Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3730303a3a2f34302d3430203d3e20323733373237.roa
File:                     323830343a386235383a3730303a3a2f34302d3430203d3e20323733373237.roa (raw, json)
Hash identifier:          y8m9pKQnORN21OMWSAjm7tBfna9OEtYfndTLKL0stUI=
Subject key identifier:   B5:35:66:1A:EC:E6:7A:D4:14:11:9D:EA:2F:43:45:96:F8:4A:83:BA
Certificate issuer:       /CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
Certificate serial:       6F99FD27127580E9856593238D1813DE6FB5EFF7
Authority key identifier: 0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3730303a3a2f34302d3430203d3e20323733373237.roa
Signing time:             Thu 18 May 2023 18:59:38 +0000
ROA not before:           Thu 18 May 2023 18:54:38 +0000
ROA not after:            Thu 16 May 2024 18:59:38 +0000
asID:                     273727
IP address blocks:        2804:8b58:700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:99:fd:27:12:75:80:e9:85:65:93:23:8d:18:13:de:6f:b5:ef:f7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
        Validity
            Not Before: May 18 18:54:38 2023 GMT
            Not After : May 16 18:59:38 2024 GMT
        Subject: CN=B535661AECE67AD414119DEA2F434596F84A83BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:c3:7f:c5:97:88:c6:75:53:58:db:7c:ed:d7:
                    04:83:76:83:77:37:9d:d8:c4:81:fc:b3:74:e3:b5:
                    8d:6f:cd:bb:2f:70:92:a4:be:8f:f3:4c:0e:d5:3d:
                    be:a7:aa:86:94:f7:25:73:6a:32:e2:ef:46:44:95:
                    d6:4d:4a:6c:93:18:25:11:ea:e8:ac:8c:55:83:2c:
                    d2:98:69:1f:7e:4d:72:68:29:a2:25:55:f0:92:d0:
                    f4:37:fa:db:b2:aa:10:67:b4:e0:a2:43:c0:49:dd:
                    d3:b3:9a:1f:a2:73:9d:2c:94:ba:74:13:02:31:85:
                    7f:b6:10:e4:9c:26:84:29:f6:4d:96:30:7b:ab:4e:
                    8a:2f:72:e0:be:9c:dc:c7:d7:57:bb:ab:13:0a:c7:
                    fd:00:fd:1c:bd:62:46:c7:d1:d3:4d:1c:49:e1:ab:
                    75:8b:1b:80:43:ce:e7:a6:a4:4a:06:a8:7a:d1:e9:
                    98:f3:03:b9:87:5a:6a:08:17:6a:92:73:7d:24:10:
                    4b:1e:86:4a:93:c4:19:d5:3d:3a:9f:2c:45:f5:d9:
                    50:ce:ac:2d:db:c2:78:2f:58:25:c3:3d:56:15:0b:
                    fe:4d:04:90:79:4d:51:c1:d8:bd:47:d6:0d:cb:28:
                    f5:c0:74:89:f2:a7:11:23:47:97:7c:ea:23:0d:70:
                    aa:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:35:66:1A:EC:E6:7A:D4:14:11:9D:EA:2F:43:45:96:F8:4A:83:BA
            X509v3 Authority Key Identifier:
                keyid:0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3730303a3a2f34302d3430203d3e20323733373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58:700::/40

    Signature Algorithm: sha256WithRSAEncryption
         84:bb:87:6e:f3:5c:f9:f6:f7:08:67:6c:ee:ed:3b:ef:ff:47:
         2f:42:10:17:b5:94:74:aa:33:e8:d4:30:a6:cc:7c:a7:8a:1c:
         e2:27:2a:6b:d0:4d:b9:af:40:0c:7e:4e:33:85:48:8b:5c:df:
         fb:99:e9:df:0e:d5:87:23:6b:58:7e:a4:c1:21:b0:8f:e7:d0:
         4f:98:e9:e5:93:e8:fb:7d:17:aa:12:73:03:b8:53:eb:d2:9b:
         52:6d:b3:7c:7a:71:4f:c1:bd:0d:e3:28:e7:72:cf:9d:59:b0:
         0e:aa:6b:94:b7:0a:8e:a9:28:76:7f:7c:3c:11:f2:bd:1b:08:
         a4:13:d4:3e:f1:eb:e0:0a:25:06:c8:e5:e7:a5:bc:07:fc:c4:
         e7:70:7e:11:a1:9d:a9:7b:b4:10:c2:77:02:78:b1:c2:e6:b4:
         0d:10:a1:43:f2:f5:1b:2b:b8:f9:3e:3e:3f:80:09:d0:70:9b:
         29:6e:8f:aa:0b:a5:3b:27:b0:82:d9:0a:67:0e:ae:7b:22:32:
         41:3e:fe:da:76:05:bc:71:85:4f:83:ca:7e:bb:0f:ca:8d:0c:
         7a:c8:a1:b2:1a:78:0e:65:59:54:a4:5b:26:2c:44:cc:ef:4a:
         0c:75:37:df:dd:a6:2e:fc:0b:88:7d:5c:01:84:b5:8f:88:9a:
         e6:d3:8c:ef
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:38 2024 by rpki-client on console-ams.rpki-client.org