Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a3a2f33322d3332203d3e20323638333632.roa
File:                     323830343a346631383a3a2f33322d3332203d3e20323638333632.roa (raw, json)
Hash identifier:          eRNYDxQU7eyx+hVX/QbAo2u80NLgECunyEU7GTgnPek=
Subject key identifier:   67:F7:47:70:24:BD:E5:CA:F0:10:6F:E2:86:A0:54:20:B7:CE:7A:0A
Certificate issuer:       /CN=7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73
Certificate serial:       1419BE3BD73D451931B93E993A509F91380336CA
Authority key identifier: 7C:A4:D5:46:E6:B2:3F:9E:CA:C6:24:39:F3:30:03:DF:4D:1A:0D:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a3a2f33322d3332203d3e20323638333632.roa
Signing time:             Tue 05 Sep 2023 15:48:32 +0000
ROA not before:           Tue 05 Sep 2023 15:43:32 +0000
ROA not after:            Tue 03 Sep 2024 15:48:32 +0000
asID:                     268362
IP address blocks:        2804:4f18::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:19:be:3b:d7:3d:45:19:31:b9:3e:99:3a:50:9f:91:38:03:36:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73
        Validity
            Not Before: Sep  5 15:43:32 2023 GMT
            Not After : Sep  3 15:48:32 2024 GMT
        Subject: CN=67F7477024BDE5CAF0106FE286A05420B7CE7A0A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:84:c6:7f:b2:98:6f:d3:aa:8d:b9:cc:83:b0:
                    bc:a8:79:de:cf:cc:82:ef:05:c9:27:f2:f3:9e:80:
                    83:11:6b:dc:0e:41:cc:0f:9d:0a:62:e6:f0:e6:ef:
                    04:47:ea:81:9c:29:e0:c1:6b:77:88:e1:f8:1f:4a:
                    4c:7c:84:66:0a:af:fa:72:85:7c:1b:ec:34:20:79:
                    13:f2:ac:d8:2e:3d:6e:85:4b:9d:d2:da:d3:86:b8:
                    7f:ff:80:7e:79:89:eb:9f:2e:29:55:25:c5:ba:91:
                    da:b3:a8:83:03:40:09:a1:35:af:7d:3a:6f:c4:23:
                    40:16:87:ff:97:9a:0b:de:0f:91:e0:7a:0e:44:3e:
                    46:99:7c:fe:f0:f7:38:78:03:d9:e9:50:d6:a7:58:
                    c9:19:92:1e:1b:b3:70:9b:54:c4:f4:d6:db:3c:55:
                    98:6a:c1:62:03:ea:34:e1:a4:ac:94:1d:61:77:0b:
                    93:bf:f1:19:6d:5a:ca:0d:81:d7:08:4e:f6:bc:66:
                    e3:3d:af:e4:a5:7f:bc:9d:7a:76:cd:d9:45:60:dd:
                    87:04:09:14:b4:e1:29:2e:43:cf:17:79:7e:d9:e0:
                    ac:f7:81:9a:91:70:0d:be:c0:8a:85:1c:98:a7:da:
                    bc:c2:55:7e:fc:97:91:d7:b8:27:fe:04:52:26:eb:
                    0f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                67:F7:47:70:24:BD:E5:CA:F0:10:6F:E2:86:A0:54:20:B7:CE:7A:0A
            X509v3 Authority Key Identifier:
                keyid:7C:A4:D5:46:E6:B2:3F:9E:CA:C6:24:39:F3:30:03:DF:4D:1A:0D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a3a2f33322d3332203d3e20323638333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f18::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:10:79:e0:4c:5e:e7:dd:f7:10:8b:67:ad:41:21:96:60:e2:
         fe:1a:78:41:4e:d9:27:cc:c9:93:d5:d9:e4:27:82:c6:6f:3e:
         25:b1:76:4f:fc:61:a4:f6:0a:18:f0:26:7b:4c:a9:5e:a2:d7:
         2c:89:a7:ad:08:f6:0b:4b:4b:0f:82:9e:46:a2:9b:ff:a5:b9:
         a9:ad:46:07:d2:9d:6b:4a:cb:ed:5c:c7:68:a2:b2:9f:1c:bc:
         67:2e:17:26:24:9b:61:24:3e:6d:e7:d6:8b:3f:70:49:0d:88:
         f6:6b:0f:ae:44:af:a9:ba:67:4e:1b:a7:a7:57:ea:f3:db:df:
         72:48:bc:b5:9b:ed:2f:0d:e4:8d:76:ed:70:32:bc:38:3d:7b:
         c9:9b:3f:2e:4b:f0:51:99:ce:09:dc:5e:8a:19:58:ca:6f:ca:
         08:dc:a9:ae:30:85:dd:6d:43:d9:ef:70:4a:e6:69:9c:62:a2:
         f3:cd:31:e8:3f:21:73:c7:1c:de:7c:c9:2b:ec:73:c7:94:0f:
         04:31:3a:31:78:88:70:9c:d0:9a:9c:dd:2f:89:c9:98:1a:f5:
         5c:92:9b:d9:17:a4:2d:e8:9a:7a:30:21:f6:dd:70:17:71:1b:
         9b:8f:6b:d5:fa:b0:0d:35:fa:12:c8:04:f1:9c:71:b2:a4:6e:
         54:24:cb:dc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org