Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/323830343a333537343a383030303a3a2f33342d3334203d3e20323636323837.roa
File:                     323830343a333537343a383030303a3a2f33342d3334203d3e20323636323837.roa (raw, json)
Hash identifier:          khRMGbs1obIPa3MG3W4KXEbK5X4vKznExDBbf/9siS0=
Subject key identifier:   DC:0E:29:D8:57:87:83:A9:EC:40:F0:E1:B8:1D:BA:B2:F1:8A:23:72
Certificate issuer:       /CN=9A7757F2422FC09935E55C6FC83910131BF7B3D5
Certificate serial:       5F76E3DB919E451BEC376831F46BCBC333CD269D
Authority key identifier: 9A:77:57:F2:42:2F:C0:99:35:E5:5C:6F:C8:39:10:13:1B:F7:B3:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7757F2422FC09935E55C6FC83910131BF7B3D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/323830343a333537343a383030303a3a2f33342d3334203d3e20323636323837.roa
Signing time:             Sun 14 May 2023 23:31:25 +0000
ROA not before:           Sun 14 May 2023 23:26:25 +0000
ROA not after:            Sun 12 May 2024 23:31:25 +0000
asID:                     266287
IP address blocks:        2804:3574:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:76:e3:db:91:9e:45:1b:ec:37:68:31:f4:6b:cb:c3:33:cd:26:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A7757F2422FC09935E55C6FC83910131BF7B3D5
        Validity
            Not Before: May 14 23:26:25 2023 GMT
            Not After : May 12 23:31:25 2024 GMT
        Subject: CN=DC0E29D8578783A9EC40F0E1B81DBAB2F18A2372
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:33:cc:a9:21:b7:cf:7a:3c:8b:b8:1f:61:c9:
                    4c:39:95:6a:33:03:5f:40:ee:af:f8:53:c3:72:69:
                    00:ba:d9:dd:0c:a0:96:1e:16:09:74:56:7c:de:70:
                    ff:a6:8d:8c:34:41:d3:dd:3f:ef:96:bf:34:a3:06:
                    94:5f:04:2d:d2:17:4c:75:ea:df:ab:2c:1f:c9:bc:
                    60:36:18:09:f5:ae:ee:86:38:30:4a:15:57:17:c5:
                    82:4b:fc:5a:16:bb:f4:c4:10:3f:53:c3:53:43:4f:
                    09:45:6a:b6:d2:90:4a:0e:6c:9a:7d:3a:93:bd:40:
                    6b:d1:62:6c:fd:df:be:51:76:87:43:df:48:c9:99:
                    87:8d:e4:64:b8:97:41:35:ec:59:7e:e5:24:97:75:
                    e8:c6:e6:b1:c0:8d:11:e5:40:bc:b1:1b:52:10:2d:
                    b4:34:d8:0b:a0:c9:c8:29:3a:25:f5:94:dd:2c:ad:
                    34:5e:7d:18:51:0f:c0:b8:12:d1:05:02:d5:3d:5e:
                    d6:30:9e:01:e1:f9:ae:66:3f:68:98:e7:fe:db:f6:
                    98:e9:1f:75:65:eb:9c:71:7a:3c:f0:84:72:ce:1c:
                    15:01:49:9e:e5:31:78:3a:e4:9b:4a:a3:8f:85:59:
                    30:db:52:e2:ef:8f:c5:a9:2e:b0:a9:50:d1:d8:94:
                    26:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:0E:29:D8:57:87:83:A9:EC:40:F0:E1:B8:1D:BA:B2:F1:8A:23:72
            X509v3 Authority Key Identifier:
                keyid:9A:77:57:F2:42:2F:C0:99:35:E5:5C:6F:C8:39:10:13:1B:F7:B3:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/9A7757F2422FC09935E55C6FC83910131BF7B3D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A7757F2422FC09935E55C6FC83910131BF7B3D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DhSptJHFELEV3Mm2sPYjjT3iTWD7idfYYU1AXKCQ6Zkg/0/323830343a333537343a383030303a3a2f33342d3334203d3e20323636323837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3574:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a5:6e:be:8f:03:7d:bb:43:59:df:06:1c:6e:2d:e8:1f:46:a9:
         dd:41:7c:4a:bd:ea:1e:c8:f3:b2:25:a4:64:90:c5:9f:a6:4f:
         0e:a3:6e:ad:ca:6c:5e:8d:e5:0a:b0:32:fd:c7:7a:18:c5:7c:
         53:70:8d:40:d6:d5:7e:5f:c5:e1:11:e4:74:75:e3:11:f3:17:
         7c:1a:53:6a:2c:c8:00:57:bb:4b:23:73:78:80:ad:e9:6b:d7:
         77:89:4c:74:85:f8:c2:ca:04:6e:43:0e:f8:bc:ee:0d:90:00:
         43:0b:07:77:b7:91:bd:6a:91:28:fb:0f:2e:57:d1:9e:45:8e:
         74:61:2a:ff:e1:09:8e:36:fa:56:28:b3:fb:c6:e6:1e:dc:dc:
         9b:4a:64:42:8f:b1:b5:ab:b5:43:90:50:17:f4:0a:2c:a6:3f:
         62:78:b2:1d:6e:60:93:23:b4:06:8c:49:93:4a:51:78:2c:39:
         e0:99:b4:29:80:f1:32:e9:05:16:66:bb:6e:54:16:1b:ef:cb:
         8f:92:d2:c4:ab:ea:35:a7:03:33:7d:9c:30:a3:93:91:52:d4:
         24:ec:71:40:a4:aa:66:92:3b:d0:25:33:ce:f7:a0:00:fb:e3:
         c8:38:dd:58:af:5c:23:48:05:c0:74:d1:dd:4b:b7:cd:cb:95:
         7b:18:6b:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org