Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a3a2f33322d3438203d3e20323634303436.roa
File:                     323830343a323966303a3a2f33322d3438203d3e20323634303436.roa (raw, json)
Hash identifier:          tRRdtt+ma0RKaqRxEVHBCoE9KrmxON0lyqI6GzNxnK4=
Subject key identifier:   FD:0A:FD:9E:25:0A:29:2C:0D:8F:17:BC:AF:A6:17:CC:23:3D:8E:D5
Certificate issuer:       /CN=BF0969A87A651DD5C1C8760D84A68C61AF655BC9
Certificate serial:       26A9E7A973DED5BA9968715D74B3402E1BF9730F
Authority key identifier: BF:09:69:A8:7A:65:1D:D5:C1:C8:76:0D:84:A6:8C:61:AF:65:5B:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF0969A87A651DD5C1C8760D84A68C61AF655BC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a3a2f33322d3438203d3e20323634303436.roa
Signing time:             Mon 02 Oct 2023 14:03:11 +0000
ROA not before:           Mon 02 Oct 2023 13:58:11 +0000
ROA not after:            Mon 30 Sep 2024 14:03:11 +0000
asID:                     264046
IP address blocks:        2804:29f0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:a9:e7:a9:73:de:d5:ba:99:68:71:5d:74:b3:40:2e:1b:f9:73:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF0969A87A651DD5C1C8760D84A68C61AF655BC9
        Validity
            Not Before: Oct  2 13:58:11 2023 GMT
            Not After : Sep 30 14:03:11 2024 GMT
        Subject: CN=FD0AFD9E250A292C0D8F17BCAFA617CC233D8ED5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:70:b6:0b:52:42:c9:15:b5:a6:cd:b7:09:6d:
                    19:6a:62:3c:26:21:27:2a:06:72:b5:ef:59:88:bd:
                    6b:79:7d:b0:a8:0a:30:8b:78:d8:f9:3e:de:41:22:
                    46:62:77:0b:72:1a:72:5f:2a:bb:ec:ea:3f:e5:d0:
                    d8:a2:74:86:03:93:14:c6:0a:c9:b1:82:7f:4a:ea:
                    ad:36:50:84:18:58:95:c2:ea:f1:88:21:ab:62:ba:
                    b5:a2:73:96:1c:1d:65:90:e1:9c:f2:a4:ec:bd:33:
                    81:60:f9:01:56:ae:6b:49:38:59:66:d0:1e:3e:de:
                    a7:d7:5b:ea:cc:b7:03:e6:70:a1:6d:1c:98:60:a8:
                    e8:fc:26:3d:83:c5:5f:75:69:47:b8:35:48:98:74:
                    10:3c:c3:6c:11:81:8c:d1:e0:4b:1c:93:0f:a9:5c:
                    38:d2:e3:73:98:0c:3f:24:35:01:a0:fa:b9:f9:f1:
                    70:28:f9:c7:18:2f:ab:9e:7a:c3:34:22:aa:5b:fa:
                    9e:c7:66:8b:13:cb:5e:b7:4d:e7:e9:07:38:d3:40:
                    6c:64:c7:58:63:b5:d5:76:4a:d5:a1:e7:dd:83:0e:
                    8b:1c:7d:ff:29:96:49:18:be:6c:0d:f8:8e:23:e1:
                    7d:9b:c6:65:cb:8d:e3:0c:a8:e6:79:4f:0b:ed:d7:
                    d0:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:0A:FD:9E:25:0A:29:2C:0D:8F:17:BC:AF:A6:17:CC:23:3D:8E:D5
            X509v3 Authority Key Identifier:
                keyid:BF:09:69:A8:7A:65:1D:D5:C1:C8:76:0D:84:A6:8C:61:AF:65:5B:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/BF0969A87A651DD5C1C8760D84A68C61AF655BC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF0969A87A651DD5C1C8760D84A68C61AF655BC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9J6vAtGvT5tLyhN9tHpttYF7iiQw9rLQiCYZevfwzp8b/0/323830343a323966303a3a2f33322d3438203d3e20323634303436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:29f0::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:7a:92:51:f1:3d:b5:49:a1:7c:a5:8e:ac:94:72:69:1b:7b:
         05:b1:a4:e6:3b:1c:e2:5f:a7:7c:6f:53:cf:79:78:d7:db:cc:
         12:ed:07:0f:f9:10:95:69:0d:a6:dd:f7:56:fc:1a:e0:b4:f7:
         f6:9e:ef:13:99:8b:1a:c9:fc:ac:53:53:31:a4:a3:74:43:d7:
         27:ef:aa:e1:16:e8:f3:f7:e8:28:1a:a2:9e:dd:48:b7:b8:08:
         24:d5:37:2a:64:92:bf:74:75:56:4b:4e:16:05:09:ea:1c:64:
         0e:34:17:f1:e8:bf:a9:75:20:83:55:5f:61:18:b9:51:62:d2:
         b3:ef:12:05:8d:b4:45:e3:0e:94:b3:fe:bd:8a:5a:23:ed:b9:
         8c:9a:a3:d3:bf:67:86:f2:f9:58:4d:98:ee:ce:a0:11:c6:2e:
         ec:6f:a4:5b:6c:bd:e7:a6:4c:3b:59:cb:3f:ac:f2:75:c3:df:
         38:05:b4:1a:e1:cb:fe:55:1d:08:28:8f:b4:40:27:33:c2:a1:
         6c:1a:72:d5:48:33:7d:c0:80:94:95:5c:c7:f3:47:e4:5d:65:
         65:df:de:86:0f:9e:cf:71:68:e5:0d:88:7d:c8:88:2e:49:6b:
         0e:23:25:19:f2:d5:7f:31:91:52:0f:a8:cf:95:56:33:7c:45:
         67:17:9d:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org