Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a3a2f33322d313238203d3e20323730393834.roa
File:                     323830343a373437633a3a2f33322d313238203d3e20323730393834.roa (raw, json)
Hash identifier:          iNOJrk96yPaF+Vc/BEeIEyAWu69aCTRGXfguQJtAv0Y=
Subject key identifier:   C6:7E:24:B0:CD:00:10:0C:3E:08:2B:B1:7C:C5:97:82:4B:51:02:B5
Certificate issuer:       /CN=AA9C922523E2807EB8815AAA762240EEC9AE442D
Certificate serial:       5C0FACAA5D86370556536D8DC206DF3B2103499B
Authority key identifier: AA:9C:92:25:23:E2:80:7E:B8:81:5A:AA:76:22:40:EE:C9:AE:44:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA9C922523E2807EB8815AAA762240EEC9AE442D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a3a2f33322d313238203d3e20323730393834.roa
Signing time:             Sat 23 Mar 2024 20:35:36 +0000
ROA not before:           Sat 23 Mar 2024 20:30:36 +0000
ROA not after:            Sat 22 Mar 2025 20:35:36 +0000
asID:                     270984
IP address blocks:        2804:747c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:0f:ac:aa:5d:86:37:05:56:53:6d:8d:c2:06:df:3b:21:03:49:9b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA9C922523E2807EB8815AAA762240EEC9AE442D
        Validity
            Not Before: Mar 23 20:30:36 2024 GMT
            Not After : Mar 22 20:35:36 2025 GMT
        Subject: CN=C67E24B0CD00100C3E082BB17CC597824B5102B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:52:1a:78:f0:be:f6:b2:9e:72:88:72:dd:6e:
                    fb:e4:9f:fa:a8:93:82:11:e6:d9:f0:bc:70:83:6d:
                    73:56:3b:09:4f:71:0e:98:6b:67:78:e8:ec:e6:fa:
                    ec:17:7e:c8:77:15:82:e3:f4:9a:1d:19:84:e8:8c:
                    1c:0a:c0:bf:24:a3:a1:41:a6:51:23:35:37:66:a0:
                    07:4d:a1:c2:04:9f:10:3f:97:12:af:cf:13:b0:65:
                    b4:e2:ed:66:6a:d0:36:61:c8:27:1c:ac:70:08:d1:
                    65:47:ab:6f:80:a9:e1:85:a2:48:46:1b:d6:5f:bc:
                    61:26:05:a0:49:c9:8f:95:1b:7d:a4:38:43:25:0c:
                    7d:47:c4:8c:ca:c4:55:0d:c2:29:9c:f3:d1:ae:23:
                    fb:60:b7:d8:7f:6f:a0:b4:fc:28:a6:6e:fa:d1:b1:
                    a9:14:c5:fe:32:fd:e1:03:0a:43:aa:51:62:73:c0:
                    30:9b:00:ed:62:dd:69:7d:7c:36:42:6d:0b:f2:75:
                    27:33:70:08:6f:f3:5c:c7:3c:39:d5:41:5a:dd:41:
                    3d:36:c5:ba:65:de:51:dd:47:36:98:62:af:c4:87:
                    a2:d8:47:f9:eb:02:93:71:33:6b:26:c0:eb:da:9c:
                    02:56:39:d7:bf:93:98:a9:2c:19:31:1f:0f:73:51:
                    09:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:7E:24:B0:CD:00:10:0C:3E:08:2B:B1:7C:C5:97:82:4B:51:02:B5
            X509v3 Authority Key Identifier:
                keyid:AA:9C:92:25:23:E2:80:7E:B8:81:5A:AA:76:22:40:EE:C9:AE:44:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/AA9C922523E2807EB8815AAA762240EEC9AE442D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA9C922523E2807EB8815AAA762240EEC9AE442D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a3a2f33322d313238203d3e20323730393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:747c::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:f2:9d:9c:98:2d:1e:48:b3:51:8e:0d:63:5f:65:eb:eb:75:
         b3:3e:74:67:5c:65:07:38:e2:3e:a7:77:99:df:cb:fc:54:69:
         a3:19:75:7c:10:58:70:bd:f3:ba:25:46:73:2a:9a:6d:3d:62:
         9c:a6:a7:5f:d4:24:26:f5:c1:8b:39:21:41:0a:09:81:e7:9d:
         37:32:2b:88:ee:9e:5f:17:d3:df:12:0f:2e:26:07:26:ca:92:
         47:76:b7:24:17:94:4b:c8:ca:77:c3:62:ec:3d:65:9f:ec:d8:
         8e:2d:a1:72:e8:82:be:63:56:73:31:ce:28:16:de:7d:f6:ea:
         44:4a:35:5e:2b:a1:25:83:01:da:a1:55:2a:9d:f2:17:d0:3f:
         d5:45:f8:02:a2:6f:2d:34:8a:36:9e:bb:2b:25:49:6f:3f:b8:
         c7:e0:55:7d:63:e7:92:4c:42:ed:5d:fa:57:92:52:bb:bb:86:
         89:7e:f8:38:e9:35:2a:d0:ec:2f:61:1c:91:6d:4f:47:d1:68:
         18:6c:cc:c2:9f:42:0d:3b:15:72:87:d8:94:bd:5f:e4:ca:c5:
         ce:38:4a:e1:09:d6:12:64:82:35:96:5c:95:90:99:3d:cc:fe:
         97:1c:11:11:57:36:21:44:ee:e4:2b:6e:89:61:5f:46:50:0f:
         a8:7e:48:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org