Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a633030303a3a2f33342d3334203d3e20323637353030.roa
File:                     323830343a343237303a633030303a3a2f33342d3334203d3e20323637353030.roa (raw, json)
Hash identifier:          e9Y2DvfzlxRk7YvNZ+BxGwNKA5tupswG1fpRg+Rqrco=
Subject key identifier:   7C:86:DB:8B:9E:9B:E0:6F:C6:10:B0:6E:E3:B3:84:86:2E:3B:47:2B
Certificate issuer:       /CN=DC87FD17B08D997E8AF16B7244EF356D2F194C83
Certificate serial:       460D4B8F9AE3464AEC956B9FACD4123FB1C03952
Authority key identifier: DC:87:FD:17:B0:8D:99:7E:8A:F1:6B:72:44:EF:35:6D:2F:19:4C:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC87FD17B08D997E8AF16B7244EF356D2F194C83.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a633030303a3a2f33342d3334203d3e20323637353030.roa
Signing time:             Fri 09 Feb 2024 20:28:48 +0000
ROA not before:           Fri 09 Feb 2024 20:23:48 +0000
ROA not after:            Fri 07 Feb 2025 20:28:48 +0000
asID:                     267500
IP address blocks:        2804:4270:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:0d:4b:8f:9a:e3:46:4a:ec:95:6b:9f:ac:d4:12:3f:b1:c0:39:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DC87FD17B08D997E8AF16B7244EF356D2F194C83
        Validity
            Not Before: Feb  9 20:23:48 2024 GMT
            Not After : Feb  7 20:28:48 2025 GMT
        Subject: CN=7C86DB8B9E9BE06FC610B06EE3B384862E3B472B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7a:fc:1f:82:86:33:78:fb:08:36:af:d5:75:
                    4c:83:d1:5d:0c:71:39:33:2a:86:7f:70:3e:f8:17:
                    1d:b8:02:84:35:f3:d3:fd:8d:47:1a:d9:bd:90:e2:
                    f1:a4:85:34:ed:41:0e:03:7e:41:1d:a3:4e:62:f7:
                    59:b7:b1:94:4f:cc:71:73:b8:a5:de:1d:b9:21:95:
                    e4:28:2b:6e:19:d2:aa:94:04:5a:1c:66:dd:df:20:
                    6a:7a:1b:18:bb:7a:2c:ee:b1:c7:f9:b4:7c:ca:93:
                    36:54:bf:35:d7:d2:ca:d2:b3:cc:04:67:4c:00:3c:
                    18:9d:7b:a3:6a:8c:55:50:28:1a:ee:16:fa:ff:1e:
                    09:7e:c1:13:e8:00:76:c3:ed:af:94:18:9e:8b:95:
                    93:57:4e:67:9f:fe:b5:6c:4f:79:b9:33:53:d1:24:
                    09:4a:c8:1a:56:20:e9:f9:a7:bc:8b:a6:57:11:a5:
                    20:c0:85:32:89:a5:57:8d:85:fa:e0:ea:d1:09:04:
                    6d:61:1e:ca:bc:55:80:d8:a2:74:b2:6c:6c:d6:d1:
                    ff:81:5c:26:ba:f8:59:38:4c:e0:f1:9b:af:80:c0:
                    fe:28:65:d5:14:e9:39:50:b6:c0:a3:76:b5:55:83:
                    01:0a:31:02:06:72:d8:60:3f:9c:7d:e6:a3:bb:99:
                    18:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:86:DB:8B:9E:9B:E0:6F:C6:10:B0:6E:E3:B3:84:86:2E:3B:47:2B
            X509v3 Authority Key Identifier:
                keyid:DC:87:FD:17:B0:8D:99:7E:8A:F1:6B:72:44:EF:35:6D:2F:19:4C:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/DC87FD17B08D997E8AF16B7244EF356D2F194C83.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DC87FD17B08D997E8AF16B7244EF356D2F194C83.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9FdWwhU5kNpk26r9GYfDjVspfGGZjaK6fULtTZMQpB7B/0/323830343a343237303a633030303a3a2f33342d3334203d3e20323637353030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4270:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:80:51:be:0b:cc:81:86:32:45:c4:40:bd:3e:60:1e:cc:ee:
         26:bc:de:c4:00:fe:55:d6:76:fb:43:c4:3f:41:e7:13:21:83:
         4c:b6:89:0c:5b:2a:7b:b6:b5:83:22:f5:cf:95:97:8b:13:ef:
         13:11:1b:d1:cf:9b:70:5b:03:a9:d8:55:5c:67:b2:2e:dd:70:
         b0:02:7f:45:9b:9d:67:ae:e8:2d:9d:32:03:d9:5b:30:92:c7:
         d6:fd:89:75:4f:26:c0:b9:52:88:44:e2:4b:e7:51:d0:52:1a:
         e5:8c:62:0b:75:80:87:ef:b3:72:aa:63:f3:75:a8:d3:57:57:
         1b:2b:6e:9b:d6:59:07:db:35:a4:d4:d2:5f:64:af:75:fc:62:
         23:ef:89:3f:ef:74:95:87:18:f0:1e:10:ab:4a:59:f5:c7:97:
         6e:55:1c:ff:2a:fd:b9:46:d2:fd:8c:88:87:6e:c4:01:80:85:
         b7:8e:cd:fb:11:fa:03:1a:20:b0:66:ab:03:69:3d:a6:f2:31:
         e9:21:37:08:1a:71:9c:31:1b:3f:3d:d2:b9:28:2c:26:c9:03:
         ec:80:23:1a:48:82:32:e3:dd:d4:b0:84:e7:ee:61:3e:7a:c0:
         20:4e:ac:1d:34:28:8e:43:f1:da:0f:b4:31:1a:95:5e:d4:0d:
         4b:1b:60:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org