Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a383030303a3a2f33342d3334203d3e20323636343437.roa
File:                     323830343a333766383a383030303a3a2f33342d3334203d3e20323636343437.roa (raw, json)
Hash identifier:          dJquTf2vbDy1EAJ5Fr0vrUJsvZvCGbzq1+9or61HSNs=
Subject key identifier:   8C:37:E9:07:1F:2C:21:D7:EF:25:EA:BD:1E:30:A9:44:41:28:52:61
Certificate issuer:       /CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
Certificate serial:       08AC8867C1FE1FE45F546DCE3DD5932ACE61B9CF
Authority key identifier: 77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a383030303a3a2f33342d3334203d3e20323636343437.roa
Signing time:             Sat 10 Feb 2024 15:27:44 +0000
ROA not before:           Sat 10 Feb 2024 15:22:44 +0000
ROA not after:            Sat 08 Feb 2025 15:27:44 +0000
asID:                     266447
IP address blocks:        2804:37f8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:ac:88:67:c1:fe:1f:e4:5f:54:6d:ce:3d:d5:93:2a:ce:61:b9:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=77DFC580E6F8C352C451D04DDD8B9E42C5B25745
        Validity
            Not Before: Feb 10 15:22:44 2024 GMT
            Not After : Feb  8 15:27:44 2025 GMT
        Subject: CN=8C37E9071F2C21D7EF25EABD1E30A94441285261
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:69:ed:cd:40:01:43:1a:df:00:65:a2:04:e4:
                    e9:97:b6:26:e6:2e:aa:6a:a8:94:5c:a0:0c:b9:53:
                    1c:5a:b5:b1:a7:8f:ea:fb:54:92:4b:d7:eb:53:61:
                    5d:62:b4:b9:02:6f:5e:73:c7:32:51:b8:ca:87:d1:
                    f5:1c:3f:0a:a9:2e:f0:aa:30:ed:ef:c8:cc:ce:b9:
                    7a:73:5f:2f:21:bf:0c:1a:a4:38:6b:26:3a:39:74:
                    43:af:07:d5:a0:0e:7b:b2:00:ce:02:48:c4:0e:ce:
                    7a:0e:a7:b9:66:28:de:50:08:45:5e:dd:ff:32:2d:
                    53:e4:ad:d5:2d:4f:58:ad:bc:bd:32:74:49:4a:91:
                    32:93:93:31:10:2e:1d:32:de:ce:ba:97:b1:1f:dc:
                    19:a1:10:32:58:af:98:ec:d6:42:7a:f3:98:57:af:
                    35:86:c1:42:72:18:ca:1e:e9:57:63:a6:b3:5b:e0:
                    80:d4:f2:86:d8:70:16:f6:8f:d6:4b:22:12:76:cc:
                    bc:89:7a:0f:60:51:3f:e8:bc:9d:6a:aa:21:c6:51:
                    dd:bd:8e:83:8f:44:6f:60:bc:f4:2e:2c:5f:e2:c3:
                    0e:66:8e:5f:7f:65:71:f9:09:ca:22:90:cc:b5:3e:
                    1d:54:4b:88:91:a6:4f:b6:2b:c9:1f:1c:75:3c:f1:
                    8b:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:37:E9:07:1F:2C:21:D7:EF:25:EA:BD:1E:30:A9:44:41:28:52:61
            X509v3 Authority Key Identifier:
                keyid:77:DF:C5:80:E6:F8:C3:52:C4:51:D0:4D:DD:8B:9E:42:C5:B2:57:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/77DFC580E6F8C352C451D04DDD8B9E42C5B25745.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqRxqfgUd7XEhzXHGBUyMwAb3LVzmwQXWV3PykQ6Ay4X/0/323830343a333766383a383030303a3a2f33342d3334203d3e20323636343437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:37f8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         15:95:9e:ab:33:5c:55:2d:c0:37:2f:61:17:f9:cc:c7:57:d8:
         03:cc:f4:b0:43:30:91:44:e5:d1:ad:dc:50:f2:e8:17:06:6a:
         3b:9b:cf:af:76:56:25:85:c8:e5:b6:6b:ae:f7:1d:c1:e0:f9:
         fd:f2:d2:04:f1:1e:27:9e:29:c1:d2:0a:66:9f:90:ad:d0:2c:
         7e:4a:16:26:60:6f:24:96:34:85:8b:3b:46:13:0d:86:a1:de:
         3d:88:b4:c2:31:26:b8:49:a4:99:1d:12:cd:f3:76:21:a9:76:
         f6:59:b9:9d:06:d4:de:97:cd:8c:d5:70:08:0a:26:28:4d:9b:
         7d:18:4b:40:b1:31:07:a3:3e:64:47:3e:ed:f4:fd:b3:35:17:
         7b:a9:2d:91:d8:36:76:23:76:c0:fb:91:e2:1b:40:23:1b:01:
         b5:63:bd:fc:2a:6f:27:b6:63:aa:c2:68:61:7d:8d:27:ce:16:
         31:56:b0:1f:c6:8f:f1:40:ec:24:6a:a9:73:6d:61:15:5e:31:
         31:89:b4:97:44:d2:bc:70:ac:3f:da:4e:3b:f7:99:a5:e5:d1:
         b6:42:07:d5:c3:84:8f:5c:67:22:7c:4a:62:9d:27:51:e1:16:
         f7:8f:90:a4:07:f6:e5:e4:17:02:e6:4d:4f:18:cb:95:4a:fe:
         69:bf:91:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org