Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356438303a3a2f34332d3433203d3e20323637343230.roa
File:                     323830343a346433633a356438303a3a2f34332d3433203d3e20323637343230.roa (raw, json)
Hash identifier:          eX7inSStEQ0Q95F8cTjBp5sXzu9AZnKR/bYsmWwBasA=
Subject key identifier:   F1:FB:BB:E2:47:25:59:F0:9E:68:A9:7D:FE:EE:D7:F2:39:4B:01:06
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       3C7BFBE315FBFA793E79F6AA677CE2051F1E2092
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356438303a3a2f34332d3433203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:54:09 +0000
ROA not before:           Wed 28 Feb 2024 13:49:09 +0000
ROA not after:            Wed 26 Feb 2025 13:54:09 +0000
asID:                     267420
IP address blocks:        2804:4d3c:5d80::/43 maxlen: 43
Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:7b:fb:e3:15:fb:fa:79:3e:79:f6:aa:67:7c:e2:05:1f:1e:20:92
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:49:09 2024 GMT
            Not After : Feb 26 13:54:09 2025 GMT
        Subject: CN=F1FBBBE2472559F09E68A97DFEEED7F2394B0106
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:4d:70:df:46:7d:ab:4e:f0:19:e9:bb:b1:0d:
                    85:1a:44:3a:62:f4:45:43:03:09:11:55:c7:c2:7b:
                    23:1b:1f:bf:d3:e2:fd:60:98:45:14:40:9f:ef:ec:
                    0f:08:79:34:c0:4f:4e:11:8c:17:5c:08:1c:0e:5d:
                    22:fa:78:29:18:75:49:43:04:d1:fc:43:75:31:6b:
                    ea:34:5f:2f:6e:37:ba:30:e1:87:50:97:c0:3a:0e:
                    8a:3a:58:a3:76:04:9b:fc:07:da:45:26:c4:d5:f1:
                    ae:5b:77:c3:2e:3f:03:cf:5d:8c:9e:25:99:ad:28:
                    d1:b5:ba:72:ee:33:0a:23:de:f9:db:41:c3:0e:c1:
                    f9:cd:e1:b7:92:ef:d4:04:c9:4f:0f:9a:15:e7:2b:
                    23:25:d3:8c:67:52:5a:1a:d2:d0:04:81:f8:65:21:
                    5e:b0:04:45:2f:fe:70:2c:2a:be:12:d0:3d:c3:3e:
                    23:95:1b:9b:49:48:f4:bb:07:98:4f:8d:a7:8c:61:
                    fb:fb:56:95:4c:90:e6:e4:3c:3e:5f:e7:2c:9b:80:
                    88:b6:dd:a9:8f:cd:8b:65:8a:af:83:f5:48:72:1c:
                    5a:27:70:68:b1:92:e9:bc:3d:2e:fa:43:72:6a:85:
                    fd:a1:a3:87:22:1e:3b:04:17:6c:cd:ea:5b:61:d1:
                    d6:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:FB:BB:E2:47:25:59:F0:9E:68:A9:7D:FE:EE:D7:F2:39:4B:01:06
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356438303a3a2f34332d3433203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:5d80::/43

    Signature Algorithm: sha256WithRSAEncryption
         a6:07:f7:25:3c:99:5a:ec:a1:bc:24:a1:74:89:b3:b3:56:73:
         7d:23:71:17:af:28:48:56:65:c0:bb:95:d0:ae:6e:d6:2b:6e:
         c0:20:9e:54:bf:ee:ab:16:5e:09:22:cc:cb:09:95:38:76:d9:
         c3:b4:37:18:00:39:d9:63:95:83:66:d3:eb:78:c4:51:aa:01:
         28:65:62:56:c1:2e:a0:04:32:97:59:8a:47:51:dd:97:be:76:
         64:be:54:fd:8c:64:ec:f0:58:87:c9:39:d8:fd:9a:fa:b5:b1:
         db:58:29:10:1b:e3:f2:0e:67:8d:1b:b2:cb:7b:57:d1:94:29:
         05:7a:d9:7f:b3:1a:66:55:3e:a7:f3:79:3f:7d:31:3a:9d:40:
         26:79:a2:f8:73:dc:38:a7:db:18:e2:1a:70:89:0c:bb:8b:e0:
         58:0f:48:60:1a:a4:15:82:4d:4b:81:2d:76:1d:99:31:6b:9c:
         bb:6e:4f:6b:e1:59:d3:73:8e:ab:e6:44:45:95:2d:c3:ab:5c:
         e0:b4:ea:2f:31:f3:67:4c:95:04:a0:b0:fa:00:62:11:5c:3b:
         a3:c1:83:7e:84:18:15:2e:0f:04:31:7e:f4:30:26:1e:e8:47:
         e5:8d:8f:e8:d9:b8:60:a2:d9:b5:52:94:e8:e8:a3:b2:47:1b:
         45:55:c0:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Feb 16 21:55:40 2025 by rpki-client