Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a633030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a633030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          7S2issXbab8XUa8ZuR/guB3b/gC9dfzTDPtQ7e4cMoU=
Subject key identifier:   CB:56:56:45:76:7C:C6:6D:D7:04:95:F7:05:3B:C1:CA:9D:38:2A:DC
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       69B618B8F2BD8F415D0BCF62271E10CE7ABE9C0D
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a633030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:12:57 +0000
ROA not before:           Wed 28 Feb 2024 14:07:57 +0000
ROA not after:            Wed 26 Feb 2025 14:12:57 +0000
asID:                     262532
IP address blocks:        2804:ec8:c000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:b6:18:b8:f2:bd:8f:41:5d:0b:cf:62:27:1e:10:ce:7a:be:9c:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:07:57 2024 GMT
            Not After : Feb 26 14:12:57 2025 GMT
        Subject: CN=CB565645767CC66DD70495F7053BC1CA9D382ADC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:fa:40:0c:55:70:28:90:4e:51:84:ae:cc:b3:
                    77:a8:a9:db:c6:fc:0a:6e:7a:d9:fe:ce:80:ac:93:
                    3e:e3:da:b2:98:39:6e:3e:8e:e5:7f:38:77:b4:e2:
                    3e:73:49:e0:8d:25:4d:9a:e4:38:42:aa:b5:8e:2e:
                    6d:5f:3e:a8:45:36:a5:aa:fd:f1:db:5b:67:77:d9:
                    72:b2:7d:f6:1e:c0:d0:8f:95:4a:0b:f4:00:cb:0c:
                    18:64:ae:4a:7e:29:04:1e:47:c1:2e:6e:11:cd:2f:
                    37:81:63:b7:cb:cd:e9:60:71:e7:93:2f:b2:5d:88:
                    26:4f:79:38:60:41:3f:0e:71:4d:9b:9d:a2:1c:35:
                    e8:30:77:e7:e0:ec:9b:07:39:6f:9c:f5:5d:e8:d2:
                    66:8b:86:eb:28:64:0a:62:1b:59:e2:ea:46:7f:3a:
                    8f:04:e4:a1:4a:ba:cc:b7:e8:2d:95:2c:df:58:1f:
                    78:b7:4e:53:13:a3:5b:e2:c2:48:ad:79:33:ec:4a:
                    f4:d0:a8:39:20:e4:28:4b:9f:1e:34:27:f9:64:94:
                    20:c8:b8:ed:72:63:90:96:2f:91:c8:c3:50:73:3d:
                    75:00:65:fb:b7:db:f8:c0:45:f4:11:bb:2a:4d:49:
                    5b:05:46:e4:b5:e1:b3:21:f1:8d:aa:3d:54:37:f3:
                    a2:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:56:56:45:76:7C:C6:6D:D7:04:95:F7:05:3B:C1:CA:9D:38:2A:DC
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a633030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:c000::/36

    Signature Algorithm: sha256WithRSAEncryption
         23:98:1a:ef:5d:f5:3e:15:f5:71:87:72:98:73:0b:17:08:02:
         e0:c2:0a:35:10:43:bc:f3:80:45:c3:3b:af:6f:35:a3:1d:cf:
         b6:5a:b8:8d:b3:f4:76:f2:aa:fe:97:e7:a5:d6:5b:96:62:74:
         96:c9:9a:93:a4:2b:10:73:ce:d0:4c:02:20:0a:e6:39:85:a5:
         d2:bc:cb:c7:ca:53:e3:2c:51:2f:5c:e2:67:18:0d:dd:04:fc:
         79:08:5b:81:cb:9a:81:97:08:51:7f:99:ee:62:05:3a:6f:34:
         85:e3:25:1a:87:b8:2c:47:b6:af:85:0a:b4:a0:77:c9:4a:af:
         00:8c:ed:34:fc:d7:d8:e9:52:f1:c3:4d:55:32:9b:e7:1b:0f:
         24:d9:27:8a:46:d1:cd:55:aa:ba:27:47:bb:e7:ad:f0:4c:05:
         74:0f:b3:19:b7:43:29:d5:a4:19:65:72:50:bb:6d:81:ad:09:
         84:b9:fd:70:ae:17:da:a6:3a:7c:3e:d3:5f:be:4f:b8:d4:60:
         3d:4a:9f:8a:0b:7c:09:41:fa:84:27:67:16:14:81:d3:9e:2d:
         2c:c7:a3:ee:cd:f6:6e:de:9f:81:81:7a:d7:65:e4:35:46:e5:
         d7:75:44:66:54:a8:78:e4:83:6f:ae:1e:a3:f7:43:3d:dc:34:
         4f:2c:31:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org