Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356463303a3a2f34332d3433203d3e20323637343230.roa
File:                     323830343a346433633a356463303a3a2f34332d3433203d3e20323637343230.roa (raw, json)
Hash identifier:          9tnysv8hfwHqa33gx7HvdEmKje/RhiMIPGaofVxeBzI=
Subject key identifier:   3E:14:3B:7B:70:4F:9B:FA:24:17:F9:21:F6:7C:2B:1E:09:4A:5E:15
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       35BA26B853AE7A8773895625746EB1D3C098E200
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356463303a3a2f34332d3433203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:54:30 +0000
ROA not before:           Wed 28 Feb 2024 13:49:30 +0000
ROA not after:            Wed 26 Feb 2025 13:54:30 +0000
asID:                     267420
IP address blocks:        2804:4d3c:5dc0::/43 maxlen: 43

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:ba:26:b8:53:ae:7a:87:73:89:56:25:74:6e:b1:d3:c0:98:e2:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:49:30 2024 GMT
            Not After : Feb 26 13:54:30 2025 GMT
        Subject: CN=3E143B7B704F9BFA2417F921F67C2B1E094A5E15
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:76:5a:07:4c:d4:fb:7a:b2:53:87:f6:56:56:
                    1c:fb:e1:e0:b1:d2:88:29:7b:84:f7:f0:3c:71:d2:
                    75:83:3f:01:32:98:ab:34:b5:fb:62:9e:0d:c5:db:
                    5c:50:8b:67:c1:3f:e2:c5:de:92:93:4c:28:cf:bd:
                    69:b5:5e:c7:55:81:57:da:8a:0c:8a:fa:1f:8b:e9:
                    3d:16:b1:f9:16:ff:e9:24:1d:ad:de:39:61:e2:7c:
                    29:af:5c:6f:66:03:b7:58:f0:f4:68:79:a1:db:bb:
                    6f:f2:38:1a:34:14:a8:55:5c:89:1d:e2:1f:65:ef:
                    50:50:0a:95:4b:cd:2f:ea:28:a6:75:48:d9:0c:17:
                    dc:88:f0:ba:c8:93:2d:fb:b7:89:e7:31:df:da:c2:
                    29:e4:c6:71:f9:10:1a:41:9d:23:5d:a1:80:0e:fd:
                    a1:8e:84:b5:28:be:33:8a:95:a1:00:1b:29:17:cd:
                    f7:31:25:be:53:1e:0a:b0:85:e4:8a:b0:70:39:af:
                    f1:fe:62:4f:13:59:5c:c0:f4:eb:50:ed:24:d7:71:
                    1c:21:be:d6:e8:2b:c0:54:4f:4f:22:62:0a:9d:a7:
                    33:94:52:cf:1b:6a:ab:09:32:b5:e2:b4:9b:35:ac:
                    90:98:bb:84:25:cd:10:94:92:e2:1e:2b:7f:9b:c0:
                    6b:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:14:3B:7B:70:4F:9B:FA:24:17:F9:21:F6:7C:2B:1E:09:4A:5E:15
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a356463303a3a2f34332d3433203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:5dc0::/43

    Signature Algorithm: sha256WithRSAEncryption
         b9:f1:ee:47:c4:18:dc:47:f1:00:16:99:9b:14:05:bf:46:81:
         f6:62:14:f6:4b:f4:ee:98:8c:0c:7c:48:b2:ca:f4:50:a1:b5:
         c7:6a:5f:bb:51:cd:f4:bf:39:f2:bb:40:6c:e2:05:e5:45:cb:
         00:5a:c9:16:da:99:f0:f8:f5:a1:99:ae:9b:b7:e4:7b:c8:42:
         95:94:90:c4:8a:19:f4:ad:66:be:d7:1f:0a:6b:85:a5:98:74:
         6c:63:bc:ed:55:1a:1b:c9:d8:33:7c:cd:2a:e4:1f:5f:d0:cf:
         d6:d7:c9:3f:00:62:ef:20:d5:86:15:99:4b:6a:8f:1e:94:6d:
         d4:97:a7:ab:dc:3c:13:dd:cd:82:4b:73:e4:59:c5:6a:4b:d9:
         1b:70:a6:8b:d7:ba:aa:7b:a7:51:b5:a9:07:bc:aa:2c:10:7e:
         86:2b:57:16:36:05:43:ab:d7:28:71:3c:17:34:93:33:97:c6:
         3f:e6:0a:8f:77:82:d3:f2:0b:0e:c1:21:b4:79:90:2c:e0:7c:
         13:e4:81:64:6e:17:23:5b:fb:08:cb:45:0c:a3:49:44:46:9a:
         38:08:b1:5f:ec:62:6c:3d:aa:2c:8f:58:01:fb:34:77:cd:81:
         8c:d0:72:5f:a9:a2:79:0d:2e:bb:42:6e:43:ee:6b:ff:c7:37:
         5d:b3:b0:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:51 2024 by rpki-client on console-ams.rpki-client.org