Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a333030303a3a2f34382d3438203d3e20323637343230.roa
File:                     323830343a346433633a333030303a3a2f34382d3438203d3e20323637343230.roa (raw, json)
Hash identifier:          evb4Reru/+5jQZq2wttrMrMWQpAbPW7uU40lmvc+G9I=
Subject key identifier:   CE:5C:D7:4F:D1:23:D2:24:F2:8C:DB:C9:91:8D:40:9D:EE:E2:FF:9B
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       2B12E89C98D4906F54F945A7104403194088740A
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a333030303a3a2f34382d3438203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:53:54 +0000
ROA not before:           Wed 28 Feb 2024 13:48:54 +0000
ROA not after:            Wed 26 Feb 2025 13:53:54 +0000
asID:                     267420
IP address blocks:        2804:4d3c:3000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:12:e8:9c:98:d4:90:6f:54:f9:45:a7:10:44:03:19:40:88:74:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:48:54 2024 GMT
            Not After : Feb 26 13:53:54 2025 GMT
        Subject: CN=CE5CD74FD123D224F28CDBC9918D409DEEE2FF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:c6:67:29:f5:a4:29:bf:23:a2:5c:e8:40:ba:
                    5c:f8:67:5a:a0:14:57:26:72:c3:5d:bb:7d:a6:1a:
                    94:5c:49:3b:05:0f:f9:58:ec:f0:eb:6f:b6:75:21:
                    25:c3:43:fa:c2:02:8c:b8:aa:84:71:e2:ed:e7:54:
                    34:a6:44:b9:26:07:5c:98:01:15:30:df:ca:d6:1d:
                    da:bf:67:42:5f:d7:c4:6e:0c:d7:9b:7a:d6:db:86:
                    dc:9b:21:34:61:30:a7:d1:d0:36:3f:a2:8f:79:ba:
                    95:ce:47:4f:46:00:a0:23:81:0b:12:72:5a:82:6f:
                    eb:00:a9:84:79:83:ac:1a:b1:bd:ba:51:1c:47:d7:
                    99:d3:f8:1c:b0:fe:82:26:15:65:02:dc:c0:38:a7:
                    1b:2d:dc:5b:26:54:df:42:c0:fa:07:f8:dc:6b:64:
                    f8:25:ce:1a:c7:e2:8a:7f:fe:da:62:68:f4:f1:81:
                    10:b0:c1:e9:62:14:ab:57:17:ac:ed:3b:d9:cd:65:
                    00:35:66:59:07:f1:96:08:d5:ef:1b:cb:ad:79:14:
                    ab:da:84:7c:52:c6:b7:24:f5:69:15:6d:67:91:32:
                    dc:76:19:43:89:52:33:9b:8a:6a:6f:6e:6d:64:74:
                    4e:2b:2f:69:b1:02:e5:f9:5f:92:79:f2:53:e9:53:
                    16:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:5C:D7:4F:D1:23:D2:24:F2:8C:DB:C9:91:8D:40:9D:EE:E2:FF:9B
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a333030303a3a2f34382d3438203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:3000::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:79:d2:68:8d:e7:7c:16:9f:08:61:22:27:93:11:3d:5f:64:
         b9:7d:04:b4:f1:31:b4:bb:fc:a5:d5:49:dd:ce:ad:50:e5:83:
         05:91:92:26:cf:9f:aa:ab:6b:1b:83:7c:5c:3a:5d:52:bc:cc:
         30:1a:36:11:01:ff:46:51:98:f8:12:10:94:b3:e8:2b:87:61:
         93:5b:61:00:6e:95:49:63:2e:95:b2:c1:9e:5c:68:cc:39:08:
         05:e3:6d:a2:59:0e:6c:bb:a3:d4:d8:08:20:85:ab:f6:53:0d:
         9a:43:35:ec:e1:61:a2:1e:b1:6d:02:65:62:6a:dd:d3:7e:0d:
         16:4a:bc:b3:2b:6d:ea:d3:23:8d:ce:0f:6e:78:e3:48:fc:c5:
         63:59:63:ef:72:8a:8f:f2:6f:a1:83:15:c3:39:ec:ae:75:46:
         95:9a:b3:e8:c1:36:7c:07:1a:7b:af:00:0c:55:30:51:8d:ac:
         48:d5:cd:d0:41:02:89:6e:4d:cb:2f:6e:3c:63:10:61:56:fa:
         4d:90:8c:61:cb:89:2e:21:53:bf:6e:c6:be:bc:5b:c3:dc:48:
         b8:27:b7:db:ef:4f:2e:64:6c:b0:a7:d6:7c:4b:de:eb:84:a0:
         2e:f4:14:4a:b3:c8:2e:a3:a7:9d:1d:d2:4e:a9:fc:64:0b:70:
         be:df:d0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org