Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa
File:                     323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa (raw, json)
Hash identifier:          f94O6mQmqbx2rnTQJKpPU1GJZLMuEkrDCym90ZFEx+o=
Subject key identifier:   4B:5D:0C:41:8A:09:1D:AC:6A:99:67:34:FC:8B:CB:52:25:5D:1E:6C
Certificate issuer:       /CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
Certificate serial:       1703CC553623CDA1F9EE418533EC386E77F895BE
Authority key identifier: 7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa
Signing time:             Fri 15 Sep 2023 16:56:01 +0000
ROA not before:           Fri 15 Sep 2023 16:51:01 +0000
ROA not after:            Fri 13 Sep 2024 16:56:01 +0000
asID:                     268144
IP address blocks:        2804:58b0:138::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:03:cc:55:36:23:cd:a1:f9:ee:41:85:33:ec:38:6e:77:f8:95:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F184E24C6F9EDA40037433CE880AB6AF79BAA18
        Validity
            Not Before: Sep 15 16:51:01 2023 GMT
            Not After : Sep 13 16:56:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:29:22:4b:32:b4:e2:0b:93:b0:78:53:5c:69:
                    a6:65:e3:b3:a5:75:36:0c:87:e3:ff:8e:9f:6e:16:
                    d0:fd:27:43:de:f9:b3:0b:19:7c:f4:0e:71:45:57:
                    7c:7c:08:a5:e0:88:e6:60:c1:f4:d4:4c:b9:7f:ac:
                    ef:d3:c0:25:b1:dc:a3:cd:14:82:98:a4:be:4c:ed:
                    f9:35:94:48:81:e4:ab:92:59:bf:52:9d:b7:eb:23:
                    16:f3:41:67:02:e0:86:5a:63:26:30:b7:4d:b3:95:
                    54:8d:87:6d:c2:c7:43:fc:e3:f1:96:69:f2:dd:3c:
                    b7:6e:7b:90:12:83:ab:f0:28:ac:96:48:d1:ef:7e:
                    0c:76:95:5a:01:87:17:65:bf:40:2f:f8:4b:27:cf:
                    88:4e:d7:92:f7:ed:92:8e:6b:ef:9b:cb:9e:8f:e6:
                    e1:ea:6e:04:2a:e1:d6:d4:2d:15:b0:43:d2:d8:ec:
                    4e:79:01:8b:25:ca:21:98:5c:a5:9a:46:9e:49:6d:
                    ec:b0:16:0f:f3:5d:30:a5:ba:26:a8:ff:5c:42:52:
                    06:65:4b:19:c8:b9:07:06:6a:22:0c:b6:a8:e1:bf:
                    f4:75:e1:a0:0d:39:97:4f:08:9f:73:c1:8d:05:f0:
                    a2:d4:d9:67:39:78:77:f0:29:09:09:ab:5c:f6:d5:
                    ee:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:5D:0C:41:8A:09:1D:AC:6A:99:67:34:FC:8B:CB:52:25:5D:1E:6C
            X509v3 Authority Key Identifier:
                keyid:7F:18:4E:24:C6:F9:ED:A4:00:37:43:3C:E8:80:AB:6A:F7:9B:AA:18

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F184E24C6F9EDA40037433CE880AB6AF79BAA18.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Hjtg9dvDU7SHRiKtou7s8s9ybCVNNi3JtCxWCGzAYzn/0/323830343a353862303a3133383a3a2f34362d3436203d3e20323638313434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58b0:138::/46

    Signature Algorithm: sha256WithRSAEncryption
         18:b3:57:8f:8d:2f:b1:4d:55:9e:e3:9b:b5:5a:f7:de:b6:ba:
         17:e8:51:68:08:59:81:bb:36:ea:41:5b:8e:8b:9d:90:4f:6f:
         71:47:e0:6e:ed:09:78:fe:e2:b6:3b:c3:d9:67:f3:77:42:ec:
         94:33:78:98:b8:76:2f:8c:55:29:47:08:95:24:15:6e:d7:1b:
         4a:35:04:b7:78:ad:b4:71:bf:ce:f7:73:ba:76:3b:9e:d4:76:
         8b:12:7d:da:b6:05:a1:02:c5:b5:d1:0b:a4:58:88:b7:51:8b:
         49:f9:ef:14:70:9d:e3:12:6a:c1:bd:66:8b:91:5a:28:73:29:
         f5:43:c5:0c:ce:05:e6:20:59:03:85:32:e8:cf:b7:3b:a6:ae:
         ff:d0:ec:e4:31:01:ce:ca:99:22:42:4c:a2:55:1c:63:8e:0f:
         01:3a:cf:78:5a:47:f3:44:bc:d4:ef:54:aa:77:c8:f8:0d:62:
         ca:85:e0:e5:0f:8b:54:0b:50:3b:24:7f:e8:92:71:ab:07:3c:
         80:9e:b9:da:14:b9:c2:fc:03:06:40:c1:7a:2b:a8:25:5c:43:
         15:fe:f8:3f:4b:04:67:bb:1a:6e:95:88:30:01:e3:e8:9c:b9:
         de:f1:53:70:0c:09:ca:1f:a4:74:3f:ab:98:58:cc:82:0a:f1:
         32:62:ba:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:11 2024 by rpki-client on console-ams.rpki-client.org