Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a6130303a3a2f34302d3430203d3e20323730393834.roa
File:                     323830343a373437633a6130303a3a2f34302d3430203d3e20323730393834.roa (raw, json)
Hash identifier:          p/YX31pkLSwXO4mLc8CylrzyRlD1mWDcEwA8ULkmNns=
Subject key identifier:   DA:F2:DE:F7:B1:67:13:0D:1C:D5:9C:B2:5B:1C:0C:2F:F1:18:8D:49
Certificate issuer:       /CN=A5867F518399DDAB33735A7B2492795CCD727428
Certificate serial:       778E56D4B408A9A359C568C6CBD2F5766CE99A6B
Authority key identifier: A5:86:7F:51:83:99:DD:AB:33:73:5A:7B:24:92:79:5C:CD:72:74:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5867F518399DDAB33735A7B2492795CCD727428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a6130303a3a2f34302d3430203d3e20323730393834.roa
Signing time:             Sat 02 Sep 2023 22:00:14 +0000
ROA not before:           Sat 02 Sep 2023 21:55:14 +0000
ROA not after:            Sat 31 Aug 2024 22:00:14 +0000
asID:                     270984
IP address blocks:        2804:747c:a00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:8e:56:d4:b4:08:a9:a3:59:c5:68:c6:cb:d2:f5:76:6c:e9:9a:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5867F518399DDAB33735A7B2492795CCD727428
        Validity
            Not Before: Sep  2 21:55:14 2023 GMT
            Not After : Aug 31 22:00:14 2024 GMT
        Subject: CN=DAF2DEF7B167130D1CD59CB25B1C0C2FF1188D49
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:bc:34:df:ef:fc:e8:59:64:fd:51:a4:f2:53:
                    42:15:8a:47:2e:06:b9:98:40:2b:94:43:1f:44:8a:
                    31:01:c8:3a:0f:9d:6f:08:ac:32:c1:e5:7c:39:79:
                    b6:d0:88:82:4c:bd:53:a4:27:c9:03:e7:d8:d6:69:
                    36:00:6c:c1:4f:c4:9c:ea:ff:ee:be:6c:62:53:20:
                    80:3e:cf:71:ae:b7:02:3d:44:10:4a:64:68:54:cd:
                    d6:ca:ef:67:85:01:ac:34:4e:62:24:73:72:8c:18:
                    f0:38:76:34:da:a2:0a:f3:e0:9e:62:f1:33:be:61:
                    09:b3:c3:d6:6f:5c:36:67:68:a3:74:14:4f:d3:97:
                    c6:8d:f2:f7:33:95:9b:aa:22:4b:44:49:41:0f:ca:
                    26:e8:f0:28:ec:b3:37:9f:1d:0b:bb:5a:4c:df:6c:
                    2e:4d:e3:f4:78:5b:37:af:20:87:c7:99:c1:ee:23:
                    4a:88:f8:4a:02:88:9b:46:40:f4:76:bb:3c:d2:77:
                    80:a2:6b:18:36:bb:1a:7e:a7:c3:89:48:5c:15:dc:
                    b1:81:55:83:42:08:c7:b3:1b:28:5f:e0:2c:75:02:
                    2e:1e:64:14:02:bd:8d:ed:95:e0:7f:96:05:0c:a8:
                    36:81:9e:31:02:5b:fd:ca:26:cf:77:35:e1:b4:45:
                    d1:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:F2:DE:F7:B1:67:13:0D:1C:D5:9C:B2:5B:1C:0C:2F:F1:18:8D:49
            X509v3 Authority Key Identifier:
                keyid:A5:86:7F:51:83:99:DD:AB:33:73:5A:7B:24:92:79:5C:CD:72:74:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/A5867F518399DDAB33735A7B2492795CCD727428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5867F518399DDAB33735A7B2492795CCD727428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a6130303a3a2f34302d3430203d3e20323730393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:747c:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:0e:d5:4c:a5:f9:a8:e5:6f:41:25:f4:27:8e:9a:93:cd:29:
         bd:57:d3:24:82:59:14:f5:9c:75:b7:be:99:86:d3:e7:1f:47:
         23:3a:b1:02:da:2e:2b:25:cf:ce:db:fd:94:b5:c7:46:b1:f8:
         19:67:5a:02:42:c7:02:61:2f:30:a7:e5:a1:d9:41:59:68:a6:
         a7:42:f3:17:c7:25:81:79:93:30:16:1c:84:11:1b:e1:ba:84:
         a1:ef:c4:b3:58:f7:b1:fe:79:ec:db:5a:e3:07:f1:69:89:b4:
         1e:f2:14:03:84:d9:85:82:ce:2e:5b:11:69:88:2a:07:45:a4:
         fc:17:1a:86:a1:6d:b9:aa:c6:81:fd:a7:ab:f1:fe:a5:66:82:
         8c:81:57:fc:2a:22:57:d4:fc:51:14:15:6f:05:64:26:d9:f6:
         16:55:c4:48:91:a0:e0:ae:ed:1b:75:d9:54:e4:55:ea:d5:9d:
         e0:c0:3c:3b:c9:f7:8a:68:1c:0c:32:f3:a4:37:6e:bc:a8:94:
         3f:44:ce:2f:e3:fb:e2:a1:06:99:15:24:79:af:6d:24:56:41:
         9b:f5:47:63:f8:bf:0f:76:cf:68:3f:87:05:5e:15:9e:2e:96:
         e8:fe:be:b8:0b:c4:ef:10:15:20:a2:44:c5:73:42:c0:6c:ea:
         0b:7a:72:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org