Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a3a2f33362d3336203d3e20323638333632.roa
File:                     323830343a346631383a3a2f33362d3336203d3e20323638333632.roa (raw, json)
Hash identifier:          CVaVRlmB27fWJAiw+BGw5Lc5ivE/bIYv2iwjcbuIFbE=
Subject key identifier:   BF:00:12:0F:C0:A5:7D:F3:AC:EC:32:C1:41:AF:EB:B0:20:BC:72:2D
Certificate issuer:       /CN=7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73
Certificate serial:       4FD5A8992EBC9C184F94245E8A8A2D1F742FAB0C
Authority key identifier: 7C:A4:D5:46:E6:B2:3F:9E:CA:C6:24:39:F3:30:03:DF:4D:1A:0D:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a3a2f33362d3336203d3e20323638333632.roa
Signing time:             Tue 05 Sep 2023 15:48:31 +0000
ROA not before:           Tue 05 Sep 2023 15:43:31 +0000
ROA not after:            Tue 03 Sep 2024 15:48:31 +0000
asID:                     268362
IP address blocks:        2804:4f18::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:d5:a8:99:2e:bc:9c:18:4f:94:24:5e:8a:8a:2d:1f:74:2f:ab:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73
        Validity
            Not Before: Sep  5 15:43:31 2023 GMT
            Not After : Sep  3 15:48:31 2024 GMT
        Subject: CN=BF00120FC0A57DF3ACEC32C141AFEBB020BC722D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:92:c9:26:38:68:88:1a:17:ba:0a:9f:fe:a0:
                    69:61:ef:b8:95:56:55:d0:de:04:91:7f:7d:e7:3d:
                    b5:a7:f4:33:bd:0f:6f:48:dd:f3:dc:ff:e6:ef:d3:
                    78:d2:3c:76:a9:4a:5b:26:4d:51:77:7c:91:64:e2:
                    7f:f8:85:74:84:be:88:fa:9e:61:81:5e:86:3e:55:
                    b4:88:2a:cc:e3:aa:bd:28:c0:39:0b:00:10:0f:fa:
                    a5:15:36:e5:84:a4:2d:70:37:9d:26:c6:c6:e5:a7:
                    b5:a4:ab:27:ff:6d:59:f1:47:23:4e:4a:d1:2f:42:
                    8c:cd:92:a6:7a:a0:dc:c4:86:d9:f2:4c:5b:54:d2:
                    11:91:b9:9e:e0:fb:84:a4:93:2d:c5:98:3c:bc:6e:
                    65:69:b6:26:8d:92:22:07:99:a2:fc:5d:14:84:74:
                    25:c3:a1:1f:7b:5d:14:3e:4a:da:28:64:7c:d0:6f:
                    e9:0c:9d:e9:b0:5c:5f:45:78:d4:b5:c6:a5:f3:a9:
                    26:08:99:20:a2:32:fc:48:d4:52:24:d8:cf:be:02:
                    8b:90:64:59:e2:65:b7:46:c1:64:fa:20:c7:53:cf:
                    fe:46:b4:a0:66:36:10:89:d7:6a:01:d8:d3:a1:2c:
                    97:3d:9f:5c:bb:a6:12:db:28:fe:57:54:06:0a:6c:
                    24:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:00:12:0F:C0:A5:7D:F3:AC:EC:32:C1:41:AF:EB:B0:20:BC:72:2D
            X509v3 Authority Key Identifier:
                keyid:7C:A4:D5:46:E6:B2:3F:9E:CA:C6:24:39:F3:30:03:DF:4D:1A:0D:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7CA4D546E6B23F9ECAC62439F33003DF4D1A0D73.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/0/323830343a346631383a3a2f33362d3336203d3e20323638333632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f18::/36

    Signature Algorithm: sha256WithRSAEncryption
         2a:6f:ff:67:49:34:0f:02:1e:57:1d:a6:d6:30:95:0a:e9:b4:
         05:40:10:b1:f7:ff:db:e2:fb:b3:d0:1b:df:54:70:17:3b:90:
         80:5f:ce:b0:b0:a1:01:73:57:84:1e:60:da:95:89:ad:fa:2b:
         8f:4d:e1:af:e4:22:b5:67:10:b6:74:b7:2a:5e:6c:87:03:bb:
         2e:5a:cc:bb:e3:50:d6:1d:0b:fa:3a:42:60:8d:7d:6a:67:5a:
         25:f4:5c:90:9f:83:49:e7:2e:f3:05:32:06:27:48:c9:a2:5c:
         56:a1:42:09:06:bf:ac:5e:d1:bb:de:2f:ce:64:b9:1f:3f:3f:
         f5:b7:d7:98:2a:49:06:ed:35:0e:43:1b:28:eb:c1:17:9f:cb:
         2b:86:e9:4d:58:2b:77:6c:16:9b:f9:06:8a:5f:47:cf:cc:d9:
         d8:7d:a7:09:49:df:68:f9:bd:d5:79:9b:94:ac:50:c4:17:05:
         1c:09:98:09:f2:64:88:51:b5:13:82:d4:6f:0d:00:66:e1:b8:
         ff:d5:c0:e2:f3:b5:49:00:b6:2e:54:a9:0f:ac:53:9d:fe:aa:
         67:0b:11:fc:7d:db:77:78:f1:94:ab:5d:c6:7f:51:91:a2:2b:
         b0:33:aa:3b:ee:d2:95:9c:4c:5d:d2:3e:1e:34:e0:ef:29:91:
         87:e9:d4:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org