Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3132383a3a2f34352d3435203d3e20323638313434.roa
File:                     323830343a353862303a3132383a3a2f34352d3435203d3e20323638313434.roa (raw, json)
Hash identifier:          0vnjF4Ajhfj1yld4b7qwylnXVuvNtfrqL1YmYzm1qHc=
Subject key identifier:   54:0C:0F:93:BD:61:4B:F2:34:88:07:3D:F7:E6:3D:E4:F0:21:B9:B3
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       5CF8DC9EDF1216B72E7E8F922B085C7538B987B7
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3132383a3a2f34352d3435203d3e20323638313434.roa
Signing time:             Fri 15 Sep 2023 16:56:00 +0000
ROA not before:           Fri 15 Sep 2023 16:51:00 +0000
ROA not after:            Fri 13 Sep 2024 16:56:00 +0000
asID:                     268144
IP address blocks:        2804:58b0:128::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f8:dc:9e:df:12:16:b7:2e:7e:8f:92:2b:08:5c:75:38:b9:87:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Sep 15 16:51:00 2023 GMT
            Not After : Sep 13 16:56:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4e:9a:f2:6a:5c:25:d1:f2:ea:6f:41:85:2a:
                    04:7e:98:c0:42:e5:b3:ac:ef:60:d2:00:31:a2:d3:
                    08:d7:e0:42:ce:f7:4a:04:8d:0a:68:20:e0:94:f6:
                    2b:1b:c2:36:84:28:2f:30:6d:37:46:38:be:1c:51:
                    3b:e5:4d:e9:86:da:a4:6b:51:86:aa:b3:7a:b9:fa:
                    7f:dc:d7:0e:7f:ae:61:f0:e5:de:f8:25:6c:eb:57:
                    bd:bb:ed:c7:51:a1:b4:6e:e4:69:e5:5c:6f:a1:7f:
                    ae:cd:95:11:7b:3d:44:77:b7:a2:e4:41:00:91:fb:
                    22:fb:1e:f5:76:94:ae:d9:8e:40:f8:c3:22:1c:cb:
                    fa:bf:e8:66:51:ac:e0:58:fd:41:32:db:6d:1b:a1:
                    ee:04:22:bf:28:fc:25:ce:28:54:89:14:94:d2:70:
                    a4:12:8e:2e:1b:d1:86:f0:a7:24:e6:d3:b6:c5:f5:
                    6f:29:77:ce:98:ec:d5:ec:fc:67:67:69:12:ad:1f:
                    da:8a:ea:08:b6:de:01:7f:92:f2:f3:fe:19:93:fe:
                    fe:3e:6d:15:55:3a:51:ed:c8:b2:cd:87:9f:f7:4e:
                    de:bb:9d:07:86:bc:55:3f:da:62:62:5c:95:93:26:
                    f2:f8:78:e8:c3:88:d1:d2:a4:22:71:91:42:8a:55:
                    02:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:0C:0F:93:BD:61:4B:F2:34:88:07:3D:F7:E6:3D:E4:F0:21:B9:B3
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3132383a3a2f34352d3435203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:128::/45

    Signature Algorithm: sha256WithRSAEncryption
         89:89:47:b9:b7:26:56:cf:c8:f3:4d:a8:43:d4:93:f2:1e:65:
         da:06:9c:c6:6f:5a:51:f5:11:81:25:f3:65:14:52:eb:95:2e:
         f6:20:85:b2:1f:1e:ff:5b:d3:03:0c:55:04:7f:0f:5b:ed:ff:
         c2:14:41:0d:f7:6b:ce:14:fc:ae:11:95:ed:2f:af:02:77:3c:
         d9:96:88:d3:de:1a:02:cd:90:2f:75:d6:9f:02:86:86:e0:df:
         8b:a7:ea:a4:00:43:5d:2f:df:82:9e:24:ef:7e:4b:5c:19:6e:
         99:7b:77:89:fb:72:b8:f1:07:de:97:17:16:ff:a1:13:da:d5:
         2e:b1:9d:b0:5e:3d:e2:04:a3:ec:29:5e:c5:52:93:57:1f:1c:
         f6:c4:ec:fa:f4:8b:dd:53:9b:17:7f:83:e0:18:32:f4:f3:66:
         00:ed:b1:f4:ff:73:9f:62:92:e4:98:94:50:cb:e4:1a:cd:39:
         f1:79:89:43:f1:fd:df:b9:54:05:3f:cd:1e:2b:0b:6e:22:14:
         c2:11:cf:1f:df:94:27:bc:3a:4e:98:78:f0:7f:28:10:e8:c3:
         1d:1b:38:95:7e:30:92:c3:d3:07:8d:d6:d9:7d:f9:08:95:97:
         81:a0:86:3e:fe:1a:0e:dd:3c:c9:b6:48:e1:49:c9:0d:60:04:
         82:86:0f:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org