Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3836383a3a2f34352d3435203d3e20323637343230.roa
File:                     323830343a346433633a3836383a3a2f34352d3435203d3e20323637343230.roa (raw, json)
Hash identifier:          4LvdF4zX8qysjHD82CpdO33u5Nbv6/K7N7JuHHhKWt8=
Subject key identifier:   7A:9E:43:6E:80:BF:E0:7E:E7:AF:F0:E2:A0:F4:93:94:1F:25:78:56
Certificate issuer:       /CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
Certificate serial:       5EB57E72D0CF4FF34682A580A66F4982BE7C7EA3
Authority key identifier: C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3836383a3a2f34352d3435203d3e20323637343230.roa
Signing time:             Wed 28 Feb 2024 13:53:00 +0000
ROA not before:           Wed 28 Feb 2024 13:48:00 +0000
ROA not after:            Wed 26 Feb 2025 13:53:00 +0000
asID:                     267420
IP address blocks:        2804:4d3c:868::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5e:b5:7e:72:d0:cf:4f:f3:46:82:a5:80:a6:6f:49:82:be:7c:7e:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C9993E4E7A469482F48DE6C557C1BE415E192A34
        Validity
            Not Before: Feb 28 13:48:00 2024 GMT
            Not After : Feb 26 13:53:00 2025 GMT
        Subject: CN=7A9E436E80BFE07EE7AFF0E2A0F493941F257856
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:26:6e:b7:6e:77:87:8c:23:6e:e1:de:93:5d:
                    b1:49:d4:02:ed:9d:76:32:74:fc:af:56:da:ef:2f:
                    36:82:01:0e:af:fa:f2:15:06:5e:ad:e2:b0:b1:61:
                    61:19:ac:09:c8:e3:90:81:d4:6f:81:39:46:f1:6a:
                    d3:4a:4d:f8:9c:7d:4e:a1:0c:3a:6a:9d:e4:66:b5:
                    d9:21:0b:71:ff:bc:18:e8:1f:8b:86:43:f3:51:65:
                    bb:30:5c:36:83:e0:fe:f2:82:87:19:6c:e1:3e:d2:
                    20:6f:a1:a4:dd:3d:eb:c6:db:0e:4d:bb:86:ff:d9:
                    0e:8b:b1:94:2a:81:d6:9c:d2:6b:d4:4a:db:b4:b8:
                    01:d4:e9:89:98:2a:de:1e:2f:4b:96:6e:8a:11:d4:
                    bf:95:d8:1f:1f:ae:39:e2:39:af:b7:c9:b2:ce:22:
                    bb:86:68:65:89:f8:d3:b2:05:7c:5e:f0:45:26:a7:
                    d2:2d:99:df:45:28:79:d2:bb:e7:2a:04:41:5e:24:
                    0e:77:01:a2:f4:99:ac:54:20:92:6e:e6:20:68:80:
                    21:9e:b9:ca:d3:fc:3d:e6:23:e4:20:40:7f:81:ca:
                    04:30:e7:f5:22:2b:69:f9:81:c9:ba:85:fa:a5:45:
                    26:7d:78:ad:51:27:17:80:02:7d:53:30:2d:9a:4d:
                    fd:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7A:9E:43:6E:80:BF:E0:7E:E7:AF:F0:E2:A0:F4:93:94:1F:25:78:56
            X509v3 Authority Key Identifier:
                keyid:C9:99:3E:4E:7A:46:94:82:F4:8D:E6:C5:57:C1:BE:41:5E:19:2A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C9993E4E7A469482F48DE6C557C1BE415E192A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HsB9SoF4jFbiznf4dxKDoe7TsLv1QELk33bxbXkHA9Pg/0/323830343a346433633a3836383a3a2f34352d3435203d3e20323637343230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d3c:868::/45

    Signature Algorithm: sha256WithRSAEncryption
         03:ec:1e:3d:48:1a:44:64:12:23:27:20:a6:94:d1:ae:ab:d2:
         17:aa:78:d0:f1:38:71:f5:70:fc:04:0b:f7:94:63:d8:96:a8:
         f6:48:5c:5f:22:a6:ef:72:bf:97:2c:55:f4:0b:f6:87:9b:00:
         e5:85:b9:b2:41:81:ee:5e:34:14:fa:e9:30:3a:5b:a9:e4:86:
         5d:78:f0:28:a0:70:1d:f1:b5:47:2b:3b:0e:aa:1b:86:1e:e5:
         66:68:67:7a:eb:dc:7b:04:78:90:3b:44:9c:04:8a:72:ca:91:
         fe:8e:d0:93:ee:98:b8:87:28:6f:2b:33:21:68:f8:8d:fc:96:
         52:0c:e5:54:dd:04:d8:bf:02:24:93:76:d6:24:52:8f:17:bb:
         80:84:75:70:2a:fc:04:26:af:b4:9d:e8:f7:2a:f5:27:ce:e4:
         8a:55:9e:96:9c:f2:a7:59:8e:b9:72:d8:ed:fc:52:fc:3b:04:
         13:8b:fe:2f:3a:f8:9f:c7:72:6e:3f:df:f9:0a:d2:6a:87:43:
         72:28:5e:8e:21:8a:7d:e7:a4:5c:ea:62:76:48:44:10:12:b9:
         9c:a8:98:f0:0b:d2:ca:d0:0b:de:60:61:70:7d:17:47:78:98:
         fd:9d:f8:cd:b3:57:cd:69:9d:6a:92:77:ca:70:b3:16:d8:30:
         12:28:ec:cc
-----BEGIN CERTIFICATE-----
MIIFUDCCBDigAwIBAgIUXrV+ctDPT/NGgqWApm9Jgr58fqMwDQYJKoZIhvcNAQEL
BQAwMzExMC8GA1UEAxMoQzk5OTNFNEU3QTQ2OTQ4MkY0OERFNkM1NTdDMUJFNDE1
RTE5MkEzNDAeFw0yNDAyMjgxMzQ4MDBaFw0yNTAyMjYxMzUzMDBaMDMxMTAvBgNV
BAMTKDdBOUU0MzZFODBCRkUwN0VFN0FGRjBFMkEwRjQ5Mzk0MUYyNTc4NTYwggEi
MA0GCSqGSIb3DQEBAQUAA4IBDwAwggEKAoIBAQDDJm63bneHjCNu4d6TXbFJ1ALt
nXYydPyvVtrvLzaCAQ6v+vIVBl6t4rCxYWEZrAnI45CB1G+BOUbxatNKTficfU6h
DDpqneRmtdkhC3H/vBjoH4uGQ/NRZbswXDaD4P7ygocZbOE+0iBvoaTdPevG2w5N
u4b/2Q6LsZQqgdac0mvUStu0uAHU6YmYKt4eL0uWbooR1L+V2B8frjniOa+3ybLO
IruGaGWJ+NOyBXxe8EUmp9Itmd9FKHnSu+cqBEFeJA53AaL0maxUIJJu5iBogCGe
ucrT/D3mI+QgQH+BygQw5/UiK2n5gcm6hfqlRSZ9eK1RJxeAAn1TMC2aTf0TAgMB
AAGjggJaMIICVjAdBgNVHQ4EFgQUep5DboC/4H7nr/DioPSTlB8leFYwHwYDVR0j
BBgwFoAUyZk+TnpGlIL0jebFV8G+QV4ZKjQwDgYDVR0PAQH/BAQDAgeAMIGUBgNV
HR8EgYwwgYkwgYaggYOggYCGfnJzeW5jOi8vcnBraS1yZXBvLnJlZ2lzdHJvLmJy
L3JlcG8vSHNCOVNvRjRqRmJpem5mNGR4S0RvZTdUc0x2MVFFTGszM2J4YlhrSEE5
UGcvMC9DOTk5M0U0RTdBNDY5NDgyRjQ4REU2QzU1N0MxQkU0MTVFMTkyQTM0LmNy
bDB4BggrBgEFBQcBAQRsMGowaAYIKwYBBQUHMAKGXHJzeW5jOi8vcnBraS1yZXBv
LnJlZ2lzdHJvLmJyL3JlcG8vbmljYnJfcmVwby8wL0M5OTkzRTRFN0E0Njk0ODJG
NDhERTZDNTU3QzFCRTQxNUUxOTJBMzQuY2VyMIG0BggrBgEFBQcBCwSBpzCBpDCB
oQYIKwYBBQUHMAuGgZRyc3luYzovL3Jwa2ktcmVwby5yZWdpc3Ryby5ici9yZXBv
L0hzQjlTb0Y0akZiaXpuZjRkeEtEb2U3VHNMdjFRRUxrMzNieGJYa0hBOVBnLzAv
MzIzODMwMzQzYTM0NjQzMzYzM2EzODM2MzgzYTNhMmYzNDM1MmQzNDM1MjAzZDNl
MjAzMjM2MzczNDMyMzAucm9hMBgGA1UdIAEB/wQOMAwwCgYIKwYBBQUHDgIwIgYI
KwYBBQUHAQcBAf8EEzARMA8EAgACMAkDBwMoBE08CGgwDQYJKoZIhvcNAQELBQAD
ggEBAAPsHj1IGkRkEiMnIKaU0a6r0heqeNDxOHH1cPwEC/eUY9iWqPZIXF8ipu9y
v5csVfQL9oebAOWFubJBge5eNBT66TA6W6nkhl148CigcB3xtUcrOw6qG4Ye5WZo
Z3rr3HsEeJA7RJwEinLKkf6O0JPumLiHKG8rMyFo+I38llIM5VTdBNi/AiSTdtYk
Uo8Xu4CEdXAq/AQmr7Sd6Pcq9SfO5IpVnpac8qdZjrly2O38Uvw7BBOL/i86+J/H
cm4/3/kK0mqHQ3IoXo4hin3npFzqYnZIRBASuZyomPAL0srQC95gYXB9F0d4mP2d
+M2zV81pnWqSd8pwsxbYMBIo7Mw=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org