Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/323830343a346265303a3a2f33342d3334203d3e20323637333334.roa
File:                     323830343a346265303a3a2f33342d3334203d3e20323637333334.roa (raw, json)
Hash identifier:          9dxnyxJgq9zZstsrO3mcYPD7/uFRUUNkMtEt8gZTmDk=
Subject key identifier:   20:23:3F:77:B6:77:3A:DC:9F:4A:A4:2B:17:AA:86:72:CB:97:FF:43
Certificate issuer:       /CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
Certificate serial:       463F173F53060ACF8E4E3A99D5E21803A3E52435
Authority key identifier: 95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/323830343a346265303a3a2f33342d3334203d3e20323637333334.roa
Signing time:             Sun 26 Nov 2023 22:00:00 +0000
ROA not before:           Sun 26 Nov 2023 21:55:00 +0000
ROA not after:            Sun 24 Nov 2024 22:00:00 +0000
asID:                     267334
IP address blocks:        2804:4be0::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:3f:17:3f:53:06:0a:cf:8e:4e:3a:99:d5:e2:18:03:a3:e5:24:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9532089B7106FDCEA0A2DC411DBD7F3CA9368C89
        Validity
            Not Before: Nov 26 21:55:00 2023 GMT
            Not After : Nov 24 22:00:00 2024 GMT
        Subject: CN=20233F77B6773ADC9F4AA42B17AA8672CB97FF43
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fc:39:80:c0:f3:06:e7:7a:3d:41:42:77:0d:
                    22:19:53:59:1d:a8:6c:b1:1d:a4:ca:be:41:98:bc:
                    94:d1:46:f1:ac:3a:d9:e3:79:16:4b:ff:9b:21:c1:
                    e7:96:aa:25:92:00:0a:e9:2b:87:f8:82:d9:8b:52:
                    e9:57:7c:13:95:5c:ad:e0:d3:34:f1:87:fb:97:26:
                    e2:5e:42:42:94:b3:f8:18:25:d4:df:66:13:73:4e:
                    c7:0a:72:4b:71:5f:a6:d3:de:42:5f:54:76:3c:83:
                    af:0b:a9:51:e2:32:c2:29:46:6b:25:45:fb:ab:74:
                    cd:e0:b5:94:e1:01:94:d2:e1:d7:9b:f2:30:07:61:
                    58:c6:73:dd:61:20:cf:ed:c9:c5:31:31:23:d6:6d:
                    ba:e3:56:41:f7:73:cb:dd:c5:ae:ae:08:59:08:3f:
                    40:71:b5:77:b3:b8:35:36:95:14:c4:97:73:15:56:
                    01:b7:88:f3:c4:10:6f:c8:78:57:d1:28:39:0d:82:
                    f3:de:3b:29:68:ce:63:1a:b6:fa:00:a3:1b:24:0b:
                    9b:37:4d:2c:3f:06:be:c5:08:71:d3:73:eb:e7:cc:
                    b7:6b:ed:11:37:c8:7a:49:03:63:bb:8d:da:52:a3:
                    ac:d0:9f:d9:5e:c7:dd:ae:b9:07:33:bb:6f:14:34:
                    7a:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:23:3F:77:B6:77:3A:DC:9F:4A:A4:2B:17:AA:86:72:CB:97:FF:43
            X509v3 Authority Key Identifier:
                keyid:95:32:08:9B:71:06:FD:CE:A0:A2:DC:41:1D:BD:7F:3C:A9:36:8C:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9532089B7106FDCEA0A2DC411DBD7F3CA9368C89.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BfMwy4Nqwej4UcU8EL3knZ2kytFo19gF6yPT1REi2Mov/0/323830343a346265303a3a2f33342d3334203d3e20323637333334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4be0::/34

    Signature Algorithm: sha256WithRSAEncryption
         05:b7:53:6f:4f:53:04:14:48:17:a6:4f:74:0a:5e:b7:cc:ca:
         31:20:dc:b7:c3:70:e6:ef:15:b5:17:30:b1:9d:ab:ce:24:1b:
         26:fd:16:88:12:35:c0:9f:f3:c7:d4:72:7d:1e:52:45:1e:58:
         f9:e6:0e:3c:66:1e:a5:d8:55:42:98:e4:27:f7:8a:43:a6:3b:
         a8:a4:cc:39:f5:59:4b:f4:59:02:13:74:a1:b3:1e:45:5a:90:
         41:50:21:67:97:04:ca:a1:2d:6f:25:9a:cf:d1:a5:b6:49:59:
         4d:49:39:ec:e4:30:6d:ab:91:85:69:07:24:13:6d:1c:0a:ed:
         be:8e:26:e1:ff:98:f6:49:48:38:53:e9:a0:c5:8a:17:c6:24:
         7f:b9:1b:15:3e:fb:ff:e2:87:7b:53:bc:e2:e1:13:6b:ea:36:
         06:a1:eb:e3:a6:6b:29:62:73:1b:ba:40:31:c8:53:91:a7:2b:
         1e:34:e3:7c:6f:25:e3:83:45:ae:1f:42:c4:eb:0b:96:1f:51:
         e1:36:71:3f:7a:d5:ac:c1:87:0d:2c:05:6a:8a:83:1d:fc:a4:
         07:be:0a:d1:1d:6b:55:b4:d6:21:b2:50:83:c1:55:1e:7e:1f:
         ef:a7:a5:8b:d7:2e:94:19:eb:a0:04:89:2e:d0:e6:75:ad:f9:
         dc:40:4f:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:16 2024 by rpki-client on console-ams.rpki-client.org