Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a663030303a3a2f33362d3336203d3e20323632353332.roa
File:                     323830343a6563383a663030303a3a2f33362d3336203d3e20323632353332.roa (raw, json)
Hash identifier:          IFFfCv67uSvnN1U8shc6obbwEpQKMkR+hJ652O9fMgo=
Subject key identifier:   ED:85:09:B9:15:E1:99:94:77:47:64:6B:2A:2D:FC:AB:D0:04:4A:D7
Certificate issuer:       /CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
Certificate serial:       3C493631AE1A235E1B1B78664E7B843A91C73074
Authority key identifier: C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a663030303a3a2f33362d3336203d3e20323632353332.roa
Signing time:             Wed 28 Feb 2024 14:13:06 +0000
ROA not before:           Wed 28 Feb 2024 14:08:06 +0000
ROA not after:            Wed 26 Feb 2025 14:13:06 +0000
asID:                     262532
IP address blocks:        2804:ec8:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:49:36:31:ae:1a:23:5e:1b:1b:78:66:4e:7b:84:3a:91:c7:30:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF
        Validity
            Not Before: Feb 28 14:08:06 2024 GMT
            Not After : Feb 26 14:13:06 2025 GMT
        Subject: CN=ED8509B915E199947747646B2A2DFCABD0044AD7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:ea:ae:16:46:9e:3a:43:0c:d5:d1:92:bf:c0:
                    ac:48:21:09:24:60:0d:2d:84:51:31:27:40:72:3b:
                    fa:4a:62:ad:f4:45:2d:77:c8:60:3a:7f:be:ec:c3:
                    a4:37:7f:83:a3:b8:bb:72:1f:7c:0c:da:7f:b7:e2:
                    a1:df:b3:5d:c8:34:17:00:1f:a1:35:25:c9:68:83:
                    b0:ad:69:e3:91:d6:b6:a5:46:fd:65:f1:a1:1e:b3:
                    10:6f:e7:53:25:87:5a:5b:49:3f:8f:75:41:3c:01:
                    2d:e5:63:42:d0:9a:f3:f3:b9:d1:3e:ba:f7:e3:6b:
                    08:46:c1:e3:80:2b:83:9f:10:b5:29:dc:89:f9:98:
                    bd:be:9a:fb:ac:8f:db:ea:b7:69:74:9f:0f:66:c7:
                    99:b8:58:6a:f4:18:21:89:b8:15:ae:d8:2c:e6:94:
                    00:84:cd:15:9f:aa:b5:31:f9:42:03:01:e5:55:89:
                    aa:b2:25:80:5c:2e:cc:e4:fe:a6:55:ef:51:3c:9e:
                    a7:7e:f3:5b:bc:2a:95:f2:b2:48:80:7d:bd:b5:c3:
                    6b:5f:9e:b0:d7:d1:ed:9b:af:f3:73:4b:3c:02:b2:
                    3a:52:e4:06:3b:a9:e9:2c:f2:79:68:8a:dc:fc:e8:
                    93:8a:de:93:62:a1:bc:03:e8:90:9d:b5:93:b0:e6:
                    ba:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:85:09:B9:15:E1:99:94:77:47:64:6B:2A:2D:FC:AB:D0:04:4A:D7
            X509v3 Authority Key Identifier:
                keyid:C9:24:4D:B0:FC:BD:1D:D2:7B:93:83:7F:8B:05:2C:E3:B9:B2:92:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9244DB0FCBD1DD27B93837F8B052CE3B9B292AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HkqUXYqJVEk9tmym41QptfeRtjgk3iKz4xeQ5vHiP5tV/0/323830343a6563383a663030303a3a2f33362d3336203d3e20323632353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ec8:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         7c:62:a1:55:9b:cc:1b:f3:72:02:c4:2a:f9:30:4c:65:e6:e3:
         ec:8c:f4:2f:a4:89:4e:2a:35:0b:3e:4b:de:34:9c:f0:91:75:
         c3:26:78:72:3d:52:e7:76:7e:01:64:10:2a:af:11:0d:12:76:
         8c:83:5d:40:95:48:d1:7b:11:3b:2c:ce:69:10:f3:ec:13:d7:
         02:15:61:4d:ec:32:d3:75:e7:5d:33:d4:e7:aa:36:fe:47:66:
         25:45:fd:45:cf:7b:c5:10:ec:bd:1e:b6:d3:9d:43:d8:62:ef:
         6e:0d:9b:22:9a:aa:1e:6b:b3:9c:73:78:ae:51:1b:f3:b5:97:
         a4:41:be:12:23:db:4c:91:ca:d8:23:2a:8a:31:64:09:a7:da:
         54:d9:60:34:03:d0:23:4b:b6:cc:b4:1c:3f:29:dc:90:c3:7a:
         06:0d:18:8f:ef:ed:4b:c2:36:58:d8:95:26:3c:72:10:82:e9:
         15:c8:53:71:72:dd:32:50:76:7a:44:e4:4d:36:ae:7d:a5:69:
         be:d2:cf:9b:47:d8:76:b0:07:76:3e:b1:8d:a4:0f:ce:e1:1c:
         27:b7:5a:f8:5d:97:23:ba:8f:1b:7e:12:2b:37:53:78:41:95:
         9a:ff:f1:3b:76:63:12:96:43:bf:0c:4f:3a:58:af:52:a1:75:
         72:a9:f7:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org