Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa
File:                     323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa (raw, json)
Hash identifier:          YH4FrU5qvjLUdiFisj+QIqRh7giVcd9WoT+E5scF8Lw=
Subject key identifier:   22:02:F6:11:85:4A:B0:04:D8:4C:79:48:B7:70:E9:EE:75:74:4C:76
Certificate issuer:       /CN=9AB232D2E2328522F328939E61A9457DA0361AF1
Certificate serial:       67533507C53B360380E68815762CF5B63E9D6073
Authority key identifier: 9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa
Signing time:             Fri 23 Jun 2023 19:06:41 +0000
ROA not before:           Fri 23 Jun 2023 19:01:41 +0000
ROA not after:            Fri 21 Jun 2024 19:06:41 +0000
asID:                     264589
IP address blocks:        2804:2210:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:53:35:07:c5:3b:36:03:80:e6:88:15:76:2c:f5:b6:3e:9d:60:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB232D2E2328522F328939E61A9457DA0361AF1
        Validity
            Not Before: Jun 23 19:01:41 2023 GMT
            Not After : Jun 21 19:06:41 2024 GMT
        Subject: CN=2202F611854AB004D84C7948B770E9EE75744C76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:6a:bb:2e:48:35:00:8e:ec:8b:20:98:86:67:
                    7f:f1:be:1e:fe:50:46:34:67:48:43:29:b7:8d:36:
                    9c:82:64:4c:e7:b3:16:6b:33:5e:5e:38:69:cb:cf:
                    34:71:2a:53:f4:b9:a5:1e:91:3d:f5:4a:36:66:2e:
                    ec:71:df:51:95:03:14:0c:72:6b:2c:d4:03:32:0a:
                    d3:a2:01:ed:44:d2:c6:5d:64:1c:18:b2:2b:e4:e9:
                    5f:de:3d:07:72:9b:53:94:90:c5:23:42:4f:aa:5b:
                    02:75:69:7e:ec:0e:e8:15:b1:87:d6:98:d6:51:cc:
                    22:0b:96:21:f9:ec:2f:5b:4b:c8:40:af:9e:eb:ba:
                    c0:09:84:56:58:e5:15:f4:65:5d:03:a2:06:ba:67:
                    23:ac:75:57:bc:a1:8c:4a:6d:10:58:85:25:b0:4d:
                    f0:ac:59:0c:3c:3f:cb:09:1e:de:cb:2d:01:a8:a7:
                    f9:f2:1f:7b:f7:33:cc:f4:3e:18:75:ce:93:53:7c:
                    e8:a5:23:0a:a5:1c:4b:54:17:07:25:3d:e6:59:0e:
                    48:88:31:d8:c9:91:cd:93:9a:ad:46:5d:93:03:86:
                    b0:1e:d4:cc:14:bc:62:d6:4e:5c:db:fa:a7:9e:f7:
                    c6:30:d1:54:55:aa:a6:c4:fa:c4:69:ad:45:e0:bc:
                    25:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:02:F6:11:85:4A:B0:04:D8:4C:79:48:B7:70:E9:EE:75:74:4C:76
            X509v3 Authority Key Identifier:
                keyid:9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a343030303a3a2f33342d3334203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2210:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         6f:4d:ac:07:ce:f1:d0:9f:14:da:37:f3:33:bf:de:39:fa:65:
         54:58:01:6e:4b:3a:8a:3e:53:b3:dd:3d:c0:fb:1b:19:59:1e:
         d0:82:d9:e3:0d:36:fc:e6:94:d4:3a:0a:65:e6:7a:f0:b5:4c:
         e7:ff:da:73:1b:8c:ee:b1:52:70:78:49:52:67:d8:3d:cd:10:
         da:95:7f:8a:3b:4b:b5:d0:7d:f4:24:ea:58:26:39:ee:ce:82:
         4f:ea:60:c5:0a:0f:bd:dc:b7:08:69:1f:2a:b7:3b:66:cf:09:
         c1:b1:c7:70:a9:3b:31:f9:a9:7d:41:09:80:52:f1:dd:b2:a2:
         3c:b7:73:2a:64:80:f6:f0:4d:a8:81:e1:78:fe:45:f6:2d:3e:
         43:98:d7:b1:dc:b5:f9:83:f9:68:c4:51:a9:ac:78:06:8a:1d:
         2b:54:08:c8:63:a3:0f:22:11:37:2f:47:bc:13:b1:ba:a8:d1:
         04:ff:9e:b8:d1:fa:c8:3a:2e:bd:f6:c8:fe:54:7a:73:3d:c8:
         ac:d3:60:54:13:e7:83:7e:64:12:8f:68:31:d0:61:56:c3:08:
         42:34:bb:fd:17:e5:db:47:bf:d0:0a:30:d1:f1:aa:fd:dd:b6:
         88:e0:c7:07:75:50:5d:67:29:7e:00:9a:36:76:9b:91:dc:e3:
         ae:c2:50:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:01 2024 by rpki-client on console-ams.rpki-client.org