Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a383030303a3a2f33342d3334203d3e20323632353332.roa
File:                     323830343a6563383a383030303a3a2f33342d3334203d3e20323632353332.roa (raw, json)
Hash identifier:          HvnGftJPDaRhRpCSbqL2bK5M2yi6B4Vg/jrytMQ0qEQ=
Subject key identifier:   3D:09:F7:89:C9:75:78:9F:98:02:8D:44:A7:43:F0:E0:B1:9C:65:7B
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       7442973A2C433FD372F08967855C2E73906917DC
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a383030303a3a2f33342d3334203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:43 +0000
ROA not before:           Wed 28 Feb 2024 14:06:43 +0000
ROA not after:            Wed 26 Feb 2025 14:11:43 +0000
asID:                     262532
IP address blocks:        2804:ec8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:42:97:3a:2c:43:3f:d3:72:f0:89:67:85:5c:2e:73:90:69:17:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:43 2024 GMT
            Not After : Feb 26 14:11:43 2025 GMT
        Subject: CN=3D09F789C975789F98028D44A743F0E0B19C657B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:50:07:5c:6f:31:76:b6:1d:74:b1:bc:ce:15:
                    83:a6:fb:67:26:48:69:28:af:b0:58:71:1c:44:d2:
                    21:7e:a8:22:fb:3f:82:4a:e5:9c:f8:38:56:08:99:
                    66:fb:0d:cb:ef:86:61:f1:51:84:25:d6:e5:a8:05:
                    fd:65:52:05:70:98:7e:2c:c5:8b:40:a6:32:5c:cf:
                    bc:48:27:78:c4:74:97:5a:54:74:12:1b:0d:22:04:
                    24:ef:f4:49:55:8d:3b:a2:12:74:c5:e8:d6:17:a5:
                    0f:80:78:2c:c9:96:5f:0c:4c:14:96:8f:21:82:7c:
                    d6:9f:94:16:18:84:f7:71:15:39:fd:31:7b:e5:94:
                    ad:ef:5b:7f:08:d1:15:47:31:88:7e:07:58:46:18:
                    70:46:f5:1d:b3:a0:23:3b:7d:4e:60:ab:37:09:c0:
                    d4:83:a4:b2:db:c2:c6:17:4b:3b:2d:c7:33:3f:b3:
                    30:06:0d:d2:c5:a8:76:32:f2:f1:d2:fd:97:61:a2:
                    ef:83:a7:9e:c1:7b:ae:d9:b5:64:fa:e5:f7:42:a3:
                    0d:3e:ea:8f:b9:fb:eb:47:f3:b8:3f:14:8c:ac:f6:
                    67:4a:ba:df:63:74:00:0b:57:7a:ae:09:c9:d8:70:
                    3c:eb:0f:e6:77:ea:57:28:ad:7d:a9:3e:20:e1:dd:
                    b4:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:09:F7:89:C9:75:78:9F:98:02:8D:44:A7:43:F0:E0:B1:9C:65:7B
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a383030303a3a2f33342d3334203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         4a:77:ac:38:80:3c:66:0a:75:2a:cf:02:b6:b7:19:0f:8a:2d:
         c3:25:67:8a:a3:1d:66:82:a6:92:5b:21:ac:bc:86:10:0b:d7:
         86:e7:5d:49:a2:26:35:e5:93:60:6e:0e:81:1c:bd:6b:7e:da:
         4a:77:cb:c4:15:30:df:09:bc:1c:f4:24:f2:f0:77:3d:83:dc:
         de:09:19:7d:c1:1f:31:3f:9e:5f:11:dd:d8:1b:c0:80:20:e2:
         a2:d0:cb:fb:92:76:09:90:6f:2e:b9:cf:68:68:05:87:16:2a:
         06:8d:d4:04:d0:4a:32:41:6e:ec:82:29:3e:ac:db:43:9e:8b:
         fd:30:e7:84:4b:fa:d8:7d:03:1f:e9:bb:fd:29:cd:92:75:25:
         89:a6:02:60:3d:ce:05:b5:b3:23:98:27:f9:21:c6:c9:44:30:
         fe:98:2e:65:4c:b0:b9:fc:db:13:80:d1:97:77:d0:39:c4:68:
         ff:c0:42:dc:01:8f:ad:44:10:85:37:ff:c4:4a:d3:1b:a3:4d:
         f0:9d:53:a0:12:bc:06:23:cb:31:81:92:a4:8f:05:ab:b2:c4:
         b5:ba:75:3b:05:af:03:02:e5:55:2f:d9:c9:36:62:ae:8c:c2:
         47:8d:a8:88:c2:93:f3:6d:4f:15:e0:cc:c6:5f:d9:69:35:93:
         39:36:3e:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org