Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/323830343a336539383a383030303a3a2f33332d3333203d3e20323636363038.roa
File:                     323830343a336539383a383030303a3a2f33332d3333203d3e20323636363038.roa (raw, json)
Hash identifier:          iktBZWtR0boMCD4D4d84Uthw8tz9ymibKmnmuBPhC7A=
Subject key identifier:   98:39:DD:4A:C0:7E:54:E8:12:7F:3A:6E:16:70:EC:E7:F5:0C:02:4F
Certificate issuer:       /CN=CF178172195A182C594FB724DD7B684E9210DA90
Certificate serial:       753028DC57B8EF7748BBCDB735B66A678C45F700
Authority key identifier: CF:17:81:72:19:5A:18:2C:59:4F:B7:24:DD:7B:68:4E:92:10:DA:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF178172195A182C594FB724DD7B684E9210DA90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/323830343a336539383a383030303a3a2f33332d3333203d3e20323636363038.roa
Signing time:             Fri 27 Oct 2023 21:15:18 +0000
ROA not before:           Fri 27 Oct 2023 21:10:18 +0000
ROA not after:            Fri 25 Oct 2024 21:15:18 +0000
asID:                     266608
IP address blocks:        2804:3e98:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:30:28:dc:57:b8:ef:77:48:bb:cd:b7:35:b6:6a:67:8c:45:f7:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF178172195A182C594FB724DD7B684E9210DA90
        Validity
            Not Before: Oct 27 21:10:18 2023 GMT
            Not After : Oct 25 21:15:18 2024 GMT
        Subject: CN=9839DD4AC07E54E8127F3A6E1670ECE7F50C024F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:87:94:49:1d:fb:30:81:ce:d1:5a:36:76:a0:
                    9d:62:37:72:a2:d7:d3:7c:27:b5:f4:6e:71:66:ab:
                    37:3b:1d:77:3a:03:f3:fa:9c:e6:c4:51:13:d3:c5:
                    0a:8e:a4:36:b8:4e:66:5a:10:62:f3:21:48:83:03:
                    b4:0c:b7:6b:3c:69:35:45:eb:71:82:f3:d9:b4:1d:
                    2d:79:00:b8:08:f2:b1:7d:9c:3a:dc:20:e7:3f:da:
                    1a:af:5d:60:5f:9a:41:34:79:75:2b:8b:d8:a0:46:
                    32:f3:f4:35:dc:ab:88:2c:b0:f0:b3:bf:3d:4c:82:
                    32:b6:b9:c8:97:73:d6:b8:f0:5f:02:a6:d9:7a:35:
                    3a:4d:a4:1d:01:fd:b3:32:2b:60:2c:9e:46:67:57:
                    5c:7a:57:c3:84:2e:d9:27:7f:29:b0:0c:5c:43:1c:
                    86:85:27:b5:a9:ce:ba:de:2e:1a:e4:63:65:30:07:
                    7a:64:15:6d:d6:b1:71:0b:67:05:34:a8:cf:56:93:
                    dc:0a:8b:dc:7c:d8:f8:a4:fb:06:62:17:66:5a:d6:
                    48:eb:a7:22:41:73:19:4d:e8:18:3f:6e:4c:cc:74:
                    fa:6e:02:42:32:3a:03:12:f7:8d:ed:70:69:0d:b1:
                    52:7b:d0:7e:ee:44:04:64:bb:a4:42:08:f4:2c:52:
                    56:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:39:DD:4A:C0:7E:54:E8:12:7F:3A:6E:16:70:EC:E7:F5:0C:02:4F
            X509v3 Authority Key Identifier:
                keyid:CF:17:81:72:19:5A:18:2C:59:4F:B7:24:DD:7B:68:4E:92:10:DA:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/CF178172195A182C594FB724DD7B684E9210DA90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF178172195A182C594FB724DD7B684E9210DA90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9UjCow5p15pbmsui6Qaf6xAwwwrZLZmW6jCKmm77wNoq/0/323830343a336539383a383030303a3a2f33332d3333203d3e20323636363038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3e98:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         26:cd:1f:ec:ce:bc:1b:92:af:7f:bc:09:f4:05:b4:fa:67:f2:
         54:cd:af:d1:c4:07:89:90:d6:04:31:32:31:b4:ab:15:63:5c:
         f3:b1:8b:4e:54:b6:08:2c:eb:39:ea:88:8c:19:e8:58:a8:64:
         b0:4a:64:9f:62:00:f5:b3:19:99:d3:e0:0b:cf:04:9c:92:35:
         eb:de:9d:dc:bd:77:d5:95:16:c3:f4:53:27:6f:59:5e:a9:39:
         6b:94:49:d5:86:e4:d7:26:7c:f3:e7:38:f2:d3:b6:a0:34:44:
         2d:7f:58:e3:61:f7:bf:9a:99:95:14:73:aa:97:94:8b:39:41:
         e0:69:5c:86:af:02:d0:a2:48:4d:f7:d7:7f:b2:25:a6:a9:37:
         80:ec:a2:9d:86:31:7b:6b:ef:5f:05:1b:79:24:91:6c:bc:41:
         14:06:30:12:18:f7:1b:7e:af:cd:67:d3:9f:87:51:d1:52:33:
         5c:a8:0d:56:91:38:53:19:71:e5:7a:4e:0e:dc:1c:85:12:76:
         ec:99:76:ba:fa:c7:ca:a3:6c:23:f1:ff:9e:b3:c9:d7:6c:22:
         8a:2d:87:de:96:a7:0d:b0:42:d5:76:33:3c:04:51:8e:ec:90:
         4a:de:66:92:c7:49:47:80:fd:6c:c4:09:98:a7:0d:ee:5c:88:
         23:03:6e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org