Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/323830343a366537343a323a3a2f34382d3438203d3e20323730353938.roa
File:                     323830343a366537343a323a3a2f34382d3438203d3e20323730353938.roa (raw, json)
Hash identifier:          WY2XoXw7oRx8bmaK4TJi9KAeC4NkVsI/PPgu3Rj780M=
Subject key identifier:   73:D3:17:B8:69:7F:24:FF:BB:59:6F:1E:A8:42:84:2B:21:13:12:3F
Certificate issuer:       /CN=940B94B8927D3C9CB302DD59BDDF8D98C74257B6
Certificate serial:       632C441F8ED2A6C60E1ACE04BB4DB91A1976DE27
Authority key identifier: 94:0B:94:B8:92:7D:3C:9C:B3:02:DD:59:BD:DF:8D:98:C7:42:57:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/323830343a366537343a323a3a2f34382d3438203d3e20323730353938.roa
Signing time:             Tue 05 Dec 2023 13:44:27 +0000
ROA not before:           Tue 05 Dec 2023 13:39:27 +0000
ROA not after:            Tue 03 Dec 2024 13:44:27 +0000
asID:                     270598
IP address blocks:        2804:6e74:2::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:2c:44:1f:8e:d2:a6:c6:0e:1a:ce:04:bb:4d:b9:1a:19:76:de:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=940B94B8927D3C9CB302DD59BDDF8D98C74257B6
        Validity
            Not Before: Dec  5 13:39:27 2023 GMT
            Not After : Dec  3 13:44:27 2024 GMT
        Subject: CN=73D317B8697F24FFBB596F1EA842842B2113123F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:0b:87:1d:f0:36:60:79:fc:3a:42:a3:24:21:
                    7a:55:78:0d:ae:20:a9:65:1b:19:bf:26:9f:8b:8a:
                    0a:77:9f:09:df:55:66:02:28:11:2c:c8:9e:c2:e8:
                    b5:08:cf:76:26:4a:93:43:5f:b8:db:b9:b0:73:24:
                    25:7b:ab:5b:05:0b:53:14:bc:43:a6:dc:e8:92:c4:
                    e9:a5:9a:4f:91:a3:32:d4:c9:02:47:3e:fe:8d:7a:
                    62:96:a2:6b:fd:e6:1e:e9:05:a4:a4:f1:61:c0:aa:
                    af:aa:fe:d5:9f:f7:83:22:77:33:87:7f:7c:a5:16:
                    64:c7:e7:99:78:8b:12:c4:64:94:59:ac:f3:d2:74:
                    70:97:d7:94:d5:30:77:c8:e7:0c:ef:2b:e4:f2:58:
                    40:81:99:03:79:4f:06:9a:6c:7a:38:42:ae:44:a9:
                    34:57:95:17:dc:54:db:f2:4b:12:9b:d3:96:3a:4b:
                    dd:ff:b7:95:49:77:1c:b0:c6:35:5f:65:cf:73:e2:
                    d4:75:bf:39:b6:cf:c7:ff:5b:95:f1:32:18:c7:8d:
                    21:e0:78:09:7e:03:d3:48:c9:f7:9a:75:a1:77:21:
                    4f:7f:e9:23:42:1e:e6:92:14:e8:72:30:7c:e7:de:
                    51:af:5d:2e:1b:a4:24:e6:3c:e7:c2:85:8e:f4:70:
                    a4:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:D3:17:B8:69:7F:24:FF:BB:59:6F:1E:A8:42:84:2B:21:13:12:3F
            X509v3 Authority Key Identifier:
                keyid:94:0B:94:B8:92:7D:3C:9C:B3:02:DD:59:BD:DF:8D:98:C7:42:57:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/940B94B8927D3C9CB302DD59BDDF8D98C74257B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HetaHitxLYfSDX6cL2hJyCcSCfRFbrciEvqTkNmRsc7k/0/323830343a366537343a323a3a2f34382d3438203d3e20323730353938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6e74:2::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:40:7b:a1:b8:92:f2:b3:2e:42:d7:05:2b:bc:1d:12:95:88:
         04:6d:6f:26:21:78:2a:f1:73:f0:e3:ba:f4:89:05:8e:20:74:
         b1:e4:a7:06:73:97:0e:95:4c:36:57:cf:21:43:a8:a2:4c:75:
         de:6b:7a:4d:8a:87:ff:99:18:ea:2a:f5:e4:47:24:b0:b2:59:
         bb:ff:29:b4:4b:fe:57:92:52:c0:e2:d7:b5:4e:74:7b:c1:bd:
         01:01:3e:15:bb:85:8e:18:c9:35:3c:13:17:8a:21:80:d0:08:
         89:57:99:be:d8:d2:2e:20:49:d7:b0:b5:f1:0f:6e:d4:3f:f5:
         89:a2:6d:06:61:14:b2:93:ac:f6:fd:41:dc:81:c6:5e:7c:2f:
         80:92:cd:a6:18:50:68:a9:65:f3:bf:3c:20:83:26:61:c9:a5:
         65:7e:c6:c6:33:0a:cb:42:ed:98:c2:43:a4:39:31:e7:ea:8d:
         aa:fe:74:8a:3a:8a:ad:33:bd:d0:db:37:fc:5d:6b:68:89:23:
         6e:af:ff:b7:87:06:fe:f3:4d:0d:a0:2b:a2:ac:4b:2a:ac:2f:
         8e:37:80:75:35:84:9a:6e:fd:6c:c8:4b:0b:01:ba:f8:7e:59:
         1e:0f:45:88:22:a1:8c:03:18:f3:56:0e:a7:58:e2:35:0d:b8:
         61:26:e6:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:01 2024 by rpki-client on console-fra.rpki-client.org