Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a633030303a3a2f33342d3334203d3e20323730393834.roa
File:                     323830343a373437633a633030303a3a2f33342d3334203d3e20323730393834.roa (raw, json)
Hash identifier:          bNR7WtJ4R+Z4DnKHeYYr1nHQw17xgRdT5FLfmY7VAAo=
Subject key identifier:   54:BA:E9:F8:2A:AD:D8:32:82:A4:F5:EA:B0:F9:4F:A7:06:14:4F:25
Certificate issuer:       /CN=A5867F518399DDAB33735A7B2492795CCD727428
Certificate serial:       40F5946ABE507A7592856B218276DE7C594D490A
Authority key identifier: A5:86:7F:51:83:99:DD:AB:33:73:5A:7B:24:92:79:5C:CD:72:74:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5867F518399DDAB33735A7B2492795CCD727428.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a633030303a3a2f33342d3334203d3e20323730393834.roa
Signing time:             Sat 02 Sep 2023 22:00:14 +0000
ROA not before:           Sat 02 Sep 2023 21:55:14 +0000
ROA not after:            Sat 31 Aug 2024 22:00:14 +0000
asID:                     270984
IP address blocks:        2804:747c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:f5:94:6a:be:50:7a:75:92:85:6b:21:82:76:de:7c:59:4d:49:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5867F518399DDAB33735A7B2492795CCD727428
        Validity
            Not Before: Sep  2 21:55:14 2023 GMT
            Not After : Aug 31 22:00:14 2024 GMT
        Subject: CN=54BAE9F82AADD83282A4F5EAB0F94FA706144F25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:ec:c1:ee:fe:fc:f2:ca:87:ec:19:21:d1:bd:
                    a6:03:fe:7d:c5:8b:40:61:d5:ee:f7:12:de:a8:57:
                    d7:fc:c6:f9:6b:fa:77:e5:f7:a8:50:50:40:8b:ce:
                    b5:cd:3d:10:48:27:7b:39:b9:e4:a9:a8:b1:b0:72:
                    e0:ff:f3:78:68:59:5b:44:e8:ef:22:5e:65:cc:d9:
                    23:18:89:20:32:b5:38:1c:07:8e:d9:b4:9c:c9:ba:
                    a2:dc:78:bc:1e:f8:a1:bc:4a:a0:58:ce:7d:97:9c:
                    20:ab:91:ca:97:86:3a:1d:8e:77:bc:15:94:72:45:
                    42:ee:8a:a9:44:ed:95:80:a4:ae:40:5b:ca:1f:97:
                    54:be:30:d2:fb:ec:4e:b0:72:17:ac:5c:5c:a9:c9:
                    f8:2d:a2:7b:64:c6:43:03:46:00:a9:fe:1b:ad:1e:
                    3f:bf:00:9e:bf:a1:97:4d:e3:fc:a8:a9:5b:12:8a:
                    72:e7:61:6e:56:e8:d9:56:45:ca:87:de:db:5d:a6:
                    84:b0:e7:0a:bf:de:5f:a3:ec:cb:08:06:88:4e:67:
                    bf:e7:f3:14:ec:d3:2a:b5:d7:c0:8b:2a:15:48:85:
                    e2:5d:5d:88:dc:0b:18:e0:87:22:97:3a:fc:cd:d6:
                    46:7e:ae:fb:99:a2:f6:fc:e1:87:70:34:c8:36:a0:
                    06:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BA:E9:F8:2A:AD:D8:32:82:A4:F5:EA:B0:F9:4F:A7:06:14:4F:25
            X509v3 Authority Key Identifier:
                keyid:A5:86:7F:51:83:99:DD:AB:33:73:5A:7B:24:92:79:5C:CD:72:74:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/A5867F518399DDAB33735A7B2492795CCD727428.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5867F518399DDAB33735A7B2492795CCD727428.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HjuGRtBdqZLV8Pdj1wLcpSzhAUtdJ2jmATU6Z5sSHFCo/0/323830343a373437633a633030303a3a2f33342d3334203d3e20323730393834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:747c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         70:ae:d9:a9:bf:c9:7c:a7:5f:2a:26:11:68:a5:ed:7e:5e:61:
         f9:b3:0f:35:3a:db:75:c7:7d:c9:ab:09:e1:d3:61:a1:29:94:
         10:74:5a:87:60:21:56:d6:e3:a2:65:9b:43:18:69:f3:4f:c4:
         65:3e:4d:a4:c7:d2:e7:ce:68:8e:ef:f2:0e:a6:b6:b4:e3:18:
         5e:31:2f:4b:8e:d1:bb:fc:97:42:fc:92:e0:05:98:55:da:f0:
         40:ff:94:da:cb:6b:d7:8f:a7:e4:b4:e5:8d:62:b8:75:71:fa:
         bd:1a:6e:4d:10:16:d9:04:1b:00:57:cf:aa:dc:ce:a4:57:e7:
         8f:16:56:dc:9c:d3:8a:1b:f6:b0:f7:63:9a:1e:d3:7a:3e:83:
         ba:f7:83:52:83:8a:08:46:38:e9:97:ba:94:17:6f:67:64:c7:
         c9:67:9e:b8:6f:3e:07:96:aa:9d:4b:d3:ef:62:b5:19:6b:6f:
         87:83:97:91:17:34:c4:48:3c:84:83:47:ba:70:82:7f:eb:fa:
         e4:21:13:3e:81:b9:4e:c7:69:2f:09:70:71:6f:8f:f6:03:1b:
         d8:79:50:78:62:e5:8b:8a:42:79:e6:03:73:69:45:22:9e:81:
         11:17:71:59:d0:21:a8:e7:6e:fe:ae:c3:61:41:e2:46:59:3d:
         36:6e:06:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org