Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/323830343a333939633a3a2f33322d3332203d3e20323636303339.roa
File:                     323830343a333939633a3a2f33322d3332203d3e20323636303339.roa (raw, json)
Hash identifier:          V/QcXRbKqTQ5pcrWhaRtRslaEFGFqYdTacnJJNQpQmI=
Subject key identifier:   AF:9C:8D:96:F6:9B:98:C0:2E:C9:31:4D:73:72:C3:33:A9:88:A3:EA
Certificate issuer:       /CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
Certificate serial:       64F4386F6E0D75F6E2D60C3E3C079278C79D5DB3
Authority key identifier: 10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/323830343a333939633a3a2f33322d3332203d3e20323636303339.roa
Signing time:             Mon 04 Jul 2022 14:25:58 +0000
ROA not before:           Mon 04 Jul 2022 14:20:58 +0000
ROA not after:            Mon 03 Jul 2023 14:25:58 +0000
asID:                     266039
IP address blocks:        2804:399c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:f4:38:6f:6e:0d:75:f6:e2:d6:0c:3e:3c:07:92:78:c7:9d:5d:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
        Validity
            Not Before: Jul  4 14:20:58 2022 GMT
            Not After : Jul  3 14:25:58 2023 GMT
        Subject: CN=AF9C8D96F69B98C02EC9314D7372C333A988A3EA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:79:27:40:9d:f7:1d:8a:93:13:b9:da:e7:
                    09:41:af:32:b6:36:30:a2:7a:c8:dd:cf:1d:97:cd:
                    30:c7:10:21:cf:22:ae:7c:98:be:c0:f6:45:53:03:
                    a8:4a:41:fa:47:13:21:27:c5:5e:74:c7:76:8f:57:
                    47:86:13:7b:43:62:b0:02:14:95:cd:0f:46:b8:97:
                    51:4e:51:c6:e1:c1:0e:c3:2e:86:e1:68:33:07:1a:
                    81:d4:6c:f1:d7:bf:5b:e1:6b:66:72:a7:51:bf:c7:
                    08:54:42:57:29:4a:5c:82:24:8c:34:07:96:3c:7c:
                    e0:3b:0b:58:a0:84:b0:82:5a:de:b4:51:58:c9:38:
                    79:85:a5:1f:b6:b6:8a:82:ab:da:ae:41:d6:e5:13:
                    91:30:78:74:b9:a6:00:54:b0:84:95:3d:ee:34:1e:
                    bf:0b:d8:f5:21:53:94:ca:c2:00:0c:78:d6:5e:ed:
                    b7:d5:a9:e7:1a:41:5e:0c:9d:2c:d2:87:80:cd:19:
                    12:3c:50:02:7e:cd:02:d7:17:22:ab:56:8d:da:88:
                    b5:18:ff:d5:66:d6:94:bd:39:9f:9a:c9:8d:ec:15:
                    18:a1:1b:31:9f:a5:5e:00:0d:05:30:f3:ca:75:f7:
                    fd:16:e4:3d:84:fc:19:f1:4b:e2:e7:01:79:77:07:
                    ac:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:9C:8D:96:F6:9B:98:C0:2E:C9:31:4D:73:72:C3:33:A9:88:A3:EA
            X509v3 Authority Key Identifier:
                keyid:10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/323830343a333939633a3a2f33322d3332203d3e20323636303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:399c::/32

    Signature Algorithm: sha256WithRSAEncryption
         0a:00:d0:94:af:3c:80:78:11:48:da:b2:d4:c0:38:a0:57:ac:
         a2:7f:92:9d:df:c5:a7:8e:44:fd:a9:bb:8b:17:c6:5d:dd:41:
         cf:18:45:63:95:67:1d:17:9b:8e:0a:5c:86:49:8c:4d:b0:6d:
         86:03:cf:ca:47:13:d7:24:db:e6:bc:06:ba:e0:90:4b:46:18:
         45:8f:fb:a1:31:5d:a9:52:3b:4a:21:6a:82:1c:1d:89:90:8f:
         0e:94:32:74:dc:56:13:b5:74:e0:ac:ec:6b:10:94:8b:e4:23:
         94:dc:06:17:6c:2d:a7:38:06:f0:32:c3:22:da:dc:83:56:b0:
         f2:63:af:ca:b2:3a:c2:bf:24:30:15:53:4f:22:ab:c5:1d:db:
         ff:94:33:09:4f:14:59:0b:c7:17:63:a9:67:66:d0:28:f7:c8:
         36:32:60:cb:31:ca:6f:46:19:d5:53:9c:e5:1b:21:f6:9c:b0:
         63:4c:77:b4:77:af:36:7c:2b:ff:09:75:f8:61:d0:44:5f:01:
         a7:b6:56:25:86:c6:c5:f5:d1:13:0a:ae:3c:74:72:05:2c:a8:
         81:de:51:92:dd:25:9c:06:e9:b3:9e:42:93:72:8e:9c:d1:94:
         f3:ba:f2:4d:5c:22:89:09:a4:34:00:19:16:16:bf:c0:5c:57:
         2c:a4:60:87
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org