Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133303a3a2f34362d3436203d3e20323638313434.roa
File:                     323830343a353862303a3133303a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier:          PH3ctQU4+K01l5v1SDfBSpOdx96OgbWceuwxgVzXmXw=
Subject key identifier:   A2:C6:FB:81:EA:E7:C5:80:98:3C:6F:E1:33:D4:70:71:09:4A:B2:47
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       457BBED5E337B29E3601868CA6514EC737066558
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133303a3a2f34362d3436203d3e20323638313434.roa
Signing time:             Fri 15 Sep 2023 16:56:02 +0000
ROA not before:           Fri 15 Sep 2023 16:51:02 +0000
ROA not after:            Fri 13 Sep 2024 16:56:02 +0000
asID:                     268144
IP address blocks:        2804:58b0:130::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:7b:be:d5:e3:37:b2:9e:36:01:86:8c:a6:51:4e:c7:37:06:65:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Sep 15 16:51:02 2023 GMT
            Not After : Sep 13 16:56:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:67:a2:e9:57:c7:20:4f:2c:df:c3:d4:20:2e:
                    2d:05:76:3a:75:68:ba:e5:62:a5:31:be:ea:ce:a1:
                    7e:22:f5:e2:8b:db:c6:8c:37:78:7e:7e:20:fc:30:
                    ff:12:55:ae:33:34:37:63:09:a4:61:b8:f6:44:46:
                    12:cd:36:85:8b:26:84:f6:29:77:37:24:d0:3c:79:
                    be:f1:4b:d0:cc:84:60:0b:82:2d:1c:f8:8b:50:96:
                    c9:28:45:ac:b7:f7:1e:c8:4c:a8:6d:0e:f9:11:36:
                    8b:b4:5d:4b:8b:38:65:2a:a6:a6:fa:27:57:fb:32:
                    86:ea:e6:e4:36:9e:3a:48:0f:f5:d9:d7:e5:f9:14:
                    c3:28:22:c9:eb:5e:05:25:7f:cc:d3:84:d1:91:26:
                    eb:8c:5b:47:ba:ab:78:cf:0d:ee:cf:06:f5:23:94:
                    92:b0:e7:98:65:97:0f:7b:cb:0e:1a:58:3c:ff:80:
                    80:3b:c3:a5:8f:44:c2:f9:ae:dc:b7:73:40:95:a3:
                    d7:06:2b:00:75:27:c8:26:52:3a:21:7e:8a:06:ee:
                    22:7f:4a:4f:73:fc:81:d4:ef:5d:85:39:5b:8a:87:
                    10:35:00:79:a0:d4:b0:73:db:a2:0b:d4:3c:33:3f:
                    39:c9:ac:94:a3:17:fe:ee:38:37:a0:d4:be:cb:28:
                    6c:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:C6:FB:81:EA:E7:C5:80:98:3C:6F:E1:33:D4:70:71:09:4A:B2:47
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133303a3a2f34362d3436203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:130::/46

    Signature Algorithm: sha256WithRSAEncryption
         4c:ea:d4:fd:c3:81:17:1e:47:e2:dd:d1:fe:f1:07:65:1d:1a:
         38:18:de:98:6a:05:ce:4e:c6:02:f8:be:59:8e:92:38:b8:9d:
         9a:16:e4:73:15:55:a1:0a:a1:b7:5b:8f:40:2f:47:81:65:d1:
         97:19:fb:dc:9d:5f:61:ce:ed:47:21:1a:e5:54:f9:44:51:de:
         8d:6b:e7:c4:8c:57:79:b4:13:2c:86:7e:47:55:2c:57:3b:01:
         ae:50:e1:0b:2d:2a:72:b4:5a:d2:ef:05:f2:b4:1b:34:e4:6b:
         88:a4:56:07:82:a8:88:39:96:87:a5:1a:da:5f:a8:63:ae:c0:
         6e:73:e2:78:2c:16:3d:0f:43:2d:99:97:83:1b:2b:c0:57:41:
         7d:7c:54:05:b4:79:0a:32:29:e6:a0:88:2f:4c:ed:aa:d2:36:
         e7:cd:b3:55:25:a0:c7:fa:a1:1d:39:5f:b7:cd:0c:d6:b5:39:
         e0:29:7b:48:45:90:73:a0:59:f1:5b:3e:ff:05:e8:59:6c:bb:
         11:54:c8:ec:98:28:d9:94:9a:5e:aa:73:d4:fe:b3:7e:93:d5:
         5b:a8:b1:69:82:73:50:a5:95:d7:47:94:67:14:f6:c2:c1:45:
         8d:78:ad:d3:c1:95:74:dc:c1:7b:34:79:cf:08:74:24:0c:54:
         e6:0f:58:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org