Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/323830343a373935383a633030303a3a2f33342d3334203d3e20323731333030.roa
File:                     323830343a373935383a633030303a3a2f33342d3334203d3e20323731333030.roa (raw, json)
Hash identifier:          D9xTF5CYIjg6YG8utYX8LZS1wc+ZbcNmS1k7jbYewpU=
Subject key identifier:   4C:51:9F:B2:EE:BB:54:B0:DB:D8:78:C8:71:CF:45:78:13:25:46:90
Certificate issuer:       /CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
Certificate serial:       40933F99599779B2482558BEED736917597EBFF5
Authority key identifier: 1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/323830343a373935383a633030303a3a2f33342d3334203d3e20323731333030.roa
Signing time:             Wed 09 Nov 2022 20:12:47 +0000
ROA not before:           Wed 09 Nov 2022 20:07:47 +0000
ROA not after:            Wed 08 Nov 2023 20:12:47 +0000
asID:                     271300
IP address blocks:        2804:7958:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:93:3f:99:59:97:79:b2:48:25:58:be:ed:73:69:17:59:7e:bf:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE
        Validity
            Not Before: Nov  9 20:07:47 2022 GMT
            Not After : Nov  8 20:12:47 2023 GMT
        Subject: CN=4C519FB2EEBB54B0DBD878C871CF457813254690
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:8e:ef:ac:47:69:83:25:0d:38:d4:ac:cf:e9:
                    09:b1:b9:c4:f4:80:ad:ab:95:f6:61:09:c2:31:43:
                    81:4a:fc:f4:73:07:ce:46:a6:3b:70:9a:86:46:57:
                    28:a4:5f:e9:a6:6e:d2:91:65:ed:11:c1:78:6b:e9:
                    b3:00:3e:a3:41:02:f0:a5:49:d5:be:6e:9b:90:08:
                    e6:b0:2d:5e:50:ce:e0:28:50:30:25:19:3c:13:6d:
                    9e:a8:46:4c:6f:bd:6b:6b:ff:1f:c8:ae:9e:75:21:
                    86:f8:3f:91:f9:6b:11:f7:01:70:d9:6f:5c:5d:e4:
                    6f:8e:82:81:d9:05:8f:f3:56:41:94:63:e0:dd:20:
                    d2:a4:8c:90:de:bb:b7:52:40:f3:36:63:0b:d7:aa:
                    ef:ff:45:16:9c:d8:54:aa:26:a6:eb:34:19:56:03:
                    8f:a6:93:b6:33:ee:e1:01:ae:c2:8c:72:b4:e8:49:
                    b6:4f:b5:c5:be:1c:20:2c:8d:e9:d6:3f:ca:ab:6e:
                    4b:f4:85:e6:ad:a7:67:5e:8e:57:d8:b9:97:79:22:
                    4e:2a:f0:11:4a:59:d7:da:50:72:02:20:5a:a9:f0:
                    81:54:3c:a0:48:89:03:3d:6d:6e:bc:21:cc:b2:92:
                    14:a3:f0:92:f1:7e:94:32:c5:84:9e:f0:3a:b2:bc:
                    ac:8b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:51:9F:B2:EE:BB:54:B0:DB:D8:78:C8:71:CF:45:78:13:25:46:90
            X509v3 Authority Key Identifier:
                keyid:1F:4B:1E:0C:20:F0:C0:9B:8D:55:60:7B:8F:94:B6:D9:AD:15:67:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F4B1E0C20F0C09B8D55607B8F94B6D9AD1567FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HuCgVrcvhRTrNBYRiAKD9Sbs5J9b133TvJsoSUZDpjf7/0/323830343a373935383a633030303a3a2f33342d3334203d3e20323731333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7958:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         94:30:4d:c9:f0:ad:47:95:66:fd:3e:94:45:82:db:dd:db:b5:
         e5:30:63:67:8f:af:cd:df:08:fb:6d:73:d4:38:f1:6f:54:79:
         2b:1a:aa:09:e2:48:85:3a:24:8f:83:cf:1e:5a:48:ba:a3:1f:
         59:80:f1:9d:6d:e6:06:91:0e:77:9d:0b:02:f6:c5:50:87:aa:
         cf:7f:ed:d3:0a:f9:a5:7b:99:c9:bf:47:2e:43:9e:9e:16:e1:
         46:cb:c3:bd:7e:d1:98:aa:66:ae:22:da:91:45:06:e3:d0:ba:
         e4:65:79:b2:fa:88:90:4d:39:df:96:dc:5c:36:37:fa:a8:c4:
         a5:47:d3:da:cd:db:10:b4:ca:97:41:10:4c:c9:14:cd:8c:6b:
         9f:cd:cf:80:8d:00:29:fe:0b:67:f7:8d:37:67:f0:10:13:17:
         58:3a:d5:c4:96:f7:20:4c:61:c8:02:d8:fb:67:12:64:2e:3f:
         a1:ba:4f:63:e9:48:99:d2:ee:72:cf:4a:8b:55:6a:25:62:5e:
         ed:49:e5:79:d2:13:72:51:d4:b0:98:c1:a6:7c:7e:58:3f:5c:
         53:69:f5:b5:11:b4:36:90:76:a6:df:44:da:b8:60:32:58:f1:
         34:9c:12:55:50:2f:14:62:48:a0:1d:dd:ac:f5:27:f7:d8:92:
         d5:3f:a5:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org