Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          Rfpeajazvbh/n20smqQPQBxoJk8Dr9NY0QCjrKXTqhE=
Subject key identifier:   C9:67:A2:49:64:A9:50:6B:72:E5:D0:7A:A8:90:90:C1:EF:38:F0:DF
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       748700FA07FDB92B7768F80CF3F5BCFE8D5ABBE0
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 05 Sep 2023 12:00:00 +0000
ROA not before:           Tue 05 Sep 2023 11:55:00 +0000
ROA not after:            Tue 03 Sep 2024 12:00:00 +0000
asID:                     262687
IP address blocks:        2804:385c:900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:87:00:fa:07:fd:b9:2b:77:68:f8:0c:f3:f5:bc:fe:8d:5a:bb:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Sep  5 11:55:00 2023 GMT
            Not After : Sep  3 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:a2:6e:6e:a3:5f:3b:7e:52:9b:1d:f1:75:fe:
                    ac:b9:d4:2f:0f:de:a8:28:56:46:ed:d3:a8:3c:91:
                    f9:e1:90:12:3f:fc:1f:a9:fb:4d:ec:79:ab:df:11:
                    7c:44:a5:2b:74:b8:4f:cd:ca:03:fd:b3:26:53:dc:
                    0d:e7:20:29:89:26:45:fa:ad:b0:34:a0:28:44:03:
                    ee:ef:f6:f7:65:5f:62:5a:98:58:9c:5d:9d:e3:c6:
                    7e:cf:65:98:65:43:4f:07:50:0d:bb:e8:8f:6b:04:
                    d1:e0:63:1e:96:8a:31:de:bd:72:c0:77:d0:18:c3:
                    f8:0c:ed:16:0d:ce:d0:49:a7:51:96:d1:06:4d:22:
                    e5:5e:73:ed:29:08:d9:d3:e7:33:2b:4d:64:ff:23:
                    05:09:74:fa:9b:c0:f3:18:81:6a:4b:c6:99:36:f1:
                    6a:bd:94:a6:6a:cb:d8:83:17:3a:49:d1:c9:c8:84:
                    a9:c5:f6:c0:e1:c7:2b:fa:15:30:cf:1b:80:56:62:
                    a8:1a:ba:71:d7:7d:71:0a:28:f1:1d:31:b2:a4:45:
                    71:44:61:3d:2c:60:d3:6f:96:89:1a:de:6e:d4:74:
                    f8:0d:30:9f:1a:3d:c8:85:00:76:11:eb:c2:94:47:
                    5b:99:6b:41:b8:5a:0e:7d:4e:39:98:5a:8b:5b:c6:
                    14:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:67:A2:49:64:A9:50:6B:72:E5:D0:7A:A8:90:90:C1:EF:38:F0:DF
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3930303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         a5:44:b8:5d:2c:86:d6:ae:67:93:1a:d1:26:fd:11:40:93:f8:
         9a:33:c7:6f:24:53:17:14:8a:55:f0:2d:52:30:44:b1:0f:24:
         43:5f:f2:e1:88:ad:9f:5d:c6:22:c0:e3:69:09:10:ee:cd:d3:
         7e:85:2e:94:1d:bd:51:4a:6b:b5:51:6f:06:6f:0e:46:8a:03:
         ac:0e:c0:72:a2:11:70:7c:56:fb:28:5a:f9:46:8a:42:fe:0e:
         3e:e7:de:a3:02:d1:1b:8f:a5:1e:b2:78:a9:d2:ec:b7:7d:fe:
         ee:66:0b:74:06:83:0e:e1:7a:c7:32:99:66:4d:bf:d2:8e:e5:
         3e:81:24:ec:38:21:f0:72:90:ed:aa:e2:ee:3d:8d:77:be:c1:
         3d:ef:96:75:d4:06:0a:71:53:d2:90:7b:5c:c5:b1:82:fd:8a:
         1c:c1:ca:f1:be:9f:57:be:26:4b:5f:0e:f0:06:d4:2e:34:23:
         06:cc:c0:f6:ed:75:99:d2:e3:6e:fb:28:f5:13:e1:03:d7:0e:
         91:38:51:2d:69:d7:a2:e0:1d:dd:ab:f1:d2:aa:e7:a0:88:df:
         3a:f0:d5:3a:15:fa:20:62:e6:77:e6:bc:12:9f:01:39:60:b7:
         35:eb:ca:a8:76:bd:80:93:6f:b4:f5:d8:a9:c0:c0:8a:22:52:
         00:64:28:4b
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org