Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a653030303a3a2f33352d3335203d3e20323632353332.roa
File:                     323830343a6563383a653030303a3a2f33352d3335203d3e20323632353332.roa (raw, json)
Hash identifier:          BrhEqY/zfqN4KU0ZX5q3l0SWkRovgMtEM+MyrjcRbLo=
Subject key identifier:   47:01:55:36:30:87:B2:02:9C:81:B3:AF:42:69:40:EB:20:F9:1F:F4
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       23A41A2B47858CD008111019136295C136B15AC1
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a653030303a3a2f33352d3335203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:13:02 +0000
ROA not before:           Wed 28 Feb 2024 14:08:02 +0000
ROA not after:            Wed 26 Feb 2025 14:13:02 +0000
asID:                     262532
IP address blocks:        2804:ec8:e000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:a4:1a:2b:47:85:8c:d0:08:11:10:19:13:62:95:c1:36:b1:5a:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:08:02 2024 GMT
            Not After : Feb 26 14:13:02 2025 GMT
        Subject: CN=470155363087B2029C81B3AF426940EB20F91FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:b1:d2:97:22:4c:62:7d:37:8a:47:a8:48:a0:
                    a5:41:77:bb:13:b3:d6:3b:d3:aa:bf:e2:56:ca:ba:
                    9f:94:80:53:7b:02:fb:7c:ce:29:b4:ea:6e:2d:cc:
                    40:11:04:4f:fd:c4:67:51:7f:10:aa:72:97:67:7b:
                    17:e7:a0:2e:db:6a:3a:37:f3:04:d4:6a:90:99:1f:
                    55:00:b4:d7:0a:27:63:96:0e:74:b9:37:f5:ff:10:
                    f1:d1:f2:6e:8e:b2:e8:b5:06:c0:56:a6:76:df:56:
                    b7:15:47:7d:68:16:23:85:1a:a6:68:ad:e5:fc:39:
                    38:67:42:27:18:55:32:ab:33:de:c9:58:56:10:b3:
                    18:aa:f8:64:27:09:ab:43:a9:9d:cc:66:a2:d9:f4:
                    87:3d:81:a9:38:4a:ef:a0:90:39:82:6b:25:17:d5:
                    d3:06:eb:04:b7:91:0e:8e:c6:cf:7b:aa:62:59:c3:
                    5c:e6:23:fb:a2:5f:da:de:e1:53:e9:39:65:35:89:
                    08:51:5d:2f:03:72:99:8f:9d:24:e6:18:38:1a:8d:
                    d4:ad:b2:17:68:6d:7e:0f:d7:40:1e:6d:10:39:2d:
                    13:54:7f:a3:4d:a2:4a:be:12:4c:9f:30:ca:11:62:
                    61:16:23:02:fb:cf:07:3f:4d:fd:99:57:09:cf:30:
                    8d:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:01:55:36:30:87:B2:02:9C:81:B3:AF:42:69:40:EB:20:F9:1F:F4
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a653030303a3a2f33352d3335203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:e000::/35

    Signature Algorithm: sha256WithRSAEncryption
         0b:02:46:4c:1b:27:f6:4a:d3:e5:44:d0:b4:c8:03:6d:c5:4a:
         01:20:36:72:46:71:7a:e9:43:ce:fa:e8:cb:f8:9a:ff:23:14:
         a0:38:0e:1e:07:67:8e:89:f8:da:98:c4:d2:72:3c:1c:c8:e5:
         c2:e5:5a:ec:1d:b4:9f:91:85:6b:12:df:fc:d3:b1:27:d7:c1:
         b6:ee:24:ee:7a:4f:97:80:19:cc:f0:6c:e0:ed:02:b6:20:33:
         e5:74:62:7f:5c:a4:4c:80:1f:73:6a:98:de:a2:89:cc:b4:75:
         e0:98:b7:57:93:de:27:0b:00:3d:e4:50:3e:7e:a5:a3:0a:0a:
         14:11:53:53:d3:5d:3e:dd:45:2d:2e:4d:22:42:29:45:3f:1e:
         dd:9d:62:b8:77:9d:ab:f8:0b:cd:69:f0:4e:e1:a5:89:d1:94:
         3f:c4:56:8d:9c:5e:ec:2a:9f:6e:cc:90:b0:c2:23:15:e3:b8:
         ea:bd:c8:24:18:90:24:9b:3a:ae:53:e6:05:99:2a:f8:c4:2d:
         de:6f:dd:79:03:fb:91:99:97:a0:4c:7d:58:ff:f4:7a:18:f7:
         91:77:84:cd:be:65:e5:95:74:86:0c:1f:8a:7e:b2:dc:94:26:
         a6:8c:6f:ef:ba:a6:ef:9c:cf:20:d6:d5:88:1b:97:9a:d1:48:
         ff:60:07:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:50 2024 by rpki-client on console-ams.rpki-client.org