Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356434323a3a2f34382d3438203d3e20323637343230.roa
File:                     323830343a346433633a356434323a3a2f34382d3438203d3e20323637343230.roa (raw, json)
Hash identifier:          hGuEZLNscSSe8SkEgIn00cZmzPpAAtrFN9dNtWVqSi4=
Subject key identifier:   09:0F:4E:4F:0B:C6:36:20:3F:66:DD:72:15:F2:FD:F2:9F:82:88:80
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       3A9C09E52760431D1856AB2A0224868B94485A96
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356434323a3a2f34382d3438203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:54:02 +0000
ROA not before:           Wed 28 Feb 2024 13:49:02 +0000
ROA not after:            Wed 26 Feb 2025 13:54:02 +0000
asID:                     267420
IP address blocks:        2804:4d3c:5d42::/48 maxlen: 48
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9c:09:e5:27:60:43:1d:18:56:ab:2a:02:24:86:8b:94:48:5a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:49:02 2024 GMT
            Not After : Feb 26 13:54:02 2025 GMT
        Subject: CN=090F4E4F0BC636203F66DD7215F2FDF29F828880
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:99:6c:eb:76:30:a7:1b:dd:dc:8b:3b:c6:9a:
                    4b:a4:6e:9e:66:e6:b3:b2:18:aa:1f:f5:4a:b0:2a:
                    30:4c:33:bf:27:24:b4:c3:9c:8e:82:79:ed:53:76:
                    c7:29:b2:9a:6f:ec:22:c1:84:34:ef:e1:61:7a:14:
                    eb:74:15:f1:df:05:94:3c:ba:92:dc:93:ec:38:6c:
                    e3:c7:b5:d8:08:73:cf:da:e1:04:4d:c0:fc:70:88:
                    c5:e2:22:5f:6a:2f:97:83:0e:e6:15:83:6d:98:4c:
                    6e:73:3d:8b:d7:f4:12:1e:3e:1e:42:0e:25:12:b4:
                    16:be:eb:1a:0c:a2:b5:39:e6:f8:e1:0c:78:fd:3b:
                    6c:92:c4:0a:75:11:0b:45:07:23:71:91:72:48:a0:
                    61:98:a0:f1:1d:2d:de:51:99:82:14:46:aa:a4:51:
                    0d:7d:9f:80:de:6e:4e:39:8f:b0:24:6f:d0:3e:dc:
                    98:4d:18:47:5d:bc:35:4e:4b:f5:9c:72:4c:6d:5a:
                    6d:b7:d5:a6:58:bb:1d:6d:a6:08:57:20:6e:31:15:
                    85:df:28:a5:f4:8b:6f:29:77:10:c3:a4:b5:36:88:
                    d4:20:88:33:1f:c9:12:9b:d8:2b:21:9e:d3:f0:69:
                    40:76:eb:23:87:40:3a:b1:e7:8a:b7:64:82:e2:22:
                    ca:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:0F:4E:4F:0B:C6:36:20:3F:66:DD:72:15:F2:FD:F2:9F:82:88:80
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356434323a3a2f34382d3438203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:5d42::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:35:34:b9:17:8b:23:2e:f6:2b:93:48:e7:04:83:1f:65:8f:
         b9:f8:f3:83:fc:ca:72:dc:dd:24:52:ac:d6:f4:28:9b:73:7e:
         b9:d1:8f:d0:e8:04:b7:ce:1d:29:2f:d9:60:7e:bf:84:ff:57:
         08:6c:72:6e:1c:f2:d3:8c:87:44:ca:99:76:27:27:75:b6:51:
         8f:19:3f:ea:e9:79:d0:7e:17:4c:d0:d5:04:3d:11:53:a7:fd:
         be:70:3e:5c:d8:5d:3f:38:81:e2:68:b7:a7:45:4e:a0:54:52:
         76:34:0a:f8:4a:24:e9:66:82:25:05:ea:be:dc:66:42:45:40:
         ef:0c:fc:33:97:7c:fe:18:2c:ed:09:c1:00:7b:51:12:7e:0f:
         f3:fd:37:f7:02:23:6a:0e:f8:43:7a:c7:08:26:54:60:0e:9f:
         f5:0b:bd:50:ce:ec:a8:01:1e:55:95:00:49:5e:a1:5f:33:35:
         28:ff:f4:25:f5:05:98:3f:dd:e5:21:1a:e4:52:55:02:07:9f:
         9a:38:c5:c3:74:2b:20:9e:64:91:d3:79:92:18:98:31:38:2c:
         7d:15:a0:15:85:56:29:48:f6:24:5d:83:d2:62:82:21:7b:dc:
         14:7f:47:68:34:f0:b2:86:fe:ef:60:de:02:34:5f:a3:c2:f9:
         74:6b:0b:38
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:33:29 2025 by rpki-client