Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/323830343a366537343a3230303a3a2f34302d3430203d3e20323730353938.roa
File:                     323830343a366537343a3230303a3a2f34302d3430203d3e20323730353938.roa (raw, json)
Hash identifier:          oAjzaXNjoQTLQ6MUE/5tWi7Xoiwt0SfS58cR2JWVHSw=
Subject key identifier:   98:08:81:81:DB:04:B7:EA:7A:82:63:F2:01:9A:45:9E:7B:34:EE:5A
Certificate issuer:       /CN=940B94B8927D3C9CB302DD59BDDF8D98C74257B6
Certificate serial:       217B9766AF5AEE429D94F62C55BE45B272FE847C
Authority key identifier: 94:0B:94:B8:92:7D:3C:9C:B3:02:DD:59:BD:DF:8D:98:C7:42:57:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/323830343a366537343a3230303a3a2f34302d3430203d3e20323730353938.roa
Signing time:             Tue 05 Dec 2023 13:44:27 +0000
ROA not before:           Tue 05 Dec 2023 13:39:27 +0000
ROA not after:            Tue 03 Dec 2024 13:44:27 +0000
asID:                     270598
IP address blocks:        2804:6e74:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:7b:97:66:af:5a:ee:42:9d:94:f6:2c:55:be:45:b2:72:fe:84:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940B94B8927D3C9CB302DD59BDDF8D98C74257B6
        Validity
            Not Before: Dec  5 13:39:27 2023 GMT
            Not After : Dec  3 13:44:27 2024 GMT
        Subject: CN=98088181DB04B7EA7A8263F2019A459E7B34EE5A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:4c:e0:5e:e6:cb:f7:3d:0c:13:7e:d4:eb:db:
                    91:fd:b7:5e:43:6c:04:cf:6a:12:9c:48:54:e4:c8:
                    b2:4f:9c:dc:58:c2:3c:4b:ef:37:58:8e:a4:62:38:
                    1a:af:86:01:1d:ed:77:a1:1c:9c:05:98:d6:89:61:
                    b0:6c:c4:5a:18:17:ad:88:d0:90:cb:73:cc:06:e2:
                    82:5d:d7:48:2f:01:52:81:05:d3:2c:8d:db:52:d5:
                    1d:db:60:aa:20:4a:16:d2:f3:8d:c4:27:cf:85:c7:
                    a7:a1:6a:4c:b5:f8:76:1c:19:2f:f8:57:9a:f5:37:
                    99:7f:b8:b7:b5:40:34:b5:cb:26:66:b4:31:a5:7e:
                    ab:f6:e0:68:3f:50:0a:60:0e:90:84:8e:4a:be:71:
                    bb:4f:1f:5b:7d:e1:8e:11:a6:a8:c1:15:8c:de:90:
                    72:50:eb:d6:63:3f:d2:76:1e:32:46:45:49:34:15:
                    73:db:a5:3d:4e:79:d9:40:e1:1c:80:3f:61:82:37:
                    68:a5:87:ba:3b:4f:3f:cf:56:54:b5:7c:80:29:72:
                    2b:d9:f0:d5:07:ee:ec:9c:20:d1:09:23:ae:3d:09:
                    81:54:74:15:4d:13:ba:99:3e:bd:88:c8:5f:bd:1f:
                    ef:aa:58:aa:1a:b1:0c:b7:b4:9f:68:53:c0:cb:7c:
                    b5:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:08:81:81:DB:04:B7:EA:7A:82:63:F2:01:9A:45:9E:7B:34:EE:5A
            X509v3 Authority Key Identifier:
                keyid:94:0B:94:B8:92:7D:3C:9C:B3:02:DD:59:BD:DF:8D:98:C7:42:57:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/323830343a366537343a3230303a3a2f34302d3430203d3e20323730353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e74:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         00:aa:a1:d1:b9:b2:9c:3d:3a:9b:13:5f:ee:ef:82:b7:1b:e4:
         de:ad:16:74:e6:9c:6f:f4:3e:98:1e:9d:ea:9e:be:1b:d9:05:
         96:6e:6b:e5:3e:1f:a1:73:4e:62:ba:76:55:59:95:f6:e4:cc:
         c6:e7:f8:d1:6b:69:90:c5:83:77:6b:13:29:2c:3f:45:e6:55:
         d6:83:34:55:6f:70:60:42:f7:a4:6c:5e:7f:ae:42:3e:5d:f2:
         fb:05:d9:bc:cf:3a:4b:0e:a9:61:f2:e9:f3:72:c0:d0:10:15:
         0a:73:38:30:e4:32:e8:4a:d1:46:60:3f:01:f7:42:39:76:93:
         d9:18:33:a3:04:78:74:69:d0:53:6e:45:b6:d6:85:6e:ac:d4:
         c9:77:31:25:97:8d:45:a1:78:fc:2e:21:06:af:ae:a1:15:8e:
         48:99:d0:4b:43:12:de:07:03:60:c8:f5:1d:d1:d6:30:38:2b:
         15:86:80:9d:34:4a:f2:d0:ee:f7:03:a0:5b:dd:0a:e4:84:ba:
         95:91:2b:a1:f3:19:ba:cb:f1:9b:89:33:4b:c6:1e:c5:2e:65:
         6d:36:b5:ee:90:d9:3c:86:4d:6f:bd:5c:fd:f8:5e:af:97:e0:
         6f:d4:04:2c:42:2a:c1:5f:07:f2:13:db:f0:47:29:2b:28:cc:
         a5:7e:9a:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org