Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356436303a3a2f34332d3433203d3e20323637343230.roa
File:                     323830343a346433633a356436303a3a2f34332d3433203d3e20323637343230.roa (raw, json)
Hash identifier:          4UFRG1c4rjBDe3OdwOPVcn7q+YmXNVlzD8O6mY/7vUM=
Subject key identifier:   0F:9A:32:81:6E:5E:57:52:31:04:75:75:F0:46:4F:67:35:5B:A9:F1
Certificate issuer:       /CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
Certificate serial:       3C093811215B602F9BFAA93DD70AB772DFA49650
Authority key identifier: B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356436303a3a2f34332d3433203d3e20323637343230.roa
Signing time:             Tue 02 May 2023 21:30:12 +0000
ROA not before:           Tue 02 May 2023 21:25:12 +0000
ROA not after:            Tue 30 Apr 2024 21:30:12 +0000
asID:                     267420
IP address blocks:        2804:4d3c:5d60::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:09:38:11:21:5b:60:2f:9b:fa:a9:3d:d7:0a:b7:72:df:a4:96:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47
        Validity
            Not Before: May  2 21:25:12 2023 GMT
            Not After : Apr 30 21:30:12 2024 GMT
        Subject: CN=0F9A32816E5E575231047575F0464F67355BA9F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:19:00:6b:86:6c:d6:f2:ff:03:cd:36:fd:c5:
                    22:f5:ed:e9:3c:1a:ee:05:1f:66:8b:04:31:f5:53:
                    70:07:8b:1c:14:f2:17:f4:fe:eb:f8:43:2d:6e:cf:
                    ab:d2:c8:97:32:58:33:1b:40:6b:c3:b9:e6:ee:13:
                    91:92:9b:ad:65:72:da:96:67:ef:96:8f:2b:3f:6e:
                    b0:54:c6:04:5a:a7:4d:1a:5e:6d:9f:99:5d:4d:40:
                    a9:50:cd:bd:1b:57:db:50:97:d6:f3:e3:27:4f:d5:
                    c0:a2:df:b8:ac:2e:5c:7f:9b:bc:3c:1e:e4:a4:2e:
                    84:c7:47:ee:96:c7:67:49:ba:49:88:12:12:94:14:
                    fc:d0:fe:d5:cf:93:90:6f:25:e0:47:84:73:1a:eb:
                    71:81:19:99:85:67:6e:6b:cb:03:45:8e:7e:12:04:
                    23:7e:0a:7f:c3:38:48:ab:66:67:68:f7:91:86:56:
                    4f:50:28:52:27:c3:15:54:68:98:f8:58:f0:fd:84:
                    68:6c:67:2e:96:9a:f6:0b:23:3c:6f:7b:d5:dd:99:
                    b7:91:4a:da:d8:cc:c6:09:09:d3:a0:3e:6f:cb:ec:
                    5f:30:88:14:c8:cd:33:e2:73:80:c2:78:18:53:92:
                    d5:91:00:bb:89:99:79:69:b0:d9:82:80:c3:f5:55:
                    fb:b1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:9A:32:81:6E:5E:57:52:31:04:75:75:F0:46:4F:67:35:5B:A9:F1
            X509v3 Authority Key Identifier:
                keyid:B2:F6:85:BA:3B:81:7D:92:7E:5E:C7:B3:8B:BE:08:A5:BD:45:EB:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2F685BA3B817D927E5EC7B38BBE08A5BD45EB47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356436303a3a2f34332d3433203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:5d60::/43

    Signature Algorithm: sha256WithRSAEncryption
         73:5d:46:f7:5c:26:d1:da:0e:0b:ba:5d:7c:24:44:fa:da:81:
         e8:e2:79:23:a0:ff:9c:75:f7:ea:39:d8:a7:ca:80:e1:b6:09:
         a9:f2:de:2b:49:4e:be:e8:59:cb:e2:e1:4a:87:52:bd:54:e8:
         4d:5d:dd:3e:62:96:c7:f9:97:01:56:e1:d9:1a:f1:75:9b:06:
         2a:3e:56:70:cf:bb:83:bf:e4:33:2b:c9:f0:de:00:e2:89:45:
         95:c4:e0:91:cb:da:51:d1:51:96:37:c7:75:3b:05:81:4a:de:
         e6:a2:ea:27:53:c8:c8:ef:36:ff:65:88:ad:3f:ff:be:8c:e9:
         47:db:69:42:15:91:8f:b1:ce:f9:20:be:e2:9f:98:31:3d:1f:
         27:bb:08:57:35:01:64:a0:53:63:8e:98:82:93:00:c9:43:c6:
         fc:42:5f:56:2a:9b:f3:98:a3:e6:05:35:c0:56:fa:6c:7e:31:
         3b:a8:4c:be:e6:9d:98:a0:9a:d7:64:ec:53:4a:24:e8:82:6d:
         4d:77:24:48:1c:31:15:1f:c5:ff:8c:6e:06:3f:04:ac:ee:aa:
         5e:94:6b:20:43:3b:42:3a:3b:47:61:e0:7f:8c:c3:9b:ef:b7:
         9f:0a:08:7a:82:44:43:17:80:da:bc:c6:a8:2c:37:59:6a:03:
         2b:6f:d6:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org