Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a353030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a353030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          9Um9LyY3eS2rVDPcfbK+HBqARUn0NHeiMPb1XgboySQ=
Subject key identifier:   C8:37:FF:AC:45:C0:70:82:0F:DC:75:DD:8D:C4:67:1C:48:1D:0B:51
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       54461692478FB4EED6766D5E728B6E1B617A3D45
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a353030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:36 +0000
ROA not before:           Wed 28 Feb 2024 14:06:36 +0000
ROA not after:            Wed 26 Feb 2025 14:11:36 +0000
asID:                     262532
IP address blocks:        2804:ec8:5000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:46:16:92:47:8f:b4:ee:d6:76:6d:5e:72:8b:6e:1b:61:7a:3d:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:36 2024 GMT
            Not After : Feb 26 14:11:36 2025 GMT
        Subject: CN=C837FFAC45C070820FDC75DD8DC4671C481D0B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:e4:ce:c2:7a:80:a4:25:6d:6f:30:ab:04:ef:
                    1e:70:07:52:82:02:a3:5a:3c:d6:d2:d9:10:34:a0:
                    26:c2:30:76:19:59:42:de:20:e4:75:fc:24:36:82:
                    a1:63:e6:fa:07:5d:f5:02:1e:5e:1b:56:4e:ef:0c:
                    8e:9f:f1:55:ac:05:29:e4:c4:ff:cd:bb:f0:af:6a:
                    cb:6c:61:6c:49:d5:94:f2:25:f2:53:31:d9:9c:fe:
                    b2:b0:e3:29:0b:7c:2c:5e:2b:5e:b2:47:b8:3d:2a:
                    64:7b:ee:f9:7f:d6:90:1f:5d:5e:d7:da:14:4a:0e:
                    41:63:2c:94:4f:24:56:2a:74:7e:84:30:c2:49:97:
                    ee:ea:50:4e:45:78:51:5d:b5:b3:c8:6e:90:78:ec:
                    f2:45:46:3a:82:aa:f5:33:72:58:d2:72:71:8e:5c:
                    88:54:64:b1:9e:20:dc:3f:3f:98:22:6e:ac:28:27:
                    52:c3:18:30:97:99:1b:42:4f:ef:4c:9d:26:8d:57:
                    fd:cd:b6:76:78:9f:64:05:d3:3b:ec:ed:ca:d7:5b:
                    a9:1d:56:56:a9:b6:13:1e:a1:59:1c:de:67:08:ef:
                    d9:89:a7:54:23:61:ff:9a:36:1d:61:75:a9:52:cf:
                    5d:ff:90:17:e5:f7:aa:3d:93:da:35:43:5b:26:87:
                    80:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:37:FF:AC:45:C0:70:82:0F:DC:75:DD:8D:C4:67:1C:48:1D:0B:51
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a353030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:5000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2f:3c:af:98:03:cd:69:d1:8d:a2:68:8c:cb:46:3b:88:d0:bc:
         f2:c6:e9:32:dc:93:65:b4:a4:80:af:b4:f9:95:f1:a8:5a:96:
         f4:50:3f:02:ba:1f:98:ab:0c:a1:95:b4:de:9c:59:3a:02:1a:
         5f:81:88:7f:ed:27:19:2d:64:37:53:01:6d:90:a6:8c:07:41:
         7c:e7:da:a7:6a:b1:6d:84:10:57:72:c3:62:29:e3:4f:45:50:
         8f:58:f9:4e:be:c3:49:c4:ab:57:b2:1a:80:1c:8e:3e:9d:aa:
         b7:82:f2:1b:57:e9:76:73:86:d4:04:33:a6:6c:4f:25:15:34:
         2a:81:16:b7:46:fe:d3:1f:e0:25:ce:b0:e6:c2:6b:11:bf:dd:
         79:14:d2:01:2c:de:8e:7a:9d:83:f7:97:8f:b6:db:a1:68:91:
         b5:45:64:9c:d2:9a:4d:a2:3e:c1:bd:5e:a9:60:b8:a7:3d:29:
         e6:9f:84:85:4d:6c:86:b4:bb:b6:01:a4:1d:3c:f4:d2:8b:cd:
         af:f9:e9:c5:fd:19:f1:fb:91:1e:78:ee:09:00:25:9f:8c:58:
         63:37:65:6d:c9:5c:f5:f6:83:8e:79:a7:aa:3a:3f:cd:6b:42:
         c1:7e:bc:f6:bb:0c:1d:29:0f:ed:ec:45:aa:49:fd:45:a0:6b:
         f3:21:86:b7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org