Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3a2f33322d3432203d3e20323635343732.roa
File:                     323830343a333461633a3a2f33322d3432203d3e20323635343732.roa (raw, json)
Hash identifier:          3yh4b7a99awofAwmNr/qT47E4kO54+lRB6b8l9Y7HlM=
Subject key identifier:   3B:89:9D:39:88:11:26:BA:55:82:51:1C:4C:3E:6C:A2:92:F7:FD:E6
Certificate issuer:       /CN=B09F555E338DACE2F046F7B3C94528216109B8C5
Certificate serial:       5D0687F7AA4AF2E040EF655D81273C3715BBE9C1
Authority key identifier: B0:9F:55:5E:33:8D:AC:E2:F0:46:F7:B3:C9:45:28:21:61:09:B8:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B09F555E338DACE2F046F7B3C94528216109B8C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3a2f33322d3432203d3e20323635343732.roa
Signing time:             Mon 17 Oct 2022 20:01:51 +0000
ROA not before:           Mon 17 Oct 2022 19:56:51 +0000
ROA not after:            Mon 16 Oct 2023 20:01:51 +0000
asID:                     265472
IP address blocks:        2804:34ac::/32 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:06:87:f7:aa:4a:f2:e0:40:ef:65:5d:81:27:3c:37:15:bb:e9:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09F555E338DACE2F046F7B3C94528216109B8C5
        Validity
            Not Before: Oct 17 19:56:51 2022 GMT
            Not After : Oct 16 20:01:51 2023 GMT
        Subject: CN=3B899D39881126BA5582511C4C3E6CA292F7FDE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:8f:6d:41:97:b5:cb:a2:95:02:ac:12:9f:32:
                    34:e2:db:7a:8a:47:81:0e:98:72:c3:c3:e8:a8:68:
                    13:aa:61:c9:42:61:8e:b3:32:4c:85:ab:d3:47:24:
                    ca:e0:29:1f:12:49:4d:f6:17:06:14:fb:53:72:94:
                    f0:5c:0a:81:8b:f0:ea:65:79:7d:68:1b:66:ca:e7:
                    20:ba:db:75:85:db:63:0b:9f:ff:53:f8:3f:6b:49:
                    9a:8b:fd:05:29:34:96:24:60:5b:4e:17:78:a3:e5:
                    37:ef:9a:79:70:14:f4:be:96:63:b3:7f:0a:b5:bb:
                    ef:9b:58:40:9a:a6:6d:16:ff:11:e9:42:c3:77:0d:
                    9d:be:75:50:9c:71:fc:e8:ce:73:06:4f:1d:13:83:
                    c1:ea:1c:3c:96:66:7b:88:1c:b5:e1:48:b3:8a:20:
                    96:80:d3:8a:3d:57:08:fb:f2:3e:7e:53:76:b4:62:
                    56:69:a3:d9:93:dd:fa:a9:f0:02:2d:79:f8:78:a9:
                    86:ba:f6:70:53:f9:b3:ee:53:3e:e2:00:bd:a5:a6:
                    4d:de:6d:bf:73:c5:76:4d:19:39:3a:ea:c0:68:3d:
                    1c:e8:88:b9:e3:4f:4b:f8:b8:08:d4:7f:ae:8a:d6:
                    6d:3f:34:8b:61:92:07:ce:b4:83:83:b9:57:70:4b:
                    93:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:89:9D:39:88:11:26:BA:55:82:51:1C:4C:3E:6C:A2:92:F7:FD:E6
            X509v3 Authority Key Identifier:
                keyid:B0:9F:55:5E:33:8D:AC:E2:F0:46:F7:B3:C9:45:28:21:61:09:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/B09F555E338DACE2F046F7B3C94528216109B8C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B09F555E338DACE2F046F7B3C94528216109B8C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3a2f33322d3432203d3e20323635343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:63:12:a1:e5:05:1f:16:b8:f2:1e:1f:32:85:bf:34:de:cc:
         c4:bb:81:3c:10:52:e1:84:a1:95:f6:13:0a:b5:dd:50:44:97:
         6c:c2:bf:39:61:c5:86:1e:20:45:a5:32:dc:33:da:91:f8:61:
         21:5e:80:ed:44:a3:11:32:b7:62:b0:20:07:fa:53:5c:67:0b:
         35:9c:a9:cb:52:ff:37:ea:98:27:3a:80:a1:7a:a6:29:e4:4f:
         34:12:c9:9f:c6:f3:3d:91:be:42:e6:44:2e:55:2e:94:89:63:
         90:c5:77:2c:38:ae:f8:a6:de:b5:ee:61:9f:d9:8c:94:c9:7c:
         1b:05:7a:a6:b2:7c:b4:64:37:fe:df:d0:a5:15:46:e3:51:c0:
         24:d6:ac:c9:34:70:4c:9b:54:db:63:5d:87:56:7b:60:72:31:
         cb:4c:c7:ee:de:31:50:26:cc:a4:c4:2a:37:3e:16:3c:73:ea:
         c2:ae:57:6a:79:da:dc:75:73:fc:02:bb:2d:06:84:ce:de:00:
         2d:c2:71:2d:d9:14:66:48:e4:1a:eb:99:63:30:9b:93:f8:7f:
         be:e5:c4:2e:76:20:6a:07:6e:1d:f6:cd:1d:4a:d3:6b:68:ef:
         26:3f:8a:7c:e1:23:18:0a:fe:93:f6:5a:c8:ee:e4:cf:16:ae:
         76:bd:21:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org