Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356434313a3a2f34382d3438203d3e20323637343230.roa
File:                     323830343a346433633a356434313a3a2f34382d3438203d3e20323637343230.roa (raw, json)
Hash identifier:          kZJ2cAMaIxNpZ3oFJqTmYdj/EvyBTOuKDRaVGds2BKs=
Subject key identifier:   12:FA:0E:40:B1:AA:3E:9F:D6:26:5D:38:EB:FB:91:7C:17:3D:BB:09
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       472E8E1CE7F079EF7F36A9D5989B1EEADCDA6514
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356434313a3a2f34382d3438203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:54:00 +0000
ROA not before:           Wed 28 Feb 2024 13:49:00 +0000
ROA not after:            Wed 26 Feb 2025 13:54:00 +0000
asID:                     267420
IP address blocks:        2804:4d3c:5d41::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:2e:8e:1c:e7:f0:79:ef:7f:36:a9:d5:98:9b:1e:ea:dc:da:65:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:49:00 2024 GMT
            Not After : Feb 26 13:54:00 2025 GMT
        Subject: CN=12FA0E40B1AA3E9FD6265D38EBFB917C173DBB09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:76:f1:ab:d0:82:de:d3:f3:ea:da:7c:6a:2a:
                    91:7e:b3:48:e0:db:7b:b7:64:eb:7f:0d:54:08:4c:
                    27:b9:bc:ff:da:9f:b9:9e:43:a4:d7:b7:a7:2b:4f:
                    f1:e4:a3:78:bf:bf:1d:4b:2e:16:d3:fc:2f:68:bc:
                    2c:77:a4:85:07:47:2a:a2:67:8a:a1:f4:62:ad:16:
                    9e:f1:ad:93:6b:9c:1a:3e:40:1e:2f:82:55:a6:88:
                    65:52:ce:0a:8a:d8:17:69:7e:78:bf:fc:54:9b:60:
                    81:25:9e:ee:5e:e7:c1:54:39:7b:67:a1:de:80:b6:
                    21:69:c1:b4:e3:1b:86:0f:b0:c8:6a:35:27:bd:d8:
                    08:49:34:b1:7f:30:6a:40:22:b4:84:36:b8:d5:fd:
                    55:a6:e8:5a:e2:ee:68:88:e9:d8:48:c3:d8:b4:fd:
                    95:d7:47:9e:e6:59:b6:cf:2a:58:43:42:9f:13:85:
                    2e:dc:ac:4b:61:f2:60:cf:e2:50:c7:b5:cb:9c:d2:
                    e9:7b:60:98:65:e8:03:bd:21:97:1d:c3:3a:9b:f8:
                    15:4a:a9:87:c1:09:c0:0d:0b:cc:61:da:40:64:82:
                    cf:46:98:88:a7:d3:d9:24:c1:9a:ff:12:97:30:99:
                    26:d1:cd:9a:cf:09:7b:46:43:53:cf:12:21:c9:d5:
                    53:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                12:FA:0E:40:B1:AA:3E:9F:D6:26:5D:38:EB:FB:91:7C:17:3D:BB:09
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356434313a3a2f34382d3438203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:5d41::/48

    Signature Algorithm: sha256WithRSAEncryption
         50:64:33:98:d4:7f:92:f0:6b:15:9b:48:9b:41:98:3d:7e:f6:
         1f:01:1b:ff:82:bf:6e:c9:5a:cb:e1:b0:01:6d:6e:0c:e2:63:
         13:f2:6d:9b:6f:2e:81:bf:d2:01:4e:15:5a:08:e6:ef:1d:94:
         f5:c0:ab:d0:ad:f9:ac:98:7a:92:21:d3:05:a6:52:8d:8b:56:
         72:bf:39:a8:64:a5:59:9b:7e:5b:1d:eb:b6:e9:e4:4e:7d:3f:
         99:37:41:e1:9c:e0:37:89:ed:02:6a:71:de:8b:d7:6d:8d:53:
         3e:28:9e:6c:44:9e:cc:94:9a:81:61:c7:50:4c:84:7d:36:bd:
         29:1e:4f:0f:58:6c:82:34:f3:a0:ff:2f:78:cf:44:0d:a0:dc:
         04:e2:5d:f2:cb:eb:8d:c2:e4:e5:b8:c8:b1:51:02:4c:3a:ed:
         86:84:3c:a9:5e:be:bc:d0:a1:eb:f3:35:45:14:d1:b1:2c:da:
         9e:5e:9f:6e:9b:ab:0c:8d:40:53:83:4d:64:43:0f:92:3f:26:
         9c:24:23:5e:44:e2:47:c0:1e:d8:8e:8a:d8:3a:d0:88:fe:dc:
         c0:84:11:75:83:3c:35:c0:8c:8d:5d:e7:07:79:2d:40:b1:01:
         1c:57:22:17:9b:1d:14:69:1c:50:44:71:ff:92:65:ae:5a:e4:
         8f:45:99:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org