Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a613030303a3a2f33352d3335203d3e20323632353332.roa
File:                     323830343a6563383a613030303a3a2f33352d3335203d3e20323632353332.roa (raw, json)
Hash identifier:          6yL7cnr62O/7nTh9gyICwNG8/010upt1nQvwFfoHmm0=
Subject key identifier:   E4:8D:AD:E3:75:12:00:1F:B9:C0:AD:11:67:87:29:B6:6F:AD:20:6C
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       724DC6475434A773D72B003BA9C0E7FF47862838
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a613030303a3a2f33352d3335203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:11:49 +0000
ROA not before:           Wed 28 Feb 2024 14:06:49 +0000
ROA not after:            Wed 26 Feb 2025 14:11:49 +0000
asID:                     262532
IP address blocks:        2804:ec8:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4d:c6:47:54:34:a7:73:d7:2b:00:3b:a9:c0:e7:ff:47:86:28:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:06:49 2024 GMT
            Not After : Feb 26 14:11:49 2025 GMT
        Subject: CN=E48DADE37512001FB9C0AD11678729B66FAD206C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5e:d2:7e:64:36:36:25:23:5b:5b:3e:76:be:
                    3d:de:b7:89:ea:4f:25:be:e6:07:f3:bc:6c:5d:f0:
                    fd:9e:a2:e6:db:ca:b4:f5:2a:1c:32:7e:5c:d0:ce:
                    55:3f:15:34:c9:1d:54:04:a0:c6:89:a3:03:5a:80:
                    23:e1:22:97:11:b9:1e:d5:50:47:f8:a3:3a:dc:dd:
                    06:29:a2:ea:11:05:ef:a3:6a:23:7d:0b:89:8b:b8:
                    94:91:2c:9e:3b:c5:d2:57:16:7c:f5:8e:b7:fb:7a:
                    aa:7d:31:0e:57:13:bc:88:6b:f6:49:08:a0:55:4c:
                    b3:60:2b:4f:c3:57:90:7a:ae:93:54:69:54:54:9b:
                    0f:35:1e:dd:11:0e:30:7e:8d:5d:56:87:6b:44:22:
                    f3:10:e6:20:cb:a2:00:37:57:de:12:2b:1d:b7:2a:
                    6c:d2:81:4d:7c:b1:81:53:7e:d2:10:da:4f:09:04:
                    ff:b0:e3:99:24:51:24:fb:f1:c2:2f:a9:86:ba:b5:
                    92:35:96:ca:37:9d:69:94:a2:71:4b:8e:58:b7:46:
                    58:b9:dc:49:f6:df:62:9b:f9:fe:35:a0:2b:ac:9d:
                    61:78:87:61:39:96:97:bb:51:36:22:9f:ae:92:7c:
                    b0:31:22:0a:d2:02:dd:38:7f:4e:e1:f0:61:9e:53:
                    9f:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:8D:AD:E3:75:12:00:1F:B9:C0:AD:11:67:87:29:B6:6F:AD:20:6C
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a613030303a3a2f33352d3335203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         8b:c7:23:5b:f9:02:56:48:84:03:c4:db:63:65:e0:bd:17:c3:
         3e:f0:9e:4c:35:a4:33:f7:8b:48:60:f5:0f:f4:c9:d6:2b:a7:
         36:17:77:30:f9:12:2a:b4:20:66:64:be:2c:28:cb:71:ce:48:
         43:e9:55:68:0c:3f:2b:22:2c:79:4d:c2:94:1e:13:78:04:61:
         35:12:92:2c:13:46:e8:97:e5:a2:9a:93:c4:96:7b:18:85:0e:
         1f:cb:93:47:5c:f4:75:7b:66:af:6b:79:fb:4a:7d:37:6a:04:
         dc:9f:b1:6e:de:5a:2e:d3:e3:64:8e:ea:e7:90:0a:8b:8e:3b:
         bb:fa:fb:8b:c6:29:ef:86:df:ba:67:11:09:e6:f8:25:e9:f9:
         74:0c:8e:c6:9b:7c:f2:f6:20:8a:27:7b:95:ba:b5:9d:83:b1:
         03:94:f3:f7:08:2a:b3:42:4f:0d:53:15:a5:5b:f9:16:6b:f2:
         ea:ee:4b:98:45:9a:62:95:49:77:6d:40:92:d2:c9:45:db:e0:
         4c:a6:82:17:fe:ac:35:04:ff:bc:0c:20:6e:ac:f2:d9:a9:51:
         fa:c5:1a:29:ed:7a:02:d3:9f:39:b7:dc:b8:5f:8e:4a:61:7a:
         a4:f8:b4:a5:fb:10:71:8a:27:ff:e0:48:ab:b9:94:c2:e7:1b:
         3f:66:f8:19
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org