identifier:
                keyid:0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3430303a3a2f33382d3338203d3e20323733373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         39:71:2a:46:c8:b9:79:e0:ac:c8:d4:1e:9d:18:7c:b2:00:8e:
         b1:a7:f7:f0:04:86:1a:ed:12:fa:7b:11:e1:2f:45:cc:cc:4c:
         a1:14:6f:af:c4:6f:bc:8b:5b:91:b9:f3:2f:31:a4:43:ca:bd:
         23:58:83:9e:8b:8c:43:80:06:42:ed:27:d1:a4:39:d5:c1:c9:
         58:f1:5c:21:27:97:15:5b:6b:4d:77:35:33:ac:5a:0c:00:d7:
         76:6e:3b:72:03:3c:3e:0d:62:47:a4:09:c4:0d:f5:0d:03:82:
         7d:d3:0d:95:c9:ae:71:64:94:ae:95:e2:ee:48:31:70:e9:b2:
         ee:a4:72:ab:c9:2b:b6:85:e7:d2:b5:86:d1:34:6f:3d:ca:44:
         b0:58:d8:66:f8:dc:49:d2:23:d0:b9:7b:7b:83:9d:1e:02:e2:
         ad:4d:a8:2d:08:fe:65:90:84:64:22:77:e1:51:fb:6f:3e:d6:
         1b:a9:4e:20:61:66:1c:fa:d4:1e:7a:7d:4e:4d:89:8a:97:19:
         03:09:b4:a9:81:0a:2d:84:1f:87:d7:fb:05:bb:e3:5b:6e:6a:
         18:f9:bb:e9:9f:a3:c2:cc:0c:3d:a0:82:3b:20:91:94:87:60:
         59:c0:b5:da:8a:d6:9d:3a:eb:eb:0c:3c:f9:a2:e9:20:01:db:
         f0:af:89:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 03:59:25 2024 by rpki-client on console-fra.rpki-client.org