Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/323830343a343133303a3a2f33322d3332203d3e20323636303039.roa
File:                     323830343a343133303a3a2f33322d3332203d3e20323636303039.roa (raw, json)
Hash identifier:          Y5EVTLyw90JznD9nRU1Y6iiXgZb5sYSLhVbda0GdMyg=
Subject key identifier:   0A:9D:F9:4A:83:64:1E:AB:3A:3C:94:1C:CF:7E:29:80:F0:85:D1:8C
Certificate issuer:       /CN=89FD8C72F454A7ADCB40CE3C6EF58EADCFCE5696
Certificate serial:       4176A8AF984116F8A86164E26C1AC479BAB29E55
Authority key identifier: 89:FD:8C:72:F4:54:A7:AD:CB:40:CE:3C:6E:F5:8E:AD:CF:CE:56:96
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89FD8C72F454A7ADCB40CE3C6EF58EADCFCE5696.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/323830343a343133303a3a2f33322d3332203d3e20323636303039.roa
Signing time:             Tue 05 Sep 2023 14:37:51 +0000
ROA not before:           Tue 05 Sep 2023 14:32:51 +0000
ROA not after:            Tue 03 Sep 2024 14:37:51 +0000
asID:                     266009
IP address blocks:        2804:4130::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:76:a8:af:98:41:16:f8:a8:61:64:e2:6c:1a:c4:79:ba:b2:9e:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=89FD8C72F454A7ADCB40CE3C6EF58EADCFCE5696
        Validity
            Not Before: Sep  5 14:32:51 2023 GMT
            Not After : Sep  3 14:37:51 2024 GMT
        Subject: CN=0A9DF94A83641EAB3A3C941CCF7E2980F085D18C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:eb:fa:7a:a1:7e:fb:e4:58:30:a7:88:87:e4:
                    84:94:2d:75:e4:53:4f:6c:d9:29:28:c0:37:9b:6c:
                    ae:2d:ee:bd:47:91:95:6d:79:64:1c:21:7e:72:e0:
                    77:ff:c2:8f:56:71:50:9e:2d:fc:17:06:c2:5c:11:
                    c6:93:f4:ae:26:6c:4e:4f:ed:50:97:c8:27:2f:2f:
                    26:6a:5c:34:e2:47:5f:2c:9a:01:55:e5:ba:e9:01:
                    86:64:ae:be:29:8f:43:30:7a:a0:76:c5:ea:5b:a7:
                    25:ef:33:8d:15:cf:fa:20:c8:78:70:87:67:0a:72:
                    93:95:a5:ed:d5:b5:84:60:a0:10:68:ea:5c:fa:7f:
                    58:b1:ee:cd:83:5d:ff:74:80:fe:ec:38:02:dd:eb:
                    f8:4d:fa:89:01:a5:7f:20:36:d0:d2:48:a8:69:f6:
                    ec:eb:e0:ab:7b:1c:d6:38:3c:ea:07:ac:1b:d0:a2:
                    07:18:21:32:33:8b:6d:62:cd:00:4f:89:21:e8:12:
                    20:1f:df:2c:9f:62:65:69:ae:d9:fe:a6:81:42:23:
                    94:7b:67:8d:25:ae:57:7d:51:f6:cc:80:e2:96:92:
                    1b:b4:02:a2:57:8c:f8:da:c8:22:6d:0b:32:67:5f:
                    7f:15:33:89:13:95:31:cb:a3:6b:cb:2b:26:ad:3d:
                    de:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9D:F9:4A:83:64:1E:AB:3A:3C:94:1C:CF:7E:29:80:F0:85:D1:8C
            X509v3 Authority Key Identifier:
                keyid:89:FD:8C:72:F4:54:A7:AD:CB:40:CE:3C:6E:F5:8E:AD:CF:CE:56:96

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/89FD8C72F454A7ADCB40CE3C6EF58EADCFCE5696.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/89FD8C72F454A7ADCB40CE3C6EF58EADCFCE5696.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4vGE7qWRoAKdakysYtKvgUpLukfFMETSAqfkzFxAdZb/0/323830343a343133303a3a2f33322d3332203d3e20323636303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4130::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:ba:10:51:75:16:90:48:ea:27:cc:48:10:06:de:a5:d9:0f:
         d2:89:02:43:64:66:23:01:43:41:ca:f4:43:b4:65:ae:15:ab:
         ed:d6:c1:ee:61:a4:b1:23:e3:78:51:1c:e2:81:54:92:3a:30:
         1f:3b:ce:4f:00:b0:ce:54:d7:33:c5:a0:c0:36:ac:65:de:88:
         95:15:13:c5:f1:00:e2:f2:be:56:d1:67:27:74:99:95:02:d4:
         8e:f8:cf:93:02:7b:81:b5:3c:03:38:1f:98:8e:54:4e:32:61:
         15:20:3f:fe:bf:eb:5b:6f:7d:b6:40:d2:58:5e:64:2e:72:34:
         58:37:40:23:be:d0:d9:5b:0d:60:e2:48:49:b2:bf:77:78:24:
         81:74:8f:3a:14:d4:99:ed:cf:87:e0:ff:2c:5f:9d:7d:69:e0:
         b7:40:36:6e:b6:ef:f7:5d:96:4d:17:b5:f0:07:21:c2:fd:2a:
         89:47:e6:2e:1b:93:04:e1:fa:ed:38:7c:d6:b2:61:13:ae:57:
         02:96:99:38:df:90:39:f8:d6:3d:fa:7f:eb:98:09:7f:0d:54:
         35:03:5d:a9:da:b5:30:93:42:99:2d:b1:d6:21:eb:db:3a:4f:
         1c:28:61:6a:1f:0b:6b:4e:c6:85:8c:59:5b:96:00:f4:98:9f:
         a1:f0:aa:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:25 2024 by rpki-client on console-ams.rpki-client.org