Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/323830343a353739383a3a2f33322d3332203d3e20323638303734.roa
File:                     323830343a353739383a3a2f33322d3332203d3e20323638303734.roa (raw, json)
Hash identifier:          NFlq1d+Yi0/FOaJHKezjn4MllrFeI3TzXmDFEf8IIzQ=
Subject key identifier:   2C:39:C1:FA:52:0A:BE:C2:C8:2E:A0:A5:D4:2C:B5:9D:24:EE:3F:DF
Certificate issuer:       /CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
Certificate serial:       23468C98EE08B907DD1A88C8296C11FABF8CCCD3
Authority key identifier: 09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/323830343a353739383a3a2f33322d3332203d3e20323638303734.roa
Signing time:             Sun 03 Mar 2024 18:00:01 +0000
ROA not before:           Sun 03 Mar 2024 17:55:01 +0000
ROA not after:            Mon 03 Mar 2025 18:00:01 +0000
asID:                     268074
IP address blocks:        2804:5798::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:46:8c:98:ee:08:b9:07:dd:1a:88:c8:29:6c:11:fa:bf:8c:cc:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
        Validity
            Not Before: Mar  3 17:55:01 2024 GMT
            Not After : Mar  3 18:00:01 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:69:54:92:3d:d6:08:77:44:25:2f:d2:e2:c9:
                    b1:54:e6:35:53:ab:51:c0:bb:d0:b9:5b:e7:08:6b:
                    1f:37:35:49:b8:e6:ac:ba:33:d0:0d:e5:1c:d4:82:
                    ea:b7:c9:ef:fd:b5:65:90:ae:9f:04:61:8a:15:48:
                    c0:db:75:f6:66:11:c8:0e:ef:e9:4e:52:4e:61:d1:
                    26:92:9a:db:c7:fe:08:1c:2c:75:70:99:ab:b2:bf:
                    36:8c:f0:7f:1c:50:e5:df:9a:7b:2f:29:d8:c4:e4:
                    b5:62:a9:c2:d5:63:bf:32:69:aa:2e:64:6c:88:ea:
                    e2:0a:02:72:14:c3:44:52:80:bf:df:bf:d4:8f:45:
                    0a:7d:ff:a9:3c:0f:32:e5:22:51:14:5a:23:74:b0:
                    51:62:6d:59:40:2a:ca:4e:b7:03:46:2f:0b:ff:3d:
                    21:fa:a7:eb:54:fd:6a:16:22:7b:3a:34:a5:11:f6:
                    61:cb:b6:f5:27:29:84:24:12:5e:ba:e7:13:38:d0:
                    8e:5f:63:1b:a9:72:83:6f:f3:d9:6c:3c:44:e2:c9:
                    69:5c:d3:e2:d4:d1:c1:6c:6c:2c:7d:66:fe:ab:69:
                    c7:52:24:9a:d0:7f:0e:ff:48:25:6f:aa:c0:01:20:
                    e2:69:22:e5:0c:09:a8:57:a9:47:26:b1:95:18:b9:
                    c0:dd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:39:C1:FA:52:0A:BE:C2:C8:2E:A0:A5:D4:2C:B5:9D:24:EE:3F:DF
            X509v3 Authority Key Identifier:
                keyid:09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/323830343a353739383a3a2f33322d3332203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5798::/32

    Signature Algorithm: sha256WithRSAEncryption
         37:96:f6:d6:7e:cb:d9:56:43:48:ea:2a:09:f9:a3:6e:ac:68:
         1d:02:7e:bd:23:ca:a7:f6:84:b7:f8:da:bf:f0:03:b9:1b:22:
         fc:49:57:41:4e:87:be:8f:8b:62:21:51:41:49:85:74:a2:8f:
         f0:72:a1:62:c4:31:b5:72:a3:78:2c:0f:35:9a:ea:6a:38:7a:
         1f:81:2d:2f:e9:72:5d:9f:5a:4e:6a:bc:46:df:9f:0a:4c:01:
         4d:a5:58:20:1a:f5:5f:db:62:2b:1b:55:79:a1:38:06:ed:81:
         34:53:97:42:1a:71:05:24:a5:bf:36:8e:80:6a:4b:7e:7a:c3:
         22:41:b7:aa:93:9a:1a:80:38:5a:55:7c:6c:0a:80:cf:5c:87:
         0a:be:b1:a8:4a:b0:13:59:1e:09:53:cb:df:d8:ea:58:66:9f:
         d7:98:66:7a:55:d8:4a:e8:82:39:ed:2c:c0:3c:c6:b7:f3:5e:
         7f:b3:0c:a5:3f:19:41:f5:b1:08:d2:3b:e1:50:e6:db:71:e0:
         6a:d6:cf:be:29:95:a4:5d:50:1e:3d:bf:59:f9:e8:bb:fe:c1:
         f1:1f:f3:ae:59:6f:16:a3:e9:52:a2:f4:52:7f:85:81:46:0a:
         49:0b:8c:9f:4d:d0:da:9e:8a:6c:d0:8c:57:f6:5e:a7:54:57:
         97:ce:cd:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org