Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/323830343a343364343a3a2f33322d3336203d3e20323637353933.roa
File:                     323830343a343364343a3a2f33322d3336203d3e20323637353933.roa (raw, json)
Hash identifier:          /8QiriHggIycb/ufXYX5nA67jsynEkgi855IbZZWZuo=
Subject key identifier:   2A:69:3E:5C:52:C3:78:8F:A1:2E:67:8A:08:9E:A4:15:25:98:12:26
Certificate issuer:       /CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
Certificate serial:       3A251CD80B462D1555FA25607649DCDC9E4CC029
Authority key identifier: 2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/323830343a343364343a3a2f33322d3336203d3e20323637353933.roa
Signing time:             Mon 20 Mar 2023 18:07:39 +0000
ROA not before:           Mon 20 Mar 2023 18:02:39 +0000
ROA not after:            Mon 18 Mar 2024 18:07:39 +0000
asID:                     267593
IP address blocks:        2804:43d4::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:25:1c:d8:0b:46:2d:15:55:fa:25:60:76:49:dc:dc:9e:4c:c0:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A65AC623D9D47A4820DB0612905F233C2AD6E46
        Validity
            Not Before: Mar 20 18:02:39 2023 GMT
            Not After : Mar 18 18:07:39 2024 GMT
        Subject: CN=2A693E5C52C3788FA12E678A089EA41525981226
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:b3:7f:e3:e7:70:a1:c4:4c:3d:f3:71:ec:ed:
                    e1:b9:fb:f9:6e:9b:2f:3a:19:f5:9b:f5:df:cd:4f:
                    43:01:62:f4:8e:a4:73:d8:1b:6e:58:2d:8a:f6:83:
                    44:49:b2:95:10:65:e7:7d:fe:30:ae:ab:d1:89:64:
                    58:ec:b9:81:98:5a:5d:a6:b6:e6:ae:9c:c8:78:23:
                    1a:55:03:1d:93:cc:9e:c9:d9:27:85:51:c3:2e:db:
                    a7:c9:2a:0e:bc:14:3e:ef:d1:e6:b8:3c:e2:d0:a9:
                    1d:cc:66:b5:cc:0b:16:26:2a:d5:47:ea:4b:ef:dd:
                    61:27:f5:d4:b3:d5:d5:0d:5a:83:6d:3a:33:cd:fe:
                    44:ec:c7:d3:10:f2:1b:ef:50:50:8b:80:a1:17:93:
                    09:09:3f:49:f3:db:3f:88:a3:d8:01:9c:5f:1c:01:
                    f9:bd:53:b4:49:9e:bd:dd:38:4c:d9:2a:ba:73:e0:
                    17:cc:8e:fa:40:43:c4:00:c4:c5:d3:19:c5:5b:3e:
                    5f:af:06:8b:53:99:05:ff:e1:02:bb:6f:1e:98:6d:
                    5a:28:11:60:5f:e3:9a:a9:81:c2:2e:0d:c1:96:74:
                    fd:d2:a0:2b:07:55:1d:d5:b2:92:6c:b4:65:2c:a3:
                    e6:86:2f:24:0b:aa:1e:60:8e:ed:fd:da:e0:6a:df:
                    ea:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2A:69:3E:5C:52:C3:78:8F:A1:2E:67:8A:08:9E:A4:15:25:98:12:26
            X509v3 Authority Key Identifier:
                keyid:2A:65:AC:62:3D:9D:47:A4:82:0D:B0:61:29:05:F2:33:C2:AD:6E:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A65AC623D9D47A4820DB0612905F233C2AD6E46.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9Gxh7q5vcAwahAQisrHGBDeLBEyAVexSuaDmCsN3R7dQ/0/323830343a343364343a3a2f33322d3336203d3e20323637353933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:43d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         0d:16:79:06:34:43:27:ac:dd:9f:a2:8c:42:f8:e4:fd:3a:50:
         27:ce:00:19:ee:23:4d:ad:c9:5a:19:83:27:7f:57:0a:9e:78:
         10:d7:e2:de:57:38:d3:30:f8:75:5b:4e:66:40:79:1c:bb:0a:
         e3:b1:bd:3d:67:b1:b1:a0:83:de:87:87:bf:7a:4f:b4:14:bd:
         4b:a8:94:00:cc:99:0f:a1:83:66:8a:55:a2:f2:3f:4f:de:45:
         d8:a0:f8:08:a6:52:0c:ed:b2:b3:b5:5d:f9:d8:11:f4:2d:3d:
         50:8e:39:f4:a7:b8:e9:10:38:2f:b1:97:24:46:be:a3:58:cb:
         1f:30:fc:55:cb:60:4a:c5:a9:9a:f3:c5:f5:46:c6:c7:8f:c4:
         09:6a:f2:d0:ea:db:5c:b1:7c:32:9b:9c:cf:2d:e1:ca:26:09:
         56:7a:c2:19:46:b9:08:96:fe:26:78:34:d7:c8:f0:4d:ad:87:
         9e:cd:16:a6:35:04:e5:18:e0:39:97:71:6a:c8:21:36:aa:09:
         5f:4c:5d:e5:1c:6a:77:24:6f:dc:48:11:3e:8b:f2:32:95:26:
         fc:96:56:1c:5f:05:af:6a:2e:74:93:ea:d7:6f:d3:85:9b:91:
         52:f7:8c:eb:8e:65:6f:d1:92:02:60:80:04:46:49:f5:70:51:
         c2:0c:41:c8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org