Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          SgbY77TKGkGxGgc/jKc+0g/qtBoNfliu2YxUKuCIF8w=
Subject key identifier:   ED:31:EC:BA:C5:BD:7E:50:5A:90:0D:7D:3B:0A:02:F4:EE:CD:1A:DE
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       4C631D092C39C6D59072F24691BBBF7DCFD24AC3
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Wed 03 Jan 2024 03:10:01 +0000
ROA not before:           Wed 03 Jan 2024 03:05:01 +0000
ROA not after:            Wed 01 Jan 2025 03:10:01 +0000
asID:                     268568
IP address blocks:        2804:532c:120::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:63:1d:09:2c:39:c6:d5:90:72:f2:46:91:bb:bf:7d:cf:d2:4a:c3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan  3 03:05:01 2024 GMT
            Not After : Jan  1 03:10:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:58:4e:82:ab:9e:ec:92:87:df:96:31:40:17:
                    60:ff:d9:f0:58:a4:94:37:4a:78:f7:3b:ed:7d:15:
                    75:61:f3:a9:2c:cd:eb:c7:13:52:73:73:b3:05:02:
                    7b:7f:7a:93:a8:59:1d:25:61:97:f7:e7:39:36:4f:
                    b5:04:ba:46:b5:3b:c0:8b:c6:11:46:95:ea:9a:e5:
                    51:04:2b:95:e2:4b:a2:03:83:09:53:80:60:7f:a3:
                    fb:a6:35:9c:77:f0:c3:a9:d3:37:21:8b:b8:3d:dc:
                    e2:ce:db:a9:24:da:04:7c:46:b4:b1:c3:b4:eb:ba:
                    a8:4f:cb:db:29:b7:13:92:f9:b5:7c:e0:e9:97:a7:
                    c0:0f:34:a5:30:0f:7a:0a:bc:2f:81:f9:05:0a:2c:
                    56:54:32:60:3b:09:76:7a:76:38:66:6e:4c:84:19:
                    3e:67:b6:69:9d:8b:15:d4:65:08:f4:6a:4c:c4:6b:
                    d2:fa:d6:e0:7f:2a:da:2c:d9:5f:3d:62:db:6f:b8:
                    5b:43:70:73:a3:71:da:2b:5b:f0:2a:db:d8:e8:77:
                    06:d8:5e:a5:49:0e:92:94:0f:01:6e:85:e1:df:93:
                    f9:3b:54:1a:67:8f:d8:07:a9:e1:fc:0c:60:98:59:
                    50:7e:a0:e7:0a:ee:86:33:01:c2:06:85:02:fe:28:
                    7f:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:31:EC:BA:C5:BD:7E:50:5A:90:0D:7D:3B:0A:02:F4:EE:CD:1A:DE
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3132303a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c:120::/45

    Signature Algorithm: sha256WithRSAEncryption
         c0:6a:d0:91:27:67:a5:2f:13:79:7e:d7:9a:3b:12:1b:ab:f2:
         df:63:88:61:b9:7d:c7:90:64:e0:6a:c1:d9:1b:b0:85:0c:b9:
         c2:03:38:fd:aa:38:eb:a4:66:68:75:8e:31:8f:05:b7:07:94:
         9d:6b:29:b8:6c:47:1f:ba:f3:ed:e3:1c:4d:b6:01:55:aa:2f:
         05:42:d9:a7:ff:55:d6:bb:9f:f1:46:c2:36:13:01:73:38:d7:
         31:86:00:98:55:97:32:9a:b1:5b:0e:fa:f2:bb:69:fa:34:cf:
         cf:14:af:1a:ee:5d:64:46:42:a0:92:05:ec:7e:9b:40:c0:0f:
         e9:4e:08:ed:a3:a6:4e:ff:c5:0c:e2:90:08:86:d9:6a:64:ed:
         d0:7a:77:06:47:fc:bb:70:ef:fd:97:4d:69:68:88:87:44:38:
         31:d7:f1:9f:40:9b:93:21:9e:b2:f8:cf:d4:d0:7a:db:6e:eb:
         8e:13:2f:c0:d2:5a:37:a2:41:72:1f:97:c4:61:4d:05:33:1e:
         6d:2a:2b:f7:98:5c:56:95:bf:10:cc:d1:53:41:8f:88:82:d4:
         e3:08:c7:67:1a:06:d7:48:0f:63:7e:a1:f1:99:72:57:96:89:
         7e:d9:30:0a:ed:05:5d:18:b6:ba:02:b1:c1:7f:2b:5e:d8:af:
         d8:a4:86:db
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org