Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/323830343a366466383a3a2f33322d3438203d3e20323730353637.roa
File:                     323830343a366466383a3a2f33322d3438203d3e20323730353637.roa (raw, json)
Hash identifier:          OImAPg/DFbKst9kL7rcvOKcmBMi21uja93QFvgyRzqA=
Subject key identifier:   F3:A9:16:D4:35:E3:5E:92:D3:68:F5:A5:54:5C:0C:42:BE:4B:AA:F9
Certificate issuer:       /CN=728041EE59CE20A182864537B9A0E2502263D7BD
Certificate serial:       356763B303BB870AA1CE0E464C6F690753BC4477
Authority key identifier: 72:80:41:EE:59:CE:20:A1:82:86:45:37:B9:A0:E2:50:22:63:D7:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/728041EE59CE20A182864537B9A0E2502263D7BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/323830343a366466383a3a2f33322d3438203d3e20323730353637.roa
Signing time:             Fri 05 Apr 2024 02:28:13 +0000
ROA not before:           Fri 05 Apr 2024 02:23:13 +0000
ROA not after:            Fri 04 Apr 2025 02:28:13 +0000
asID:                     270567
IP address blocks:        2804:6df8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:67:63:b3:03:bb:87:0a:a1:ce:0e:46:4c:6f:69:07:53:bc:44:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=728041EE59CE20A182864537B9A0E2502263D7BD
        Validity
            Not Before: Apr  5 02:23:13 2024 GMT
            Not After : Apr  4 02:28:13 2025 GMT
        Subject: CN=F3A916D435E35E92D368F5A5545C0C42BE4BAAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:87:38:73:90:66:6c:07:12:a3:65:42:8b:57:
                    22:05:fa:31:20:c3:8e:1f:9f:15:8e:aa:99:d0:01:
                    5c:ac:2f:5a:c3:ae:f5:46:da:23:19:4f:17:38:59:
                    73:3b:60:fc:37:06:b2:5d:69:17:eb:29:38:6f:37:
                    cd:5a:0f:de:1c:8f:f7:d4:1a:f6:23:2b:68:64:03:
                    2a:24:e9:15:03:fe:b9:7d:92:c6:d1:15:6f:1f:09:
                    56:5e:81:87:fb:63:42:2e:8a:b5:36:dd:57:b1:c9:
                    18:f0:13:f2:3c:e2:f9:7c:33:18:11:da:47:1f:4e:
                    f6:b0:98:cb:c5:ec:97:e6:0b:03:7f:0a:cb:2f:3a:
                    9d:46:39:12:04:79:ad:20:77:ff:72:ab:53:5f:64:
                    da:c0:18:73:e8:b3:bb:3e:34:47:c0:71:d0:7a:17:
                    1c:92:a0:f4:ed:38:2b:ff:85:4b:14:71:57:30:f1:
                    8d:e3:ba:b6:e8:4a:de:f7:7e:ae:16:dd:00:82:7c:
                    4d:79:ac:ec:b2:21:9d:bb:9f:69:34:4f:f2:57:7f:
                    56:6e:10:1c:b8:5a:b7:20:0e:69:e3:ea:dc:d3:a6:
                    f6:74:59:42:c6:b9:31:2f:66:b8:36:5a:b1:97:75:
                    fc:05:e3:ad:92:57:d0:23:6b:da:b4:87:54:41:25:
                    1d:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:A9:16:D4:35:E3:5E:92:D3:68:F5:A5:54:5C:0C:42:BE:4B:AA:F9
            X509v3 Authority Key Identifier:
                keyid:72:80:41:EE:59:CE:20:A1:82:86:45:37:B9:A0:E2:50:22:63:D7:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/728041EE59CE20A182864537B9A0E2502263D7BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/728041EE59CE20A182864537B9A0E2502263D7BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HC5NFExzN3gq7VY73P9TJUQhuZtcnxxpFKgjdTMkjK7s/1/323830343a366466383a3a2f33322d3438203d3e20323730353637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6df8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:1a:46:60:b4:c2:8e:c2:5e:d6:8f:d7:2f:1f:b8:62:d8:23:
         48:ee:b9:34:e8:40:16:71:ba:b6:71:f4:29:fc:06:9a:b0:6d:
         3f:ac:b3:a6:47:2c:64:cc:7c:20:81:70:64:7c:c4:67:b3:34:
         5f:de:d3:ee:40:20:11:63:72:56:79:d8:d7:bf:20:5a:f8:13:
         90:6b:46:18:75:5c:d5:7f:e4:f3:8b:df:97:ee:9d:54:a7:01:
         c9:37:f4:98:4c:83:38:9f:2f:8e:9f:06:77:b5:d2:92:d3:0b:
         ba:1a:62:a9:68:83:a9:5b:b4:4e:23:2d:13:ca:1b:bc:dd:d7:
         c9:db:f7:d0:c3:81:1b:73:f2:c9:b1:33:1f:50:ad:6f:23:69:
         fc:ef:af:db:b9:6b:51:af:e6:e3:d3:cd:08:fd:fd:eb:ba:53:
         4a:98:a7:37:48:21:49:51:ef:7c:05:75:a8:71:0d:e5:94:2a:
         39:43:9a:b9:6c:d2:0c:32:48:60:50:fc:ee:07:74:f5:a2:4c:
         4e:93:93:ee:23:d9:19:a8:bd:9f:b5:5d:e9:b5:a4:5c:cb:1f:
         34:ba:e8:29:ec:c8:5b:f2:2d:da:6a:c0:0d:d7:a5:68:45:70:
         9a:f4:3a:1f:86:ab:f2:db:8d:19:b1:4e:46:1f:d9:f4:7f:b8:
         06:c5:65:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:57 2024 by rpki-client on console-fra.rpki-client.org