Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa
File:                     323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa (raw, json)
Hash identifier:          FvJfMP3VCqoHjiBuQVcVPraeKBnE8l3dMYhBDr5V0Gg=
Subject key identifier:   1C:DC:63:56:44:99:8E:A2:8E:26:24:68:CB:C7:45:1D:85:6E:7C:32
Certificate issuer:       /CN=C06C9A928E7DAE51A6503DDCA4B5F79752FFA942
Certificate serial:       58C0AF353497190790E1ACF86D631D03C40403B2
Authority key identifier: C0:6C:9A:92:8E:7D:AE:51:A6:50:3D:DC:A4:B5:F7:97:52:FF:A9:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa
Signing time:             Fri 28 Jul 2023 17:24:40 +0000
ROA not before:           Fri 28 Jul 2023 17:19:40 +0000
ROA not after:            Fri 26 Jul 2024 17:24:40 +0000
asID:                     268261
IP address blocks:        2804:4e70:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:c0:af:35:34:97:19:07:90:e1:ac:f8:6d:63:1d:03:c4:04:03:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C06C9A928E7DAE51A6503DDCA4B5F79752FFA942
        Validity
            Not Before: Jul 28 17:19:40 2023 GMT
            Not After : Jul 26 17:24:40 2024 GMT
        Subject: CN=1CDC635644998EA28E262468CBC7451D856E7C32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:24:ce:ff:1b:be:80:aa:fa:c9:55:dc:ed:ee:
                    51:b1:3d:bb:62:6e:00:6e:70:df:84:b3:92:00:5f:
                    e1:21:81:01:8f:35:d0:46:7a:1a:f9:82:2b:7e:e5:
                    66:fd:83:31:68:b0:2c:72:04:61:d4:ff:de:32:83:
                    d8:72:e5:a1:77:cb:9b:62:08:92:91:8f:7b:b4:7f:
                    23:9b:38:c3:df:bb:67:22:a7:9b:0d:19:51:27:ac:
                    b1:75:6c:f2:7b:d4:59:43:1c:55:4b:06:c8:f4:50:
                    81:bb:93:e0:cf:31:a7:95:fd:f5:23:c3:43:49:43:
                    f7:a4:6d:e3:91:4c:31:95:a4:44:50:f5:5c:4f:e5:
                    9e:d4:12:75:28:a4:30:42:01:db:43:71:da:bc:da:
                    e9:9b:7e:ae:56:f9:5d:9e:de:c6:7b:ba:38:7e:92:
                    e2:ed:a8:fe:93:8b:96:b1:bb:3c:a5:80:92:b6:94:
                    e7:5e:40:d1:1c:0c:83:66:db:4c:ba:2f:17:4b:92:
                    c1:b7:10:0f:67:c5:68:ac:d8:0a:0c:1d:3f:25:c6:
                    4f:19:6d:df:81:9b:67:4f:67:68:c2:8c:4e:b7:81:
                    fe:08:07:1a:73:dd:31:26:43:b5:1e:e2:63:06:3f:
                    51:28:e0:72:f9:48:34:d6:b5:c5:22:74:51:d5:14:
                    93:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:DC:63:56:44:99:8E:A2:8E:26:24:68:CB:C7:45:1D:85:6E:7C:32
            X509v3 Authority Key Identifier:
                keyid:C0:6C:9A:92:8E:7D:AE:51:A6:50:3D:DC:A4:B5:F7:97:52:FF:A9:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C06C9A928E7DAE51A6503DDCA4B5F79752FFA942.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HW5XtnqrQrLSVkTC1NmVMLUqRoXSUGnn2LBX6nr757Wg/0/323830343a346537303a383030303a3a2f33332d3333203d3e20323638323631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e70:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         b3:4a:19:37:9e:57:2c:0a:2d:0d:51:fa:28:79:6b:01:58:9e:
         1d:ff:3a:a0:b8:e4:e9:33:b4:e5:a5:5e:38:9b:6c:33:b9:6f:
         2c:6e:ac:e2:03:3e:4b:78:4f:9e:97:4f:66:f9:16:41:b9:42:
         74:7f:22:0b:f7:45:d1:34:0f:16:bb:ed:4c:3a:b5:4b:62:e4:
         6f:91:e6:16:91:1d:90:cf:f5:94:82:71:a9:7e:aa:1b:8d:6e:
         59:60:ed:40:65:56:16:5e:37:b6:4d:d1:01:f7:f3:3f:09:67:
         f6:68:3f:c5:27:c0:00:93:b4:57:3e:ee:eb:72:42:2a:18:2d:
         73:6e:a2:1e:40:56:d0:58:79:f5:14:87:90:d5:8d:c5:ab:bf:
         71:42:19:09:8e:e2:a8:1e:28:82:ec:cd:f6:a8:19:c5:ae:24:
         a1:15:c8:d0:a9:7f:1c:29:06:62:3f:e2:74:46:68:b2:38:67:
         10:ee:46:83:b8:99:a3:60:d6:85:61:04:9d:82:9e:6a:76:f8:
         4e:7d:01:a0:84:46:05:73:1c:f6:e3:90:17:3b:43:a2:7f:65:
         60:92:d7:21:36:f9:44:e9:82:09:0d:86:bc:3f:ad:5a:a3:24:
         7f:d7:ab:27:3e:ed:f1:18:db:7d:19:52:61:2c:06:99:3b:40:
         95:58:03:90
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org