Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/323830343a343364343a3a2f33322d3332203d3e20323637353933.roa
File:                     323830343a343364343a3a2f33322d3332203d3e20323637353933.roa (raw, json)
Hash identifier:          r4MER43pgsmBheflhj3akiiUDAboIYedv3dOu9LRWjE=
Subject key identifier:   D2:E7:78:AE:E2:FB:D5:89:59:DB:48:64:74:28:79:E3:37:10:BA:E5
Certificate issuer:       /CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
Certificate serial:       6AC0CBFEC3505663DE191A781E20BD14E153B325
Authority key identifier: 2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/323830343a343364343a3a2f33322d3332203d3e20323637353933.roa
Signing time:             Mon 09 Jan 2023 17:13:25 +0000
ROA not before:           Mon 09 Jan 2023 17:08:25 +0000
ROA not after:            Mon 08 Jan 2024 17:13:25 +0000
asID:                     267593
IP address blocks:        2804:43d4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:c0:cb:fe:c3:50:56:63:de:19:1a:78:1e:20:bd:14:e1:53:b3:25
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
        Validity
            Not Before: Jan  9 17:08:25 2023 GMT
            Not After : Jan  8 17:13:25 2024 GMT
        Subject: CN=D2E778AEE2FBD58959DB4864742879E33710BAE5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:52:f4:e0:9b:ae:88:4e:8d:68:3e:cb:1a:64:
                    66:c2:31:e8:90:ed:58:83:0f:81:bc:e8:c5:9f:3a:
                    26:77:9d:85:f7:73:40:cc:be:af:f9:5a:79:d5:b6:
                    1d:71:13:db:6d:97:8c:54:1f:6c:aa:bd:f0:f5:79:
                    a0:45:95:75:ec:e3:08:9c:fb:20:80:7d:9d:73:82:
                    c9:7e:0c:63:3d:8b:24:75:e1:cb:60:aa:a2:fd:72:
                    ba:37:d5:fb:4b:43:11:62:df:74:07:83:1b:61:88:
                    30:b3:60:f6:63:75:a8:87:f4:d4:7e:0c:ee:e8:14:
                    94:84:10:36:62:08:3d:8a:05:2e:83:50:ab:9e:c0:
                    d8:25:a8:c5:1b:3a:21:82:7d:03:3f:d3:d6:20:37:
                    0b:a5:f0:d9:ce:fa:e2:d3:93:f3:89:02:95:f1:b0:
                    0c:86:ce:da:36:67:ec:00:6e:4b:56:09:09:86:42:
                    58:35:19:1c:c3:b4:fe:a4:cc:98:63:b2:b4:54:58:
                    2d:b6:03:0a:89:fe:76:5c:32:5f:09:c0:8d:92:9f:
                    8f:49:5f:3d:78:f3:b6:9d:41:c0:0c:25:57:8d:18:
                    16:4b:3a:52:9c:cc:6b:bf:96:ba:9d:e6:6a:79:3c:
                    58:6c:de:fa:0c:25:a5:dc:89:3b:0f:be:26:8b:20:
                    a0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:E7:78:AE:E2:FB:D5:89:59:DB:48:64:74:28:79:E3:37:10:BA:E5
            X509v3 Authority Key Identifier:
                keyid:2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/323830343a343364343a3a2f33322d3332203d3e20323637353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4b:7e:5d:33:6f:4a:d4:76:87:55:5f:0a:d9:1e:d4:ee:a1:56:
         89:d6:23:06:3e:54:e2:22:95:78:79:89:14:53:ca:d4:20:54:
         a3:c5:c2:e8:db:a5:3d:7a:2e:de:ee:e5:c4:7c:f2:5c:73:ce:
         54:d4:5c:58:cf:f2:88:94:a2:0c:22:cc:3a:47:f9:e5:54:0d:
         8e:e3:fc:24:0c:cb:d4:7e:1b:40:77:39:9f:f3:f5:14:f9:cc:
         b5:c1:7f:30:45:e9:07:e4:66:de:ad:7c:a6:da:d4:59:a4:07:
         0f:df:26:79:6c:3d:aa:bd:e4:3c:3e:3a:e6:0e:48:83:24:53:
         1d:5b:48:c9:3a:63:e9:7a:cf:96:64:dc:85:c8:69:f2:e1:9a:
         e7:9b:31:22:93:2b:f2:b2:b8:0f:fc:f5:f4:08:5e:5a:38:c8:
         f8:13:81:a6:96:b0:01:cb:30:83:cc:63:84:d4:22:98:a3:50:
         8c:d0:dc:b4:94:d0:93:79:dd:42:0b:69:af:79:a2:1b:d8:14:
         f2:37:d2:56:b2:11:61:b4:75:47:38:e6:5b:bc:f0:a9:2a:66:
         13:fb:86:6c:5a:7e:49:09:b8:9d:fc:5b:33:96:c9:58:cc:ce:
         b5:95:83:9e:ff:76:dc:67:ab:bd:a5:04:7c:1d:10:a2:aa:dc:
         47:b5:31:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org