Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3230303a3a2f34302d3430203d3e20323637303637.roa
File:                     323830343a343761343a3230303a3a2f34302d3430203d3e20323637303637.roa (raw, json)
Hash identifier:          5QkLidt/5QrhA+Vb0ryd40Ux6sXl2oVDsxxzGEYWOxo=
Subject key identifier:   91:C9:60:1E:2A:D1:F8:6F:47:F8:E5:32:83:BF:3F:BD:2C:37:AC:05
Certificate issuer:       /CN=AA645B4C304DB254B5BF6669A930A294780DC49B
Certificate serial:       5A328A6FB06A82BE7A97A24F0F4437E508A07ACE
Authority key identifier: AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3230303a3a2f34302d3430203d3e20323637303637.roa
Signing time:             Fri 23 Feb 2024 14:40:53 +0000
ROA not before:           Fri 23 Feb 2024 14:35:53 +0000
ROA not after:            Fri 21 Feb 2025 14:40:53 +0000
asID:                     267067
IP address blocks:        2804:47a4:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:32:8a:6f:b0:6a:82:be:7a:97:a2:4f:0f:44:37:e5:08:a0:7a:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA645B4C304DB254B5BF6669A930A294780DC49B
        Validity
            Not Before: Feb 23 14:35:53 2024 GMT
            Not After : Feb 21 14:40:53 2025 GMT
        Subject: CN=91C9601E2AD1F86F47F8E53283BF3FBD2C37AC05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:0a:19:02:8c:72:e3:b2:1a:27:ba:60:83:23:
                    03:cf:8d:fd:1e:61:ef:8f:4b:64:57:dc:54:ee:f7:
                    de:0a:45:82:b8:78:46:09:d7:11:f4:12:4d:09:cf:
                    62:cc:92:df:01:b2:23:1c:8b:0c:eb:af:14:dd:fc:
                    3e:a7:ed:27:58:52:cd:2b:69:76:83:58:d3:ed:85:
                    4e:a9:a7:1e:89:06:7f:d4:5b:8d:a0:88:0e:f0:e4:
                    a6:a5:f1:69:bf:e7:2c:8d:bf:e1:d9:60:60:b6:4e:
                    59:ee:60:a3:95:c8:11:e1:4e:85:3c:64:2d:1b:c6:
                    01:7d:c6:4e:dd:3a:23:56:68:d7:18:4d:6c:4a:e0:
                    e8:9d:1d:f2:9f:ac:53:d8:71:8f:b1:ab:03:98:2b:
                    df:cb:f0:64:88:c5:ef:9c:f6:e7:f9:b5:8e:cb:f3:
                    b9:26:c2:20:e1:9a:c2:68:f0:f7:73:ed:4d:d7:1a:
                    35:11:82:bd:20:82:dd:33:c5:c9:20:ea:c3:01:cb:
                    a6:03:27:8a:70:b5:71:8d:09:3a:57:ea:a1:8c:1c:
                    83:f0:42:1b:aa:6b:de:1d:e3:34:4e:c8:98:8c:ab:
                    22:c7:c2:10:20:df:28:72:73:51:40:0d:aa:cb:38:
                    4a:31:b2:55:12:62:a6:be:8b:92:d5:72:01:3f:7a:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:C9:60:1E:2A:D1:F8:6F:47:F8:E5:32:83:BF:3F:BD:2C:37:AC:05
            X509v3 Authority Key Identifier:
                keyid:AA:64:5B:4C:30:4D:B2:54:B5:BF:66:69:A9:30:A2:94:78:0D:C4:9B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/AA645B4C304DB254B5BF6669A930A294780DC49B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA645B4C304DB254B5BF6669A930A294780DC49B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HqatGkF4QDP6Set7UcbXnGGj2TkehDBZ24LGiaLAbdzu/0/323830343a343761343a3230303a3a2f34302d3430203d3e20323637303637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47a4:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:c9:e3:86:02:65:7b:2e:b7:2c:60:e6:17:e1:d7:65:dd:b3:
         3f:f9:89:d9:a5:a1:e5:24:48:9f:cb:80:71:b3:44:46:2c:d0:
         97:f4:a6:13:3d:dc:76:6f:a8:fb:9b:39:6c:02:53:e9:e7:ac:
         ee:53:2f:50:33:73:7c:84:db:37:8c:d1:7c:f4:e7:f0:2d:9d:
         e1:c7:60:88:d8:fb:b8:19:2b:50:75:7f:ba:ed:4a:be:41:7b:
         7c:28:c2:f1:91:39:52:07:44:ba:1e:00:99:3e:c7:c4:a7:33:
         17:37:51:6a:50:77:2e:51:c9:c8:f7:58:c6:b4:5f:68:bf:87:
         42:a0:21:e5:e3:42:2f:8c:8d:36:bb:df:c7:de:86:07:84:b2:
         1e:74:e4:8a:8d:b8:10:49:85:47:4a:5b:d2:a6:1b:1d:f4:07:
         b5:8d:13:51:e9:c7:da:39:e2:c2:7c:c0:07:9f:44:52:73:a9:
         5a:db:1e:0a:74:5d:c5:d4:8f:cf:54:fa:cb:cc:ff:27:cf:2e:
         a3:0a:87:48:79:81:34:07:d0:1a:04:de:8d:f7:29:07:05:78:
         1c:7f:f8:e1:16:4e:ee:75:bf:98:b3:be:ed:b5:62:8e:53:94:
         b4:f7:f7:3c:85:35:b1:14:3c:3c:72:3b:af:3a:8c:4d:83:79:
         37:c6:f6:8f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:03 2024 by rpki-client on console-fra.rpki-client.org