Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a333038303a3a2f34312d3431203d3e20323637343230.roa
File:                     323830343a346433633a333038303a3a2f34312d3431203d3e20323637343230.roa (raw, json)
Hash identifier:          DkTsS8gwajdIauXY/xgPczRjXqZ6hgxFjUBJqP7ROuk=
Subject key identifier:   3D:47:4C:D1:82:2C:8C:5F:19:83:C0:D7:0E:FC:36:CD:A7:4F:03:6B
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       1518ED492C3454B167412D00477B0923A0FEA6D7
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a333038303a3a2f34312d3431203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:53:57 +0000
ROA not before:           Wed 28 Feb 2024 13:48:57 +0000
ROA not after:            Wed 26 Feb 2025 13:53:57 +0000
asID:                     267420
IP address blocks:        2804:4d3c:3080::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:18:ed:49:2c:34:54:b1:67:41:2d:00:47:7b:09:23:a0:fe:a6:d7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:48:57 2024 GMT
            Not After : Feb 26 13:53:57 2025 GMT
        Subject: CN=3D474CD1822C8C5F1983C0D70EFC36CDA74F036B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c5:23:55:78:49:51:ca:ae:9e:4f:eb:04:16:
                    f8:1b:26:3f:da:9b:dc:78:44:c0:dd:ae:52:c0:9f:
                    6a:0c:6d:b6:48:68:4c:85:b3:0f:37:35:47:74:c7:
                    20:2f:55:42:07:b6:f8:3a:d9:75:b7:8c:67:8c:fa:
                    0e:a7:44:4e:be:95:87:d1:31:64:3d:7d:db:54:90:
                    a8:04:33:b6:b1:89:17:3a:31:38:18:57:e7:dc:02:
                    a1:14:c8:42:5c:3a:53:b7:28:51:c4:49:47:a3:eb:
                    fa:a1:a6:75:7a:09:ff:98:df:16:9c:38:7a:6f:ad:
                    40:04:4f:d3:5c:8b:f5:94:89:5f:8f:2a:65:f9:a9:
                    f9:59:d0:75:53:5c:6a:fc:be:fc:c6:58:41:b8:ff:
                    52:dc:4d:b3:78:06:95:af:6c:c5:fb:0a:19:21:51:
                    89:e0:23:fc:f9:18:93:d0:73:a2:40:19:bc:cf:29:
                    4a:5a:8e:a3:2c:83:de:a1:27:2a:14:91:e1:ff:d4:
                    3c:af:9f:44:a2:3b:00:9f:43:56:ef:7f:0e:1c:f5:
                    a2:f5:d6:bb:be:20:ed:96:24:a4:09:6e:ef:82:ab:
                    0f:87:49:61:dd:dd:36:d0:9a:17:f2:30:41:48:c3:
                    e2:52:97:34:7d:63:91:79:a0:1f:53:ee:6e:96:5b:
                    b7:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:47:4C:D1:82:2C:8C:5F:19:83:C0:D7:0E:FC:36:CD:A7:4F:03:6B
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a333038303a3a2f34312d3431203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:3080::/41

    Signature Algorithm: sha256WithRSAEncryption
         5a:01:e1:dc:fe:2f:0a:a6:21:94:42:17:65:27:7a:6d:98:fe:
         c7:a1:af:78:93:60:d1:61:4f:2b:c5:4e:b5:cb:52:20:d9:b3:
         20:e6:2b:ca:74:68:0c:18:93:08:1b:12:94:7d:93:f0:e7:7d:
         68:36:96:5b:e9:a1:2c:96:84:dc:19:33:3f:73:a5:f4:5d:b6:
         f1:22:de:a1:d3:6f:15:55:36:56:bb:c2:de:93:b6:ba:09:3d:
         ae:ce:a9:b4:cd:0a:a4:58:02:7d:a3:3d:e3:fd:58:e1:6a:8e:
         7c:f2:9d:7f:bc:c3:cb:5d:5b:15:c1:2e:14:b4:3c:e3:18:bd:
         1c:32:f1:38:e4:3f:34:17:64:b4:46:cb:a4:5d:13:a9:9e:29:
         ba:c0:08:06:f0:68:4e:87:c4:0a:af:29:ae:dc:76:9b:71:e9:
         45:4a:de:24:f0:07:2f:c1:74:4f:05:72:7b:c0:85:02:53:5f:
         31:0c:33:b2:41:d0:2c:93:6f:05:e8:39:b9:1b:fb:58:e4:e9:
         9a:f1:55:ea:1e:7e:b2:4c:22:3a:2a:9e:c2:8d:43:5c:a7:8d:
         db:30:68:cc:34:9a:dd:46:13:2a:79:99:76:d8:ef:fd:8c:c3:
         3f:06:4e:2f:f5:f7:ee:e8:32:0e:e6:8a:a4:2c:b8:e9:ce:46:
         82:ab:09:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org