Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3a2f34352d3435203d3e20323638353638.roa
File:                     323830343a353332633a3a2f34352d3435203d3e20323638353638.roa (raw, json)
Hash identifier:          sSbptXVZ/uree6rUxEH2fjkq7m2QLySoUwZlYl7nVpM=
Subject key identifier:   3C:32:EE:2E:00:BB:9F:EB:F2:5C:CA:CF:A6:CD:4A:48:88:02:7C:57
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       6B9425BF63211C53498609FB3F35271E71834ECF
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3a2f34352d3435203d3e20323638353638.roa
Signing time:             Wed 17 Jan 2024 18:02:00 +0000
ROA not before:           Wed 17 Jan 2024 17:57:00 +0000
ROA not after:            Wed 15 Jan 2025 18:02:00 +0000
asID:                     268568
IP address blocks:        2804:532c::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:94:25:bf:63:21:1c:53:49:86:09:fb:3f:35:27:1e:71:83:4e:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Jan 17 17:57:00 2024 GMT
            Not After : Jan 15 18:02:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:c5:f5:c3:b3:5d:8e:81:6f:79:c6:82:ee:48:
                    a7:d1:da:86:b7:16:c7:70:e0:b4:43:99:54:7a:b3:
                    16:09:32:4c:5b:3a:de:57:9f:92:d9:6a:d5:b6:31:
                    2f:38:49:35:a9:6c:51:73:12:26:09:cd:37:6d:a7:
                    a2:e6:c9:0a:46:ea:8f:d7:21:ff:c0:c7:55:0f:02:
                    c3:c7:97:32:db:9e:0a:6e:31:3f:55:8d:32:35:b2:
                    75:83:d6:f3:42:e0:c8:2d:be:3e:98:4e:15:9e:7d:
                    57:dc:60:29:27:16:9b:59:ae:69:ac:e5:75:e8:a1:
                    42:10:f0:b1:fe:40:66:f7:55:ab:c8:d3:26:ac:8a:
                    7e:f9:4b:2f:38:37:42:d5:04:a8:03:14:21:1e:80:
                    33:04:19:0f:8b:3b:0a:49:1f:eb:c3:d2:42:19:c1:
                    a3:92:3e:6f:c4:77:f6:3c:8c:a8:70:88:73:3b:bc:
                    b0:d2:a9:88:d8:23:bc:89:90:44:e0:c4:8a:2a:df:
                    ae:93:a6:db:10:6a:bd:2f:11:2f:85:42:11:0a:65:
                    6c:78:03:24:21:e1:cc:9e:dc:1e:42:a3:47:0e:cf:
                    67:e6:5b:16:41:8d:b7:c4:d3:75:4e:0b:a6:58:ac:
                    05:8d:a4:de:42:c1:07:8b:11:de:a1:a8:ae:54:ec:
                    06:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3C:32:EE:2E:00:BB:9F:EB:F2:5C:CA:CF:A6:CD:4A:48:88:02:7C:57
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353332633a3a2f34352d3435203d3e20323638353638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:532c::/45

    Signature Algorithm: sha256WithRSAEncryption
         18:c1:da:30:94:38:93:27:c3:a3:e3:04:65:ee:c7:6a:4d:a7:
         00:74:96:6a:b5:ca:bc:d0:0c:67:a6:a9:b3:6a:fb:c0:68:35:
         11:a5:a5:80:d2:f5:5d:8d:ed:4b:1e:d1:5d:a3:e3:4e:84:20:
         78:ae:ca:a3:80:ec:c7:24:8e:8f:35:be:21:19:c5:77:2b:e0:
         ea:9a:1d:48:58:30:e9:ec:ee:12:8c:49:1e:86:d4:b9:4e:f9:
         5f:ba:a4:f7:00:d3:3a:c4:f5:00:a6:bc:8e:0b:7f:9f:e0:c7:
         21:97:36:f9:54:b6:c6:5f:f0:2b:55:71:45:cb:2e:ce:b9:05:
         f0:39:8c:f3:2f:b9:24:51:3a:2b:82:14:fd:08:69:3e:5b:fd:
         53:a4:5b:bc:c0:c3:ce:cd:83:b8:c7:e8:fe:57:01:39:51:49:
         04:e6:1c:5b:d9:3a:2c:04:96:a6:22:c9:e1:a7:c3:0a:2d:25:
         12:c2:3e:0b:5d:69:57:74:e7:ae:a9:30:f2:f4:32:22:7d:a9:
         53:90:f8:2e:2f:9a:63:81:89:0b:05:af:3c:a7:4d:d1:13:85:
         a9:ea:a5:0a:9a:ec:07:61:66:fa:34:e1:b9:f5:db:a1:db:60:
         4e:20:44:36:97:6b:79:a6:7d:8a:53:58:84:5b:a5:21:3a:34:
         dd:dc:05:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org