Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/323830343a343364343a383030303a3a2f33332d3333203d3e20323637353933.roa
File:                     323830343a343364343a383030303a3a2f33332d3333203d3e20323637353933.roa (raw, json)
Hash identifier:          UqbLYj4Y6imEIzDbU/KSkPQwnkTaFlU62l6+RrHQC9c=
Subject key identifier:   70:7E:E2:12:9B:C1:2B:A5:33:8B:66:51:13:98:0E:B6:10:DB:31:19
Certificate issuer:       /CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
Certificate serial:       692AE29CE48BA88F2439597CCC2669799C59900A
Authority key identifier: 2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/323830343a343364343a383030303a3a2f33332d3333203d3e20323637353933.roa
Signing time:             Mon 09 Jan 2023 17:13:32 +0000
ROA not before:           Mon 09 Jan 2023 17:08:32 +0000
ROA not after:            Mon 08 Jan 2024 17:13:32 +0000
asID:                     267593
IP address blocks:        2804:43d4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:2a:e2:9c:e4:8b:a8:8f:24:39:59:7c:cc:26:69:79:9c:59:90:0a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
        Validity
            Not Before: Jan  9 17:08:32 2023 GMT
            Not After : Jan  8 17:13:32 2024 GMT
        Subject: CN=707EE2129BC12BA5338B665113980EB610DB3119
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fa:4f:67:11:5a:b0:41:7a:2b:fb:b6:c6:7d:e0:
                    e6:78:37:be:42:7e:51:2d:67:9a:b3:be:27:40:5f:
                    72:07:d6:37:6a:73:36:57:5e:ee:ed:98:70:a7:72:
                    90:36:88:a2:66:65:85:eb:f3:30:e0:1d:5b:af:4b:
                    e3:e6:3d:d7:f0:22:29:f0:07:08:c2:82:a2:cb:ea:
                    47:70:6c:eb:8c:9b:a9:51:1b:ea:e1:9d:04:3e:07:
                    12:89:8a:f3:9b:6b:bd:35:3b:82:b2:07:11:67:14:
                    84:f9:e7:1b:79:cc:31:02:56:29:6a:a9:2a:76:5e:
                    c3:75:e3:5c:f3:f4:cc:85:87:37:0c:f1:26:f9:e7:
                    35:4f:f0:69:2a:9a:b8:bb:8c:92:4b:1a:a6:6b:f6:
                    ab:41:9e:42:dd:5a:09:f3:af:ba:76:b6:af:84:87:
                    3e:94:5d:d9:f7:0a:e5:e3:e8:76:4f:29:b7:c8:73:
                    39:e8:12:9c:fe:33:44:12:ec:6a:34:b5:24:4d:ce:
                    d1:60:8f:dd:f2:9d:7f:f6:34:29:b0:e4:e4:64:70:
                    d6:2c:91:17:6c:b9:95:8a:f1:73:e1:4a:48:d2:e6:
                    8f:d4:82:ae:79:71:12:ef:a1:98:bc:0b:03:fd:be:
                    db:72:9a:ce:58:ac:af:b7:86:86:03:70:c7:47:a4:
                    3f:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:7E:E2:12:9B:C1:2B:A5:33:8B:66:51:13:98:0E:B6:10:DB:31:19
            X509v3 Authority Key Identifier:
                keyid:2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/323830343a343364343a383030303a3a2f33332d3333203d3e20323637353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43d4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         02:7f:ce:11:7a:e0:c4:f7:76:35:5e:cc:08:dd:c1:3d:34:c4:
         6d:47:97:7a:77:4f:1e:fc:da:f0:a7:03:94:06:47:61:3d:72:
         2e:5b:bf:cf:a1:bd:3b:a4:39:5d:a4:26:bd:02:cd:d2:18:f9:
         cd:9c:99:28:09:cc:8f:a8:d8:b1:8e:8a:63:a2:b8:7c:9e:c7:
         ac:48:b0:aa:66:6c:9c:91:1a:4a:65:69:11:1c:1b:93:d8:93:
         5d:d5:6a:bf:3a:5a:6f:9c:8b:8f:be:8a:3d:9b:78:1b:57:d0:
         50:11:7d:79:ec:0d:ca:77:f2:3c:35:02:d1:57:8f:18:a8:63:
         9e:f5:ae:4f:10:d5:e7:8d:d1:4f:4b:86:78:a1:dd:19:53:54:
         4e:da:54:e4:e2:75:17:07:3f:d1:a3:8a:39:00:8d:f3:11:1d:
         88:3a:8f:7d:6d:ff:c0:af:08:c2:95:9d:2e:ac:51:70:e6:e7:
         af:90:4f:34:8f:f0:e8:d0:35:2b:18:55:2d:84:70:a8:c0:20:
         94:8d:2b:8a:67:06:1f:64:e3:b1:ec:93:0e:a6:d1:6f:70:a9:
         ed:2d:89:33:2b:27:4b:9b:2f:7e:d4:c1:a4:bb:80:cd:8a:0b:
         b7:7d:e6:b2:4d:53:29:88:64:6b:ce:ba:9d:c3:34:17:58:80:
         d5:07:9b:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org