Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/323830343a363137633a633030303a3a2f33342d3334203d3e2032363932333738.roa
File:                     323830343a363137633a633030303a3a2f33342d3334203d3e2032363932333738.roa (raw, json)
Hash identifier:          khxjmWeqX5PFdhkN3iXaqsAE6mzmbeptV6VCithlceQ=
Subject key identifier:   A0:73:C4:01:25:40:5C:3F:2B:1E:52:0D:1A:6F:1B:BF:34:9F:68:BB
Certificate issuer:       /CN=246240EE97BDDD180E05F94C2857F823EA20229D
Certificate serial:       61090F9B6F84B1D6908FB46ABC095B4B3B45CC2B
Authority key identifier: 24:62:40:EE:97:BD:DD:18:0E:05:F9:4C:28:57:F8:23:EA:20:22:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246240EE97BDDD180E05F94C2857F823EA20229D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/323830343a363137633a633030303a3a2f33342d3334203d3e2032363932333738.roa
Signing time:             Sat 29 Apr 2023 03:40:00 +0000
ROA not before:           Sat 29 Apr 2023 03:35:00 +0000
ROA not after:            Sat 27 Apr 2024 03:40:00 +0000
asID:                     2692378
IP address blocks:        2804:617c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:09:0f:9b:6f:84:b1:d6:90:8f:b4:6a:bc:09:5b:4b:3b:45:cc:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=246240EE97BDDD180E05F94C2857F823EA20229D
        Validity
            Not Before: Apr 29 03:35:00 2023 GMT
            Not After : Apr 27 03:40:00 2024 GMT
        Subject: CN=A073C40125405C3F2B1E520D1A6F1BBF349F68BB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:e8:5a:4d:23:06:41:23:41:bd:cc:b3:ae:27:
                    2c:d6:c5:2d:96:09:d5:87:d6:67:bb:c7:15:04:53:
                    9d:85:ed:f9:a9:38:d7:eb:60:40:53:fa:b3:de:ed:
                    3b:b0:2c:54:8c:e3:d5:55:aa:0e:50:05:5a:65:7d:
                    db:e0:80:d4:85:0d:c8:e0:18:fd:18:d5:77:39:d5:
                    81:12:22:07:56:e9:75:c9:d1:34:84:e9:fe:ec:81:
                    ba:26:8e:cd:6d:4d:66:86:50:55:87:57:20:de:aa:
                    df:ae:c2:9f:54:6c:1a:76:78:c9:2c:42:b6:f1:43:
                    0c:f0:3d:26:a1:2e:f0:f0:8a:e7:7f:5d:d1:8f:46:
                    0e:53:2f:3f:bd:80:8d:3e:a3:42:4d:7f:f7:02:b5:
                    da:2e:cf:35:73:15:23:0d:fe:89:6b:7b:a7:f9:fd:
                    ba:bf:42:a5:f8:2f:6f:37:2c:97:e7:57:84:9f:98:
                    25:93:81:43:13:6a:95:55:8a:15:00:01:74:1f:03:
                    79:4b:d1:8c:31:24:2a:c8:d8:a2:42:45:7b:ab:82:
                    2a:2a:14:e2:5a:7e:64:e3:a1:1c:48:59:8c:8a:4b:
                    cd:c8:21:48:bb:62:e1:ca:20:65:5e:65:0e:8f:19:
                    8e:a7:31:ae:8b:c5:86:1d:c9:49:72:6e:2e:c6:03:
                    bb:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:73:C4:01:25:40:5C:3F:2B:1E:52:0D:1A:6F:1B:BF:34:9F:68:BB
            X509v3 Authority Key Identifier:
                keyid:24:62:40:EE:97:BD:DD:18:0E:05:F9:4C:28:57:F8:23:EA:20:22:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/246240EE97BDDD180E05F94C2857F823EA20229D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/246240EE97BDDD180E05F94C2857F823EA20229D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hjouopXAoFWWeqMgkV7M3tQSTE72TwqXi2ck39TngEg/0/323830343a363137633a633030303a3a2f33342d3334203d3e2032363932333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:617c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         12:79:a3:09:60:2a:ad:df:1a:e8:5d:87:b9:ed:da:a3:8c:ce:
         32:12:4f:93:b4:d5:12:0b:5e:65:63:ac:dd:26:08:2e:c0:a7:
         3e:c3:4c:16:93:6c:76:94:85:4f:aa:f8:34:a7:a6:41:0f:11:
         97:70:0f:63:b9:4a:28:0a:8f:d2:88:49:91:e9:73:f2:a7:8f:
         c1:08:47:5b:7f:73:72:00:4b:ce:40:f1:8a:ea:b0:0a:20:8a:
         16:0d:48:62:4b:00:6d:b1:59:22:7c:95:be:ff:07:dc:1b:9d:
         e0:3b:45:8b:4b:d8:6c:5a:b2:62:a6:51:cd:94:a6:7a:b9:4f:
         c0:fa:c4:a8:db:9d:b2:07:7c:42:04:55:48:6c:58:03:79:ba:
         1e:b6:5d:a2:0d:53:13:a2:b3:13:0d:0c:1f:db:a9:b9:71:f1:
         9a:3e:44:5d:7b:32:4d:bc:6b:8a:83:02:7a:de:52:ce:d3:9c:
         70:5d:b0:e9:6d:6c:2f:c7:db:d8:bc:5e:c0:2a:74:f4:3c:b5:
         c4:59:16:21:38:cd:91:a1:19:0c:44:a0:f2:7d:36:fc:25:11:
         be:6f:e2:9b:9a:dd:9e:76:04:1f:c1:0d:7d:c9:1b:30:6d:bd:
         3b:c3:48:4f:a3:a8:d1:a5:82:c0:69:cf:c0:89:d5:25:fa:fd:
         d5:8d:38:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:03 2024 by rpki-client on console-ams.rpki-client.org