Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/1/323830343a363461303a3a2f33322d313238203d3e20323639343339.roa
File:                     323830343a363461303a3a2f33322d313238203d3e20323639343339.roa (raw, json)
Hash identifier:          Z8FYZnOiugU6jEIbQvHGC3RXWeDDiUXYT9At1O82l/M=
Subject key identifier:   9C:11:63:0D:66:B3:09:41:18:B3:83:14:EA:D0:BE:D6:BF:F6:00:FD
Certificate issuer:       /CN=9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F
Certificate serial:       527935C392B054FD3DDA3FD3504138DDF5F9629D
Authority key identifier: 9E:0C:BB:5D:F0:52:22:AB:B1:DC:13:DB:72:BC:3E:96:95:5D:64:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/1/323830343a363461303a3a2f33322d313238203d3e20323639343339.roa
Signing time:             Thu 04 Apr 2024 17:36:17 +0000
ROA not before:           Thu 04 Apr 2024 17:31:17 +0000
ROA not after:            Thu 03 Apr 2025 17:36:17 +0000
asID:                     269439
IP address blocks:        2804:64a0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:79:35:c3:92:b0:54:fd:3d:da:3f:d3:50:41:38:dd:f5:f9:62:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F
        Validity
            Not Before: Apr  4 17:31:17 2024 GMT
            Not After : Apr  3 17:36:17 2025 GMT
        Subject: CN=9C11630D66B3094118B38314EAD0BED6BFF600FD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:2c:41:82:3c:09:1b:4f:e9:a4:28:8f:9c:07:
                    b4:f6:c5:ac:a4:e5:95:eb:11:82:c6:b4:20:f6:c3:
                    73:c5:0c:ba:ad:d0:b0:2f:2e:a6:92:09:69:1b:eb:
                    e1:10:21:9e:5b:d4:b8:65:e1:2e:34:85:2e:9d:31:
                    15:c3:df:c7:cb:b3:c7:c7:21:c3:e3:9f:d2:a2:77:
                    59:4b:eb:c8:61:bd:a2:3c:99:68:f5:f3:f9:e3:31:
                    36:88:5d:a6:2a:29:28:3d:57:c6:d8:75:fb:9e:d2:
                    b9:a3:ef:29:0a:45:f1:57:9a:91:0a:d6:70:7c:88:
                    70:ed:b0:60:b5:69:9c:69:82:8f:45:ef:94:ce:ac:
                    f0:53:ea:0e:57:ca:a3:e2:2e:e6:7c:ad:1b:5e:90:
                    b7:a2:cd:59:de:2b:6b:a9:fe:ed:b6:d0:ea:a3:5b:
                    f9:9d:5a:21:5b:c6:89:45:ba:f7:f3:20:67:4d:99:
                    f9:9f:7b:24:61:23:5c:c5:a3:1c:82:93:35:31:d9:
                    e8:d2:5a:0e:6b:e9:de:b6:72:e2:7e:15:a3:27:63:
                    3e:95:bd:a9:ac:82:8d:35:ad:e0:b3:f1:44:b9:cc:
                    b3:8a:2a:43:d2:e4:7c:a7:62:16:71:51:0c:49:46:
                    2f:08:6c:dd:74:8b:84:39:8b:95:b6:96:62:e9:c8:
                    08:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:11:63:0D:66:B3:09:41:18:B3:83:14:EA:D0:BE:D6:BF:F6:00:FD
            X509v3 Authority Key Identifier:
                keyid:9E:0C:BB:5D:F0:52:22:AB:B1:DC:13:DB:72:BC:3E:96:95:5D:64:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/1/9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9E0CBB5DF05222ABB1DC13DB72BC3E96955D648F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYBUFCNaAYn4EUF4BqR785PFiYJdyVjZQLRdBj5WQxUZ/1/323830343a363461303a3a2f33322d313238203d3e20323639343339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:64a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:19:ea:9a:2f:91:f2:e5:3a:b7:76:0d:43:5f:53:65:90:d5:
         31:0c:c7:1d:63:c7:48:88:d0:bd:dd:7c:93:2d:11:9c:52:73:
         95:ea:5c:8d:43:70:03:c7:2e:05:e3:42:67:b8:74:d6:68:4a:
         7d:6b:a8:25:17:62:54:10:13:0b:73:62:2a:19:1a:b0:3d:32:
         cc:8f:6f:88:72:6a:65:7c:12:5c:ce:2c:9f:4d:50:68:80:2b:
         43:d0:e8:03:24:7c:7a:61:e2:dd:45:28:16:20:58:84:7a:69:
         ba:4f:6b:49:eb:1a:4d:e0:cd:22:02:c9:68:f5:14:a6:cb:4c:
         8f:dc:57:ae:ed:c9:a8:78:de:8e:56:07:bd:07:30:36:b0:ab:
         af:61:14:85:a4:cf:43:49:7d:5e:0a:3c:e8:5a:13:7a:e8:29:
         22:cb:04:c7:64:6e:e2:a6:c0:e2:6f:51:92:b4:67:89:eb:37:
         8b:2c:3c:0e:17:53:7a:4f:c5:9e:c0:6e:c0:8c:45:81:a1:cf:
         26:8a:3d:4a:06:c0:fa:58:85:78:02:9d:a2:bd:9c:3e:6a:1a:
         64:44:f9:ec:7e:be:ee:23:10:62:3c:d1:2c:ce:a7:e6:ed:3f:
         a0:d9:7c:ea:ac:93:35:1a:63:80:80:6a:36:c9:3b:ad:76:d5:
         66:d1:1b:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org