Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/323830343a353739383a383030303a3a2f33342d3334203d3e20323638303734.roa
File:                     323830343a353739383a383030303a3a2f33342d3334203d3e20323638303734.roa (raw, json)
Hash identifier:          U9zHjO5qQpG5QoUCMimuQZKtcqS8ZjgwVVyR+S4LKPg=
Subject key identifier:   68:36:B9:86:33:EA:7E:E1:AE:EA:48:56:A1:D2:A8:A6:68:2A:F0:31
Certificate issuer:       /CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
Certificate serial:       79284C2F44B98CF832A157ECF1330F6130A457AC
Authority key identifier: 09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/323830343a353739383a383030303a3a2f33342d3334203d3e20323638303734.roa
Signing time:             Mon 31 Jul 2023 02:50:32 +0000
ROA not before:           Mon 31 Jul 2023 02:45:32 +0000
ROA not after:            Wed 31 Jul 2024 02:50:32 +0000
asID:                     268074
IP address blocks:        2804:5798:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:28:4c:2f:44:b9:8c:f8:32:a1:57:ec:f1:33:0f:61:30:a4:57:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
        Validity
            Not Before: Jul 31 02:45:32 2023 GMT
            Not After : Jul 31 02:50:32 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:5f:fd:8e:a4:11:63:82:56:16:cf:77:da:40:
                    cb:02:ac:78:99:8c:b8:f3:b6:9a:3b:a3:c9:d7:c4:
                    76:4d:cd:c3:5d:bf:0d:86:b8:e5:29:f7:24:45:5c:
                    a7:67:74:d6:22:04:a0:54:09:c8:61:01:b3:9a:4e:
                    65:42:59:28:f0:86:fd:b0:e3:d2:4a:43:8b:d6:a0:
                    40:e5:03:27:c2:6e:95:10:43:15:bb:0b:be:5f:10:
                    ca:1e:99:e8:83:00:88:29:87:56:dd:27:64:ae:b2:
                    18:51:80:bd:02:47:e2:c4:46:bf:54:7c:5f:c0:9e:
                    44:3f:d5:52:2b:9c:85:ac:4e:ec:c0:72:00:93:32:
                    33:bb:7e:20:4f:79:4b:17:50:2a:cd:8f:45:76:7e:
                    16:5c:1c:cb:a9:c0:07:53:0d:c1:e7:34:b8:8e:62:
                    d5:f1:21:01:3f:45:20:e9:15:ca:41:2b:b7:b7:8b:
                    49:79:3d:bc:ef:da:e3:37:22:8a:f4:59:9c:42:58:
                    7d:0c:0c:c7:f2:5d:ee:2b:0a:e3:b8:cc:49:e5:34:
                    c6:7a:d2:94:ad:1e:b6:19:82:4c:4b:c7:ce:36:31:
                    0d:3b:d2:e2:f7:e6:79:a1:bd:08:e2:d9:28:0e:96:
                    46:a5:c5:b4:a6:be:dc:32:d5:b3:90:1a:36:0b:fb:
                    66:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:36:B9:86:33:EA:7E:E1:AE:EA:48:56:A1:D2:A8:A6:68:2A:F0:31
            X509v3 Authority Key Identifier:
                keyid:09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/323830343a353739383a383030303a3a2f33342d3334203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5798:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         31:4c:15:af:91:c0:45:dc:67:a7:51:8d:75:11:3f:98:d0:23:
         0f:00:e3:03:55:dc:f6:7d:8a:62:60:b3:cc:98:92:8e:6b:67:
         f8:79:1d:bf:6e:02:70:c7:0f:9e:f1:54:e4:0f:17:2c:98:99:
         80:e9:30:4a:5c:b8:3d:74:75:ff:f3:a1:e0:1c:d7:ef:b7:37:
         d6:83:7e:a3:cd:48:6d:58:c8:8e:71:d7:5f:14:f0:13:d6:98:
         45:65:e9:d1:53:d1:34:26:2e:5e:a7:96:66:f7:5c:fd:28:6d:
         6b:ed:23:a2:16:df:fc:78:f5:ad:3f:11:eb:ba:77:d5:d8:9c:
         9e:f3:bf:dc:b0:c8:f5:fd:7a:e1:31:4f:a5:be:4d:57:24:7d:
         a1:8d:71:b9:78:78:e0:9d:7f:76:a1:16:a2:6c:c1:3f:bd:93:
         35:80:b5:f1:a3:55:e3:60:fb:39:fc:93:84:d5:b0:3f:e5:72:
         b3:6b:78:0a:f5:a6:13:07:77:9e:0f:a9:87:f6:7a:b8:d0:f2:
         79:08:c6:59:ce:44:e8:93:0b:28:96:05:a9:c2:fe:2d:ee:9f:
         f6:5d:84:d3:d5:66:f1:73:c9:36:93:ae:17:07:21:d3:9b:a3:
         2b:2b:53:2a:d0:a6:f4:fd:6a:cb:e0:d3:63:ff:54:47:70:ef:
         5a:c5:6d:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org