Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a383030303a3a2f34302d3430203d3e20323730373034.roa
File:                     323830343a373031343a383030303a3a2f34302d3430203d3e20323730373034.roa (raw, json)
Hash identifier:          y9hxvrE9HL/34RkzFusCIxqcYfuc4QJRcnNEtRyQdYw=
Subject key identifier:   3F:5E:C6:2E:63:89:3C:0F:3B:7F:26:F4:DA:D7:4C:5A:6D:55:97:3E
Certificate issuer:       /CN=08DC97818473BD73C2DD2C6E472F59268A919F1D
Certificate serial:       52AED0DE772E405BBFB06AF4B38D482C526C5538
Authority key identifier: 08:DC:97:81:84:73:BD:73:C2:DD:2C:6E:47:2F:59:26:8A:91:9F:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a383030303a3a2f34302d3430203d3e20323730373034.roa
Signing time:             Mon 13 Feb 2023 19:33:36 +0000
ROA not before:           Mon 13 Feb 2023 19:28:36 +0000
ROA not after:            Mon 12 Feb 2024 19:33:36 +0000
asID:                     270704
IP address blocks:        2804:7014:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:ae:d0:de:77:2e:40:5b:bf:b0:6a:f4:b3:8d:48:2c:52:6c:55:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08DC97818473BD73C2DD2C6E472F59268A919F1D
        Validity
            Not Before: Feb 13 19:28:36 2023 GMT
            Not After : Feb 12 19:33:36 2024 GMT
        Subject: CN=3F5EC62E63893C0F3B7F26F4DAD74C5A6D55973E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:89:51:f5:5a:14:1a:5a:97:d8:ad:47:f4:4f:
                    25:ee:98:d5:b7:33:9e:bc:61:e4:b6:61:7c:5c:81:
                    74:33:e3:6a:bb:56:dc:11:ba:75:65:bd:e5:18:41:
                    3b:84:16:0e:49:0b:bb:88:39:02:1a:27:42:b0:a2:
                    ae:3e:90:be:00:74:6c:c3:0c:ba:6f:de:3a:81:4a:
                    bd:f7:fa:46:79:82:63:c6:e5:60:d9:01:9e:4f:a0:
                    a0:d3:5c:7c:73:ed:ef:a2:23:81:76:ca:38:da:9c:
                    39:ba:c4:60:98:eb:ef:fb:a7:be:ac:7b:23:06:67:
                    44:4f:83:8b:d8:62:89:ef:15:cf:99:b6:4c:c1:b3:
                    01:b7:c5:cf:a6:1b:45:7e:19:27:3d:fa:0a:22:09:
                    47:86:09:1b:3b:77:a4:ca:b2:6e:1f:dd:a7:d4:0b:
                    40:06:71:b8:85:d9:ab:a3:fd:0d:53:c9:64:ec:1f:
                    36:8c:16:87:6f:e6:3d:0e:44:e6:67:01:eb:3c:c9:
                    c4:8a:32:8d:96:e1:d0:9c:56:36:a2:91:be:35:8d:
                    d7:5e:0b:09:7a:53:2f:d5:0a:d3:95:06:79:fc:e3:
                    74:17:68:63:96:a7:7a:0c:4c:46:0f:27:d9:c1:32:
                    62:48:5c:69:77:a8:db:c2:5e:d4:66:5c:44:72:d4:
                    45:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3F:5E:C6:2E:63:89:3C:0F:3B:7F:26:F4:DA:D7:4C:5A:6D:55:97:3E
            X509v3 Authority Key Identifier:
                keyid:08:DC:97:81:84:73:BD:73:C2:DD:2C:6E:47:2F:59:26:8A:91:9F:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a383030303a3a2f34302d3430203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7014:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1c:1d:8e:c9:72:95:63:1e:15:9a:d0:7a:42:e7:47:48:7d:09:
         87:36:04:c9:e9:f2:db:d4:d2:42:e0:50:30:45:bb:aa:ea:08:
         a4:f0:80:6f:66:6f:4b:c4:1b:25:b8:a0:b6:92:c5:0a:cb:71:
         ec:0c:6e:3b:e2:e1:eb:57:c6:9f:ba:c4:6d:13:aa:ed:b1:1a:
         bc:cf:9d:28:14:33:64:62:ba:aa:90:9a:c6:51:a4:b3:24:2d:
         d0:f9:ed:a0:2c:7d:20:41:8a:50:25:2d:73:78:ef:a0:8a:a1:
         9e:6d:65:a6:f8:20:b6:f3:2f:d8:37:a0:5c:99:a4:c5:f7:4d:
         88:ba:6c:d3:49:e8:94:75:d1:85:96:02:41:d7:0d:e2:19:bd:
         9c:b7:13:63:e7:ad:b6:2d:6d:72:66:5b:ca:56:b7:bf:57:72:
         aa:cd:9d:aa:a0:f0:92:9c:f4:59:01:80:10:d5:4d:b4:f5:90:
         62:2a:83:cf:2b:4d:3f:ff:2b:38:90:c5:56:ef:28:69:ac:d8:
         35:f1:b7:bc:e4:14:ee:f9:a8:e0:c3:e8:cd:59:57:17:0d:6c:
         19:c9:7e:0f:10:43:1a:2f:e8:25:90:81:32:b3:07:64:7e:9b:
         76:cd:9c:a6:05:4c:c8:79:78:95:1e:68:0e:5d:27:42:c8:3d:
         4b:bd:0e:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org