Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356461303a3a2f34332d3433203d3e20323637343230.roa
File:                     323830343a346433633a356461303a3a2f34332d3433203d3e20323637343230.roa (raw, json)
Hash identifier:          imbJrdD0DYP4gtmUxLxb49u1Oxbe0aE0Mkgu1jdGJ5g=
Subject key identifier:   09:7E:5C:B2:B7:D0:CD:93:10:52:C6:28:52:6E:96:19:A5:FC:BA:52
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       40BA1A22C639D4F737E5A4024FA9D2647EDACB80
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356461303a3a2f34332d3433203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:54:23 +0000
ROA not before:           Wed 28 Feb 2024 13:49:23 +0000
ROA not after:            Wed 26 Feb 2025 13:54:23 +0000
asID:                     267420
IP address blocks:        2804:4d3c:5da0::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:ba:1a:22:c6:39:d4:f7:37:e5:a4:02:4f:a9:d2:64:7e:da:cb:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:49:23 2024 GMT
            Not After : Feb 26 13:54:23 2025 GMT
        Subject: CN=097E5CB2B7D0CD931052C628526E9619A5FCBA52
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:55:1d:2b:01:3a:63:2a:ea:1d:23:90:36:d7:
                    f6:44:d4:d0:ae:a8:e9:3e:65:63:f5:53:38:54:b1:
                    05:07:be:61:cf:61:e8:75:80:82:3a:f4:5d:71:93:
                    e5:4f:d5:bf:c2:16:b1:2d:6d:61:b7:d8:11:15:24:
                    ea:ee:93:51:70:f2:ba:9c:da:6d:5f:2d:86:bd:be:
                    20:6b:44:ad:0e:76:37:ae:aa:5e:cb:62:ae:f3:0b:
                    bb:ee:bc:1f:0b:ca:fb:f1:42:31:b0:10:1d:d3:f0:
                    db:fa:a5:16:54:a7:52:d2:ff:c1:df:38:b7:aa:c7:
                    58:c0:fb:53:81:82:94:c1:f6:07:19:b7:e2:00:a7:
                    e0:97:b1:ee:d9:bc:27:b0:6f:19:91:d9:cf:a4:eb:
                    8e:d2:76:58:19:85:26:c2:8e:5b:fb:fe:14:04:f5:
                    3e:20:45:6d:59:83:a4:7d:44:fd:83:4a:52:23:ff:
                    81:4c:90:a8:9b:3a:42:58:62:f8:b2:d0:3e:02:5e:
                    d2:5b:e0:62:26:8b:7c:b2:51:dc:07:db:44:07:e4:
                    80:1e:ac:fe:30:b1:58:2d:56:49:99:ff:08:4a:40:
                    92:db:06:91:36:f7:10:56:7c:5f:cc:48:0b:0f:78:
                    20:94:f0:b0:20:b5:db:b1:e0:bb:a9:bc:74:eb:08:
                    30:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                09:7E:5C:B2:B7:D0:CD:93:10:52:C6:28:52:6E:96:19:A5:FC:BA:52
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356461303a3a2f34332d3433203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:5da0::/43

    Signature Algorithm: sha256WithRSAEncryption
         06:42:95:31:4d:6a:a4:d2:2a:01:b5:5b:fc:fe:d8:08:3b:e8:
         7d:58:f5:2d:f7:e6:0c:75:5b:24:94:aa:f5:cd:95:a2:a1:c4:
         ae:c0:a1:76:e1:6b:83:20:a0:24:d3:79:64:3d:f0:3a:aa:28:
         b9:62:4c:b1:2c:0a:2f:42:3d:cc:3d:4c:e6:7f:69:58:0f:58:
         15:0c:ab:96:bc:6d:ee:c5:db:43:a2:f8:0f:88:13:92:55:6f:
         e1:7a:13:85:7a:8e:aa:42:92:89:e9:de:45:27:81:91:6f:4e:
         88:fd:9d:93:11:7a:a9:7c:90:94:25:30:a6:7f:27:1e:80:20:
         4c:13:aa:74:af:7a:66:20:96:d8:c5:74:33:3c:cf:d4:bd:1d:
         84:dd:28:3c:dc:2b:8a:b3:98:51:2c:87:dd:de:e0:62:22:10:
         49:b6:3c:f8:d7:b6:1c:aa:6a:13:ed:92:16:7a:c4:45:7e:32:
         3c:cc:11:fe:b6:3c:db:de:a9:61:ac:99:55:6c:63:d4:e3:a1:
         4f:3e:8d:f5:ce:79:99:82:a9:17:d7:a4:04:ff:c2:84:4f:7f:
         17:1a:45:c1:5a:ef:13:cb:5c:58:34:4d:e4:1c:2b:27:4c:ac:
         bc:75:de:d4:2c:8b:57:c1:f6:3b:16:0d:c1:aa:41:ef:94:af:
         2c:98:96:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org