Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3132343a3a2f34362d3436203d3e20323638313434.roa
File:                     323830343a353862303a3132343a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier:          WHxMVso8dPHif8GqTu5HmnDNf40z8vlCdO82nlA3Z6Y=
Subject key identifier:   AC:38:02:46:34:E8:7D:9A:18:A9:85:00:1A:CD:89:5E:06:A5:5F:85
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       145A556B40C96539235DA9AEDE948347275CA810
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3132343a3a2f34362d3436203d3e20323638313434.roa
Signing time:             Fri 14 Oct 2022 16:54:06 +0000
ROA not before:           Fri 14 Oct 2022 16:49:06 +0000
ROA not after:            Fri 13 Oct 2023 16:54:06 +0000
asID:                     268144
IP address blocks:        2804:58b0:124::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:5a:55:6b:40:c9:65:39:23:5d:a9:ae:de:94:83:47:27:5c:a8:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Oct 14 16:49:06 2022 GMT
            Not After : Oct 13 16:54:06 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:8f:ad:7c:18:09:66:7a:5d:bf:d5:4f:d4:a8:
                    67:59:6a:ae:55:de:aa:a5:17:c6:83:df:33:33:53:
                    be:5f:72:a0:f1:86:7e:17:e1:ad:f8:2c:41:b0:80:
                    71:77:b9:72:4b:0f:93:08:23:35:a5:c2:4e:b0:ac:
                    a2:4f:23:36:aa:6f:3b:8a:4e:d2:6a:9c:9f:93:3c:
                    4b:25:87:a9:2b:c1:a3:df:98:74:df:0e:56:40:64:
                    bb:87:a7:4c:ea:20:51:28:be:71:dc:a5:95:7c:90:
                    e6:01:f4:1c:ec:f9:59:94:bf:f6:b3:3b:4d:df:a6:
                    dd:05:82:ec:3d:5b:ce:b2:78:b8:5f:6d:bc:bc:78:
                    9e:66:a1:e4:22:90:cb:6b:66:e9:1b:b1:57:86:04:
                    45:09:e3:91:71:d6:6c:ad:53:10:97:d9:8c:9a:f9:
                    ec:02:b6:c5:0c:ab:04:e8:c3:39:bb:47:52:33:aa:
                    0c:ee:32:32:83:bf:c4:40:bf:88:a1:23:4c:4b:78:
                    87:04:79:f7:ea:a2:30:5d:15:0d:59:bd:ea:74:18:
                    03:c2:19:96:21:3d:17:80:db:7a:18:4f:5d:da:8b:
                    64:ca:bd:1d:c1:41:d7:a2:c7:34:96:26:cf:e2:a8:
                    05:b9:6d:5e:a5:bf:c3:0b:32:40:57:69:c9:51:99:
                    ef:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:38:02:46:34:E8:7D:9A:18:A9:85:00:1A:CD:89:5E:06:A5:5F:85
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3132343a3a2f34362d3436203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:124::/46

    Signature Algorithm: sha256WithRSAEncryption
         7e:df:69:df:0b:52:15:63:85:fd:ef:a0:bf:75:ac:c3:ec:6a:
         37:ad:39:cb:e7:5d:02:d0:ec:8d:86:d6:21:95:b6:6b:7d:83:
         7c:c8:66:25:02:9b:55:8c:46:7d:8b:9b:76:98:0b:60:bc:a9:
         28:cd:06:20:16:a0:26:a9:de:6d:09:d9:1f:f9:43:a8:1e:88:
         b7:60:16:36:a7:20:f1:e2:b3:40:7c:87:58:bc:36:73:ba:98:
         5f:45:1e:fc:7e:3c:b3:9f:75:a5:fd:bb:11:77:06:05:b6:e1:
         2c:74:92:54:9e:2f:af:d7:42:40:f2:0b:2a:00:61:f2:da:12:
         d9:32:d6:c6:e4:4f:08:ae:54:19:aa:1f:84:ed:95:4b:f3:bc:
         3d:b0:54:10:86:1b:a8:e6:5d:e3:a9:dd:0c:8f:a4:55:bc:a1:
         0c:1d:a2:09:01:ff:24:8c:0d:ee:56:a3:e0:0d:51:74:9b:cf:
         1d:be:8b:9f:f6:c2:39:74:50:fb:4d:de:f4:30:46:50:a4:67:
         9b:d6:b3:be:e2:51:c8:7b:de:5c:f6:95:cf:34:4c:ae:5c:27:
         c6:6f:17:f5:fa:37:95:57:76:50:4e:b3:e6:a2:41:01:7a:fe:
         6c:95:3a:58:c7:8f:5b:08:3d:cf:69:5e:e7:78:e5:1b:61:b8:
         17:6e:96:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org