Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a373030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a373030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          dJR7CsYWOlNfpOnCN3hJnkqFnQP8plM7wUgba1o0UfQ=
Subject key identifier:   62:DC:92:B7:22:41:D6:F0:76:CD:73:E7:E1:69:39:C2:21:8E:74:93
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       23BFB69835711E73E6AF80A54C5E8AF43C560894
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a373030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:40 +0000
ROA not before:           Wed 28 Feb 2024 14:06:40 +0000
ROA not after:            Wed 26 Feb 2025 14:11:40 +0000
asID:                     262532
IP address blocks:        2804:ec8:7000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:bf:b6:98:35:71:1e:73:e6:af:80:a5:4c:5e:8a:f4:3c:56:08:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:40 2024 GMT
            Not After : Feb 26 14:11:40 2025 GMT
        Subject: CN=62DC92B72241D6F076CD73E7E16939C2218E7493
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:1c:67:5c:66:3f:ab:a1:4d:ae:b5:90:1b:92:
                    98:a2:f0:7f:3f:3c:07:a9:3a:2e:7a:67:e5:cd:0f:
                    e0:01:af:29:47:9e:65:ed:cf:64:b9:9d:bb:1a:9d:
                    3d:b4:59:57:d1:4a:c7:11:ec:b2:06:0a:1b:7c:3e:
                    94:d1:20:aa:d6:2b:7d:d3:ab:30:7a:cc:db:9c:11:
                    6e:26:ad:f3:35:4f:d2:5f:4b:3f:c5:0f:4d:e7:cf:
                    05:31:84:ae:1f:95:d0:20:93:03:e7:d7:7d:77:04:
                    20:21:7e:f6:cc:d7:99:64:bb:4c:1d:96:16:91:c6:
                    98:d0:b1:16:b2:b8:9b:3f:0d:65:4a:f8:bd:ba:70:
                    dc:c4:05:a6:85:c7:d2:76:3d:85:9d:5e:d7:36:70:
                    53:e9:b9:af:d4:32:f7:a8:b3:ab:33:5b:34:94:ea:
                    c4:6b:cc:07:61:c0:98:59:af:17:fd:1f:92:a3:0d:
                    99:fd:d4:f9:61:86:52:55:55:f7:6f:0c:c6:85:60:
                    8a:6c:ef:77:46:c7:19:96:fd:38:4b:39:38:a3:96:
                    dc:35:62:8c:5c:d5:0d:0e:d2:a2:77:63:29:96:55:
                    0b:d1:f5:7c:41:1b:b1:9c:c7:82:31:02:57:41:2f:
                    20:39:38:2a:53:b1:d8:24:f4:ca:5a:33:c4:7a:3f:
                    16:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:DC:92:B7:22:41:D6:F0:76:CD:73:E7:E1:69:39:C2:21:8E:74:93
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a373030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:7000::/36

    Signature Algorithm: sha256WithRSAEncryption
         33:ef:77:06:e1:9c:0e:db:48:70:91:64:ec:f8:49:58:e6:5c:
         4d:3c:c0:85:c6:d7:a1:ad:9e:5f:e3:0d:37:48:07:af:6e:0f:
         ac:7d:17:26:8c:4f:93:1b:6c:64:c5:6f:fa:5f:f0:0e:ef:15:
         60:fa:40:37:96:0e:47:f1:95:84:3c:7d:d2:8c:08:31:ee:f6:
         ea:ee:2d:e5:9d:f2:6e:62:e4:5a:f9:fe:df:a7:02:cb:2f:00:
         a8:39:b1:8c:c0:36:91:b3:64:56:51:94:cd:d3:95:c7:a1:5d:
         6d:d6:5b:4e:2e:90:24:4e:fc:13:1b:af:fe:da:7f:37:f9:8d:
         a3:81:c2:e0:46:f7:2b:92:aa:4c:d9:59:e5:89:3c:53:81:70:
         30:56:3a:77:95:89:b7:a5:5d:60:4b:fd:9b:7c:4d:aa:6b:fa:
         60:81:1d:51:98:15:77:40:36:85:b5:90:41:f9:c2:ed:c3:9a:
         95:49:31:e4:be:33:44:3c:86:4e:fd:84:dd:f6:a6:88:06:48:
         3b:be:12:0b:96:94:d4:02:27:44:3c:8a:4d:a1:36:d9:91:ff:
         55:98:88:06:cb:82:64:be:c3:64:8e:08:21:34:fd:e4:d7:06:
         30:95:a7:71:25:70:eb:47:6b:83:64:f4:28:a1:db:09:aa:58:
         45:2c:cb:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org