Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3630303a3a2f34302d3430203d3e20323733373237.roa
File:                     323830343a386235383a3630303a3a2f34302d3430203d3e20323733373237.roa (raw, json)
Hash identifier:          IfegOe4CmyZeLmjmuNpUemL+0D1Kjc1l22Ol/WphKbU=
Subject key identifier:   EF:6E:21:3F:47:42:5E:37:35:F4:02:86:8E:DE:9D:39:FE:12:D4:73
Certificate issuer:       /CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
Certificate serial:       0F16E3EE7B20EE4402190E08874D0A5CCCA5C292
Authority key identifier: 0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3630303a3a2f34302d3430203d3e20323733373237.roa
Signing time:             Thu 18 May 2023 18:58:49 +0000
ROA not before:           Thu 18 May 2023 18:53:49 +0000
ROA not after:            Thu 16 May 2024 18:58:49 +0000
asID:                     273727
IP address blocks:        2804:8b58:600::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:16:e3:ee:7b:20:ee:44:02:19:0e:08:87:4d:0a:5c:cc:a5:c2:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
        Validity
            Not Before: May 18 18:53:49 2023 GMT
            Not After : May 16 18:58:49 2024 GMT
        Subject: CN=EF6E213F47425E3735F402868EDE9D39FE12D473
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:e2:42:73:75:87:6f:91:ce:a4:1f:0a:22:44:
                    5b:18:05:df:c9:ad:82:06:fc:03:70:b7:fc:86:93:
                    ce:0e:04:20:07:c4:39:a8:6a:43:fa:f1:4f:8c:43:
                    5b:ef:d7:01:02:cb:57:11:6d:0a:1d:c1:21:e8:16:
                    1d:2a:19:1b:38:bc:36:a7:1c:9c:af:45:ee:d3:bd:
                    bd:d9:60:1c:47:b3:66:40:ea:53:cf:29:0b:0f:65:
                    eb:ef:8e:1e:64:8a:45:ca:71:d9:bc:fc:0d:dc:61:
                    21:51:63:f0:40:82:5d:ef:47:63:cd:13:18:f9:ad:
                    99:20:43:08:d5:96:82:03:9e:e5:11:b5:39:1e:b9:
                    b5:d7:a6:38:7d:1d:92:0e:70:5e:44:35:d7:71:f1:
                    96:48:57:bf:b8:65:11:d4:20:06:84:02:57:f6:f8:
                    e9:3f:95:d4:fc:0b:2d:c7:30:1f:49:d6:60:cf:c2:
                    8b:8c:0e:ac:d7:d2:f9:46:73:40:70:cc:d6:e5:03:
                    61:94:3e:59:9f:c8:8a:f3:86:4d:53:37:a7:50:2f:
                    1b:f2:af:af:c2:14:6f:7d:7a:98:9d:ca:4b:7a:44:
                    c3:e9:6e:97:64:9c:7e:0a:ad:8e:68:bc:b7:6b:6a:
                    c1:99:59:21:4e:72:0a:f5:b4:a0:56:a9:3f:17:29:
                    90:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:6E:21:3F:47:42:5E:37:35:F4:02:86:8E:DE:9D:39:FE:12:D4:73
            X509v3 Authority Key Identifier:
                keyid:0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3630303a3a2f34302d3430203d3e20323733373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58:600::/40

    Signature Algorithm: sha256WithRSAEncryption
         7e:90:9e:df:14:d9:99:f7:84:39:24:d1:d1:5b:15:96:8b:4c:
         24:bf:9a:6d:55:7a:48:bf:31:90:96:6a:54:19:27:79:63:8c:
         9c:ca:9f:38:a6:7d:ed:29:51:2f:f1:62:a8:68:0a:22:00:2e:
         5b:6b:25:f2:8d:25:d9:fa:ef:c5:93:ed:db:3b:23:99:b4:88:
         bc:52:18:b5:42:3f:8a:91:ef:ac:c7:61:b0:88:cb:4d:fd:01:
         ae:ab:e0:47:c8:73:02:54:a8:11:a2:35:4e:df:71:7d:6c:29:
         31:8a:89:d1:c8:df:36:1e:32:8b:91:77:45:a8:1f:6c:53:a0:
         d5:55:31:56:06:67:12:4f:74:d5:2e:21:b4:95:a2:1b:42:3e:
         59:6f:c2:a4:b7:63:81:7c:b7:02:a1:19:dc:2e:28:02:4a:db:
         f4:3e:24:be:ea:21:22:02:c2:64:35:8d:8b:4d:d1:72:95:3f:
         6e:8f:63:ff:73:82:4b:d9:21:89:8f:71:88:5f:9d:fa:77:a7:
         ac:92:a9:f3:f9:69:04:74:b2:2b:51:59:7f:f2:2d:e8:e9:de:
         26:9c:2c:4b:d8:9a:70:78:12:2d:f2:4e:2a:e2:94:21:6b:06:
         f7:a9:c5:e2:86:6b:30:fe:e0:bf:2e:0d:55:5d:c8:69:ca:56:
         49:8f:bd:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Feb 28 03:59:25 2024 by rpki-client on console-fra.rpki-client.org