Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/323830343a373935383a383030303a3a2f33332d3333203d3e20323731333030.roa
File:                     323830343a373935383a383030303a3a2f33332d3333203d3e20323731333030.roa (raw, json)
Hash identifier:          6vuyWMQg4Us93IDDL/JbBZybowq+hzaE6NFIh5pQC7w=
Subject key identifier:   9C:90:17:FA:89:7C:40:D8:2D:52:F2:A7:17:E8:9E:B9:08:F1:A6:75
Certificate issuer:       /CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
Certificate serial:       68A37F6908B98892C39AB131D9F7577AF4007DBD
Authority key identifier: 1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/323830343a373935383a383030303a3a2f33332d3333203d3e20323731333030.roa
Signing time:             Wed 09 Nov 2022 20:12:48 +0000
ROA not before:           Wed 09 Nov 2022 20:07:48 +0000
ROA not after:            Wed 08 Nov 2023 20:12:48 +0000
asID:                     271300
IP address blocks:        2804:7958:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:a3:7f:69:08:b9:88:92:c3:9a:b1:31:d9:f7:57:7a:f4:00:7d:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
        Validity
            Not Before: Nov  9 20:07:48 2022 GMT
            Not After : Nov  8 20:12:48 2023 GMT
        Subject: CN=9C9017FA897C40D82D52F2A717E89EB908F1A675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:42:4f:66:d1:21:fa:70:73:d6:ca:bf:da:a1:
                    dd:9c:a1:06:a6:f0:f7:98:ae:c5:f0:92:ee:10:85:
                    89:b7:a7:ad:8a:b6:b7:62:64:08:2f:80:d5:a8:5b:
                    87:ba:c5:b4:a8:25:4d:41:c6:ab:06:c6:ff:0c:32:
                    c1:76:44:a0:4b:dd:23:3a:04:12:3f:fd:82:95:5b:
                    b4:e6:07:fa:d8:2f:41:46:ef:04:35:19:1a:dc:0a:
                    6c:8b:98:83:75:c5:08:87:5d:e6:26:53:21:89:a2:
                    53:14:1d:7e:75:69:15:c4:cb:e2:88:5d:52:bc:36:
                    9a:71:57:a2:da:b7:83:77:90:2f:16:9e:a8:ba:c4:
                    d0:cd:32:e5:ea:22:31:6b:36:f5:fc:ee:60:8f:b0:
                    94:f4:01:09:5f:2a:3a:83:6e:89:b6:79:e8:61:90:
                    4f:24:ab:b5:31:83:8c:30:54:7f:cb:42:be:93:5a:
                    2f:38:5a:54:00:74:c5:6a:4d:6f:cc:2c:b2:69:f4:
                    47:41:42:b2:f5:ee:19:49:ac:47:15:81:0b:0b:c5:
                    e1:07:8f:55:16:8e:2e:28:01:c4:0e:fd:f2:fd:a9:
                    58:98:89:b2:7e:f7:e2:7f:de:4e:2d:5a:3b:2a:e3:
                    52:82:aa:f5:4d:0e:b7:76:80:e1:d8:e9:40:02:f2:
                    08:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:90:17:FA:89:7C:40:D8:2D:52:F2:A7:17:E8:9E:B9:08:F1:A6:75
            X509v3 Authority Key Identifier:
                keyid:1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/323830343a373935383a383030303a3a2f33332d3333203d3e20323731333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7958:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         63:f1:97:7f:6d:d3:7a:b2:58:45:b3:49:b6:3e:86:21:48:ec:
         59:9b:e6:16:e0:e5:bf:21:f2:1f:5c:6f:1b:d1:e2:24:e0:d4:
         19:e3:d0:4b:c4:1e:27:0d:08:97:61:50:65:65:40:0c:41:6b:
         89:cf:a3:f4:ed:1d:62:2a:44:22:e6:7e:47:a1:e5:7e:74:2c:
         cf:c6:ea:50:49:17:d2:e3:10:2f:23:d8:ba:b9:61:a1:58:28:
         e9:9b:72:e5:64:27:8f:d2:74:a8:27:9a:23:15:bb:a6:c8:f2:
         d9:3d:93:74:47:8d:55:4b:9d:62:68:24:5b:5d:39:cd:9e:9d:
         19:2d:fd:b0:4f:30:9c:01:da:6f:63:3d:59:fb:6c:f6:06:70:
         74:8e:2b:b0:42:46:6b:7c:8e:f1:f0:6f:aa:c9:c9:e7:fa:31:
         51:4b:dc:3d:9b:c1:36:19:ce:6c:5a:d6:7d:94:cd:fb:c8:fc:
         38:18:83:ff:c8:17:96:8a:b9:3b:3e:60:c3:93:85:f4:bd:7e:
         ff:ce:ae:a6:bf:8f:29:f3:81:92:43:9e:de:b6:04:08:59:77:
         ca:29:19:cc:39:38:8b:7f:4c:12:2c:4c:40:b3:fa:70:88:58:
         3c:a0:cb:88:e4:5c:67:4e:8d:c0:95:36:e6:cf:1b:a3:cc:5b:
         03:78:5e:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org