Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a343030303a3a2f33352d3335203d3e20323632353332.roa
File:                     323830343a6563383a343030303a3a2f33352d3335203d3e20323632353332.roa (raw, json)
Hash identifier:          fE2IKIUDGxn4U1Lku4LDmyRSCLr+SFwgGEMOt7Dflmk=
Subject key identifier:   14:0D:D4:EC:80:35:A4:64:F1:C9:2B:97:E9:EE:41:51:77:BF:BD:DD
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       54466335D8C69CE4E70989EC9D10A25D9D95AC5C
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a343030303a3a2f33352d3335203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:31 +0000
ROA not before:           Wed 28 Feb 2024 14:06:31 +0000
ROA not after:            Wed 26 Feb 2025 14:11:31 +0000
asID:                     262532
IP address blocks:        2804:ec8:4000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:46:63:35:d8:c6:9c:e4:e7:09:89:ec:9d:10:a2:5d:9d:95:ac:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:31 2024 GMT
            Not After : Feb 26 14:11:31 2025 GMT
        Subject: CN=140DD4EC8035A464F1C92B97E9EE415177BFBDDD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:a0:60:03:af:dc:57:a0:d7:f8:84:4b:a4:27:
                    43:d2:92:31:94:26:94:21:08:5c:00:63:c3:04:50:
                    73:fa:da:71:03:ee:da:7b:da:b5:14:1c:60:05:0c:
                    43:41:ea:d0:ee:46:31:8a:97:df:55:5f:94:79:73:
                    03:a0:65:4a:bb:13:75:db:cc:fd:32:80:27:e1:bc:
                    57:05:d5:c2:29:a7:4f:0d:8c:6b:20:20:6c:9c:97:
                    4b:d4:ea:26:fe:59:37:30:67:5b:4a:2c:b0:45:97:
                    e7:02:fc:fe:28:13:f0:0e:42:e1:49:59:0c:4d:36:
                    f8:45:35:16:5b:26:fb:11:f7:18:67:0e:ed:10:7c:
                    9a:90:04:f9:a6:5f:eb:17:e4:c0:78:f1:6d:82:8b:
                    7a:3a:fe:ef:49:96:f2:4b:20:9d:4f:cf:a7:b5:14:
                    db:c5:1a:f4:2e:ea:57:10:c1:00:13:01:a6:4c:b2:
                    ce:67:c2:39:17:7b:1b:6c:c9:b8:a0:9c:c0:17:29:
                    84:35:40:98:c2:21:30:69:f9:24:a8:33:42:6f:40:
                    e5:d8:75:fc:d8:9e:97:f6:6f:9e:b5:8c:75:2a:aa:
                    6f:be:3c:38:7d:21:96:ad:e2:77:36:01:5b:9e:76:
                    e4:44:08:77:e4:89:ba:b1:8b:5c:e3:b6:5c:24:cb:
                    ff:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:0D:D4:EC:80:35:A4:64:F1:C9:2B:97:E9:EE:41:51:77:BF:BD:DD
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a343030303a3a2f33352d3335203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:4000::/35

    Signature Algorithm: sha256WithRSAEncryption
         50:4a:ed:9e:6e:87:ff:3e:60:1e:2e:e1:9c:11:be:76:25:f5:
         d4:32:d6:82:d2:c0:d7:66:dc:20:3d:9e:e5:a5:65:6b:02:dc:
         b8:c9:f9:83:4d:b1:9a:e4:95:17:0c:6a:8e:d4:af:de:60:e1:
         8e:9b:4f:eb:1d:70:23:46:58:25:73:7a:c2:31:5c:e8:eb:2b:
         8f:73:9c:59:58:1b:4b:ac:9f:00:e4:ba:d2:46:3a:c0:8e:87:
         28:e2:d1:47:8b:c4:8a:36:4a:cf:ac:92:df:5b:bc:6d:e0:61:
         2a:e3:e5:f3:b7:cb:92:f6:b4:41:1f:6b:aa:63:47:f3:e3:4a:
         5a:2a:de:b3:fd:c4:21:16:d4:2c:94:2f:37:22:2d:2e:d9:a9:
         67:e7:61:23:7e:86:cb:7f:83:7c:a8:12:37:77:67:4d:8c:d6:
         3b:53:24:b5:7d:74:f9:ae:27:02:b3:07:10:b6:3a:4a:60:0c:
         bc:19:ba:25:5d:72:a0:fc:c7:5b:fd:6e:38:32:fb:5a:f9:a4:
         74:42:2a:53:fe:05:b4:de:05:0d:b1:3c:0f:97:c3:f0:03:87:
         6c:ff:02:e5:fd:d2:4c:fc:cf:4d:da:cb:05:92:ab:89:42:9e:
         3b:ec:60:cd:a2:23:19:06:de:bd:0f:20:c5:5b:06:ef:be:f6:
         d5:6d:72:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org