Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a363030303a3a2f33352d3335203d3e20323637353030.roa
File:                     323830343a343237303a363030303a3a2f33352d3335203d3e20323637353030.roa (raw, json)
Hash identifier:          Z1Cs9spK201WexW01mvGOknUe/b+qDTxBFqK2v89GXw=
Subject key identifier:   C4:D4:2F:88:E2:BB:C0:16:03:53:F4:71:AF:D5:AB:2A:B6:C7:A6:F1
Certificate issuer:       /CN=DC87FD17B08D997E8AF16B7244EF356D2F194C83
Certificate serial:       451B342B7E5C70A98992B5659C12F6F30BC2E06E
Authority key identifier: DC:87:FD:17:B0:8D:99:7E:8A:F1:6B:72:44:EF:35:6D:2F:19:4C:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC87FD17B08D997E8AF16B7244EF356D2F194C83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a363030303a3a2f33352d3335203d3e20323637353030.roa
Signing time:             Fri 09 Feb 2024 20:28:48 +0000
ROA not before:           Fri 09 Feb 2024 20:23:48 +0000
ROA not after:            Fri 07 Feb 2025 20:28:48 +0000
asID:                     267500
IP address blocks:        2804:4270:6000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:1b:34:2b:7e:5c:70:a9:89:92:b5:65:9c:12:f6:f3:0b:c2:e0:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC87FD17B08D997E8AF16B7244EF356D2F194C83
        Validity
            Not Before: Feb  9 20:23:48 2024 GMT
            Not After : Feb  7 20:28:48 2025 GMT
        Subject: CN=C4D42F88E2BBC0160353F471AFD5AB2AB6C7A6F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:95:42:13:87:82:d5:7c:75:ce:4a:f0:ae:e8:
                    e6:e4:c3:b0:63:05:b4:56:06:e6:f2:bb:dd:83:fe:
                    ef:2a:bd:b2:1b:4c:1f:8f:f9:96:57:3e:dd:33:fb:
                    f7:46:64:40:49:4b:d5:44:3b:f0:42:9e:ec:b0:09:
                    d7:b1:79:0f:ba:2b:3d:6b:5c:2a:48:46:4f:2d:c8:
                    c3:f1:94:50:07:14:d2:1e:34:ca:78:6c:b3:d9:b9:
                    94:53:4d:26:de:57:68:47:55:a5:49:7a:94:f8:53:
                    f4:bc:2e:26:88:6a:d6:10:37:6f:c6:ea:a7:c7:e0:
                    da:d1:39:fc:84:e6:10:14:26:66:b3:9e:f7:2b:d2:
                    29:4a:78:89:ce:47:4d:d7:fe:8c:80:b0:e4:6d:1e:
                    fe:74:00:9a:84:17:10:2a:24:57:7f:7a:f2:10:d4:
                    9b:5e:3f:e2:ce:92:9e:ca:f6:34:66:c8:0b:93:c1:
                    4e:ae:31:82:bd:23:36:c0:35:d4:cd:86:a4:a7:32:
                    b0:f5:e5:b4:f9:db:0b:9b:98:db:ae:c9:b6:56:e9:
                    cc:2c:1a:0c:74:04:cc:fa:7e:97:75:19:c6:41:29:
                    76:67:8d:0a:30:c4:26:51:f2:f7:94:1a:19:56:bb:
                    e4:8c:1c:16:79:44:87:5f:cf:e6:cc:3b:4a:0d:01:
                    d6:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:D4:2F:88:E2:BB:C0:16:03:53:F4:71:AF:D5:AB:2A:B6:C7:A6:F1
            X509v3 Authority Key Identifier:
                keyid:DC:87:FD:17:B0:8D:99:7E:8A:F1:6B:72:44:EF:35:6D:2F:19:4C:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/DC87FD17B08D997E8AF16B7244EF356D2F194C83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC87FD17B08D997E8AF16B7244EF356D2F194C83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a363030303a3a2f33352d3335203d3e20323637353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4270:6000::/35

    Signature Algorithm: sha256WithRSAEncryption
         79:43:e0:64:3a:80:b9:d7:fe:2e:78:d9:bf:45:58:db:22:08:
         62:54:8e:35:79:c3:46:28:1c:dd:20:b8:1e:01:33:98:83:63:
         84:55:f3:02:d2:87:72:59:6c:39:e7:81:a5:b5:0f:90:89:ce:
         2b:c4:f5:7a:32:b2:c3:27:a7:96:2f:ed:35:40:f9:90:a9:ea:
         f4:de:1d:66:80:31:66:45:e5:f3:9d:6b:fb:e6:73:e8:2e:a1:
         b7:d5:2f:22:ea:d9:b5:e8:3b:70:cc:0b:b1:3a:26:74:a6:16:
         fd:3f:bd:be:62:94:f2:69:cc:7e:ff:14:8c:cf:43:29:02:9f:
         bb:d9:be:e5:e0:d4:84:e9:40:0a:47:71:ba:e3:22:7c:ef:30:
         0f:f2:7d:12:84:ab:bb:e8:cb:cd:9a:de:eb:47:40:11:c0:41:
         9c:1e:79:96:59:b8:41:49:d4:c4:a7:ee:86:ee:30:54:df:f3:
         a0:49:00:1a:0c:8d:1b:5b:e9:35:1f:7d:51:4d:69:31:9d:f9:
         b6:e5:9c:91:93:48:82:12:aa:87:ac:ce:0f:d6:3a:a3:43:8b:
         b8:3b:55:96:b7:ea:89:fe:ab:64:c2:1c:e4:8e:39:27:d0:63:
         5d:18:7d:ec:e7:4d:79:86:6e:c7:a1:82:97:69:e3:87:64:e5:
         a0:53:39:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org