Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3a2f33322d313238203d3e20323733373237.roa
File:                     323830343a386235383a3a2f33322d313238203d3e20323733373237.roa (raw, json)
Hash identifier:          dIrKpgpScOTPzGA+bdZPoRcX4n4m8VT5PgntPbUwKY8=
Subject key identifier:   CD:B5:19:F7:35:F1:50:C5:63:84:A3:44:29:7E:8F:85:F9:F7:9F:D5
Certificate issuer:       /CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
Certificate serial:       59C019120AB51DCC716744B2E32091328A7083BF
Authority key identifier: 0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3a2f33322d313238203d3e20323733373237.roa
Signing time:             Tue 19 Mar 2024 19:59:26 +0000
ROA not before:           Tue 19 Mar 2024 19:54:26 +0000
ROA not after:            Tue 18 Mar 2025 19:59:26 +0000
asID:                     273727
IP address blocks:        2804:8b58::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:c0:19:12:0a:b5:1d:cc:71:67:44:b2:e3:20:91:32:8a:70:83:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F
        Validity
            Not Before: Mar 19 19:54:26 2024 GMT
            Not After : Mar 18 19:59:26 2025 GMT
        Subject: CN=CDB519F735F150C56384A344297E8F85F9F79FD5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:40:5d:cf:6f:3b:26:45:54:fb:3a:c9:38:44:
                    94:62:e7:99:63:6f:9b:e2:20:08:20:54:d9:04:0d:
                    2d:fb:1f:78:cc:de:ee:fc:e8:c9:a4:27:16:0b:53:
                    65:4e:49:9e:7d:4a:1f:22:52:fb:c6:eb:70:19:fc:
                    8b:59:69:ba:c5:2a:b0:0c:77:25:7c:89:90:c6:f1:
                    36:4a:f6:58:5d:a3:7c:1f:6d:9b:fe:36:d1:e2:4b:
                    fe:f1:7f:28:70:18:f2:ff:c8:bc:ba:94:b0:09:12:
                    6c:4b:61:01:68:32:78:cb:9e:c9:0b:fb:63:6a:e2:
                    29:67:f0:f6:7f:ad:b0:93:a8:5e:5b:57:26:91:c2:
                    71:4d:e2:35:8f:37:e5:ba:fa:67:66:72:97:a4:b4:
                    f2:47:32:e7:fa:26:d5:86:0e:1d:2d:82:7d:57:66:
                    7c:62:b4:18:5b:f8:36:1c:11:43:0e:a7:7e:c5:b1:
                    54:33:93:d2:65:06:c6:53:b5:48:de:c7:2a:57:70:
                    d5:83:09:91:e6:07:e7:f2:ab:d8:cf:5c:59:7a:99:
                    9f:58:20:ef:b1:99:2a:1b:b3:aa:6f:d9:5c:9c:19:
                    d0:f9:5e:db:4f:79:47:db:c5:e6:67:15:a6:70:14:
                    7b:63:0e:d2:36:27:5c:a8:e3:44:b5:1e:76:e7:ac:
                    5b:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:B5:19:F7:35:F1:50:C5:63:84:A3:44:29:7E:8F:85:F9:F7:9F:D5
            X509v3 Authority Key Identifier:
                keyid:0C:F0:F9:CE:8A:F0:2C:2F:78:62:C7:A5:94:CE:FD:3E:44:AA:B7:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CF0F9CE8AF02C2F7862C7A594CEFD3E44AAB70F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HXs69Xz1WBKjJSFaegx9pooGPY3wcwjsVPoDzmYJ96zM/0/323830343a386235383a3a2f33322d313238203d3e20323733373237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b58::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:43:86:0e:23:cb:ef:a8:9d:ab:97:e5:73:b7:14:05:3a:79:
         67:c8:ea:4a:09:63:03:7a:85:c2:03:16:4f:ad:c1:89:5c:6f:
         a0:e6:d4:0c:d8:24:2e:83:d7:e7:bd:7e:6c:7f:8b:ea:92:72:
         c0:93:b3:50:5e:1e:e4:d6:aa:3d:60:56:dd:3a:35:75:02:57:
         f1:66:1c:02:b0:89:93:34:88:7a:eb:d8:5d:22:b1:59:c4:ad:
         72:b3:d7:68:e8:88:d3:32:4d:d7:7b:4a:c6:33:1d:fc:db:d4:
         fb:08:d6:7e:02:3b:12:55:b7:f8:bf:8a:63:8d:82:a1:90:93:
         10:d0:1b:84:3f:45:7c:b8:77:2f:fa:b1:94:fc:78:0a:e4:04:
         d2:b9:83:c1:3b:7b:a8:e5:4b:e9:af:9e:63:79:1a:58:e2:1b:
         a5:11:56:50:0a:67:20:ac:8c:03:6f:c5:f4:ff:4e:68:9f:c4:
         ef:85:7b:2f:15:78:d6:07:72:00:a1:84:27:88:6c:8f:41:02:
         85:05:b0:bd:e3:17:37:d9:ee:7a:62:c2:fb:40:0b:06:d7:93:
         14:a0:40:b9:18:6f:15:28:5e:d8:bf:48:b5:80:0d:b1:d1:59:
         53:b7:45:e7:5d:83:fe:85:4b:6e:12:15:0d:dd:13:da:ef:52:
         74:be:a8:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:33 2024 by rpki-client on console-ams.rpki-client.org