Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356338303a3a2f34322d3432203d3e20323637343230.roa
File:                     323830343a346433633a356338303a3a2f34322d3432203d3e20323637343230.roa (raw, json)
Hash identifier:          BFUGcMek9FLk0SEf49q/ra8jtOX81Zt2q3Y8sAmeDxU=
Subject key identifier:   DD:70:6C:B1:E5:37:B5:69:17:B5:7D:EC:74:CC:31:9B:36:61:77:A1
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       771BCBDA391A38885E93A236D779DFD78A9772E5
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356338303a3a2f34322d3432203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:53:58 +0000
ROA not before:           Wed 28 Feb 2024 13:48:58 +0000
ROA not after:            Wed 26 Feb 2025 13:53:58 +0000
asID:                     267420
IP address blocks:        2804:4d3c:5c80::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            77:1b:cb:da:39:1a:38:88:5e:93:a2:36:d7:79:df:d7:8a:97:72:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:48:58 2024 GMT
            Not After : Feb 26 13:53:58 2025 GMT
        Subject: CN=DD706CB1E537B56917B57DEC74CC319B366177A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:8d:49:cd:87:43:ce:c1:ca:08:b0:f2:6b:c9:
                    04:ce:00:c4:04:15:c4:b3:ae:03:4e:c1:36:c2:1a:
                    9c:5a:f1:cb:1d:3c:de:c7:50:f7:3f:84:71:3b:3f:
                    65:79:69:d1:99:99:8a:9b:76:c0:35:cd:80:4f:7c:
                    48:01:ad:41:07:ae:89:c7:69:a4:10:00:63:69:70:
                    56:61:ba:9a:6c:3e:c0:fe:57:1c:42:4a:db:8d:83:
                    27:a3:c4:72:34:ae:89:c2:53:96:1b:97:a6:03:7a:
                    75:a7:74:c6:55:38:79:59:d9:d5:d1:89:30:f4:20:
                    49:3a:56:96:d2:de:4f:2d:3e:52:f9:59:a4:22:d8:
                    af:9c:c4:37:00:3c:eb:d6:07:71:79:3d:4b:a1:26:
                    1a:14:fb:95:13:b7:87:a1:56:5f:9d:fb:a5:f3:56:
                    0c:f3:b6:02:96:77:3e:a1:e0:7d:fa:57:92:87:ad:
                    cf:f4:79:3a:49:e3:f2:5c:eb:1e:60:17:13:a1:e3:
                    02:61:3a:2b:5e:6f:a7:6b:49:7c:94:f0:3c:a9:41:
                    47:2d:0c:2c:33:93:84:5e:de:26:93:f3:8d:1d:ed:
                    87:44:9a:9b:7d:93:e1:93:b1:a0:31:80:12:24:02:
                    83:ab:fe:46:ce:75:7f:b5:f4:67:13:e7:09:ce:3c:
                    a4:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:70:6C:B1:E5:37:B5:69:17:B5:7D:EC:74:CC:31:9B:36:61:77:A1
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356338303a3a2f34322d3432203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:5c80::/42

    Signature Algorithm: sha256WithRSAEncryption
         84:52:98:e2:ab:30:1d:44:1e:b7:81:ac:e5:02:0d:db:fb:ad:
         54:9e:a6:a1:9b:5b:1e:e3:29:8f:94:cb:16:3e:64:d7:3e:9a:
         64:39:ff:cd:de:82:91:f4:f8:25:51:0e:6d:0c:24:7a:a2:c4:
         4a:ab:8c:d2:89:c0:38:57:01:06:2c:e0:6e:0e:93:a1:2e:bd:
         00:c1:56:a7:6e:d6:cb:55:89:03:4b:b3:83:f2:33:5c:0d:20:
         7d:76:b2:32:61:e3:28:18:85:7d:5b:a6:47:d3:91:29:b3:3e:
         a8:b4:93:5b:42:1e:06:be:65:2d:b7:f9:19:13:59:86:5f:e5:
         c5:28:97:5b:3b:cc:d3:a3:12:ce:84:1c:f4:4b:b2:50:fb:3f:
         90:17:dc:fc:f7:55:5a:31:b7:2e:41:28:3a:20:17:f7:d2:e1:
         fe:0a:8f:09:83:c8:f9:f7:4a:06:e8:1c:99:92:25:e7:25:07:
         78:39:33:4e:6d:39:4a:71:db:15:08:f6:85:1a:1c:ca:6f:6b:
         05:8f:87:d3:03:f6:09:81:1c:c9:9d:bf:e0:f5:be:bc:d8:0b:
         31:65:2c:6d:e6:c5:41:67:30:e0:f7:80:28:b7:2c:99:a9:d2:
         07:3f:2c:13:65:8e:ef:44:68:02:9e:80:f3:ec:55:f9:d8:17:
         17:33:c4:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org