Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a383030303a3a2f33342d3334203d3e20323637353030.roa
File:                     323830343a343237303a383030303a3a2f33342d3334203d3e20323637353030.roa (raw, json)
Hash identifier:          SKzwHqxwlr+PYh5UANfZIscWgN43mVl2fFDWwwAXzDk=
Subject key identifier:   4B:86:45:2F:7A:E2:74:B0:A2:C1:A3:B7:24:C3:93:53:D1:13:E5:5C
Certificate issuer:       /CN=DC87FD17B08D997E8AF16B7244EF356D2F194C83
Certificate serial:       57B21008AB90298B4286006ACB96CA5070565066
Authority key identifier: DC:87:FD:17:B0:8D:99:7E:8A:F1:6B:72:44:EF:35:6D:2F:19:4C:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC87FD17B08D997E8AF16B7244EF356D2F194C83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a383030303a3a2f33342d3334203d3e20323637353030.roa
Signing time:             Fri 09 Feb 2024 20:28:48 +0000
ROA not before:           Fri 09 Feb 2024 20:23:48 +0000
ROA not after:            Fri 07 Feb 2025 20:28:48 +0000
asID:                     267500
IP address blocks:        2804:4270:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b2:10:08:ab:90:29:8b:42:86:00:6a:cb:96:ca:50:70:56:50:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC87FD17B08D997E8AF16B7244EF356D2F194C83
        Validity
            Not Before: Feb  9 20:23:48 2024 GMT
            Not After : Feb  7 20:28:48 2025 GMT
        Subject: CN=4B86452F7AE274B0A2C1A3B724C39353D113E55C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:0a:99:b5:eb:69:ce:2f:6f:bd:17:cc:c8:34:
                    6b:e0:eb:26:3d:40:14:ec:82:9e:15:75:87:9c:b7:
                    75:2d:f2:40:75:f3:c1:a8:ba:c7:43:18:5c:a5:68:
                    11:46:a3:fe:5a:55:ce:cc:a6:db:ff:4e:9c:5e:29:
                    a6:1d:99:f2:76:46:b9:d6:4a:05:43:e9:55:28:53:
                    97:0b:47:4d:ad:d9:77:87:20:73:a9:9e:1b:54:d1:
                    ee:9d:dc:16:74:2a:31:7c:e1:88:3c:9c:bc:97:0e:
                    b7:f7:77:32:4c:ef:da:8e:a3:c8:b8:be:5b:80:79:
                    8e:85:9d:f2:8d:b3:af:d0:b3:e4:c1:86:bf:c2:92:
                    73:76:c6:a5:fb:73:9a:a2:aa:ce:85:73:37:13:ee:
                    f0:47:7f:4a:40:fe:d1:ca:45:50:7a:14:24:38:f5:
                    6f:e5:e3:11:a4:12:74:e2:d8:3c:84:cb:08:03:92:
                    3e:c8:92:80:e7:19:25:4a:f4:6d:a5:d0:ff:43:01:
                    2f:b9:e3:a0:88:95:f4:da:78:53:da:43:6e:d6:e9:
                    b4:4b:56:ed:38:63:fb:c1:69:e3:73:d1:6e:ac:25:
                    50:13:aa:05:49:3f:9a:68:88:54:1b:65:8c:25:f8:
                    b9:2c:fb:29:94:fc:ad:fb:2f:33:15:2e:fd:08:6a:
                    f3:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:86:45:2F:7A:E2:74:B0:A2:C1:A3:B7:24:C3:93:53:D1:13:E5:5C
            X509v3 Authority Key Identifier:
                keyid:DC:87:FD:17:B0:8D:99:7E:8A:F1:6B:72:44:EF:35:6D:2F:19:4C:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/DC87FD17B08D997E8AF16B7244EF356D2F194C83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC87FD17B08D997E8AF16B7244EF356D2F194C83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a383030303a3a2f33342d3334203d3e20323637353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4270:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:6e:b2:ec:ef:74:ce:6f:c5:78:86:bd:56:ef:f7:0d:fc:ce:
         44:8f:9c:a7:2c:94:4c:fa:5f:9d:cd:01:d7:cf:19:08:df:19:
         1b:80:c7:c9:65:77:8e:c2:b0:78:d9:44:01:cc:40:74:60:3a:
         27:22:aa:0f:2e:27:c3:d1:24:82:ed:01:89:00:5a:ad:5a:bd:
         21:e3:39:76:35:f2:80:08:f2:99:35:eb:a6:d9:46:0a:69:05:
         c1:08:33:53:55:6c:8c:f0:8e:0f:79:21:c9:37:9c:7c:55:b9:
         64:cf:ba:8e:b4:36:57:1d:c8:a4:17:77:b4:38:3d:2f:fa:68:
         3d:b8:5b:85:ec:10:80:f6:ac:04:23:33:cb:b1:a7:e2:3f:a6:
         2a:38:2d:5b:f3:7e:4f:ce:33:00:0b:6c:5d:4f:2e:2a:be:c6:
         41:75:6a:e1:61:b2:e7:b9:b5:6d:71:fa:23:9e:36:7b:44:cd:
         4b:fa:84:21:03:9c:e0:e9:ae:35:e0:ba:13:17:d6:21:ec:c4:
         de:18:b5:78:08:2b:e3:ba:d1:33:43:61:74:be:f1:e9:d5:2c:
         84:9b:3d:42:ed:d8:10:4b:16:e0:f6:76:d5:b1:72:67:93:f6:
         df:ea:61:02:5a:1e:bd:d5:c8:18:ea:4b:03:de:8c:aa:42:8d:
         2e:13:f0:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org