Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/323830343a326563303a3a2f33332d3333203d3e20323635333634.roa
File:                     323830343a326563303a3a2f33332d3333203d3e20323635333634.roa (raw, json)
Hash identifier:          23+x7Q6PGmExGugZ66uospOLD565e94XMJzpp1j8U+I=
Subject key identifier:   A9:E7:AA:3D:A0:C2:66:09:9A:8E:5A:A0:EE:B9:C0:1D:19:53:D7:2C
Certificate issuer:       /CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
Certificate serial:       24B259E8FBAFDFD4F41AD1361022A10E4239CAE8
Authority key identifier: 95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/323830343a326563303a3a2f33332d3333203d3e20323635333634.roa
Signing time:             Fri 28 Jul 2023 17:42:24 +0000
ROA not before:           Fri 28 Jul 2023 17:37:24 +0000
ROA not after:            Fri 26 Jul 2024 17:42:24 +0000
asID:                     265364
IP address blocks:        2804:2ec0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:b2:59:e8:fb:af:df:d4:f4:1a:d1:36:10:22:a1:0e:42:39:ca:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
        Validity
            Not Before: Jul 28 17:37:24 2023 GMT
            Not After : Jul 26 17:42:24 2024 GMT
        Subject: CN=A9E7AA3DA0C266099A8E5AA0EEB9C01D1953D72C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:9d:1c:4e:a1:8c:e7:c7:77:f5:dd:f4:13:92:
                    8e:03:b7:78:47:11:f6:30:b1:3a:53:1d:70:40:cc:
                    30:e2:b8:0c:22:a7:ed:72:91:06:ac:4a:5a:bf:04:
                    da:06:27:12:97:0d:b6:a6:45:cb:08:ab:6d:77:d8:
                    32:93:6e:ee:a6:f8:04:eb:b4:8d:7b:82:8c:81:68:
                    61:58:f1:d1:d6:3f:23:40:e8:9f:c7:cb:28:ed:92:
                    8d:7b:6b:2d:69:8f:55:0c:b7:d7:31:e6:7e:c1:6c:
                    00:d2:6f:81:95:a3:fc:dc:1e:ac:b6:1c:12:5a:82:
                    67:6a:68:6f:14:a6:93:9d:c6:59:e8:57:77:b3:a3:
                    36:40:61:03:bf:15:7e:e1:35:52:a6:74:34:de:5d:
                    12:6c:e7:31:89:7c:d7:25:84:06:a8:4e:43:e7:ab:
                    d2:5f:26:91:93:8e:6e:48:47:a9:40:4d:24:7f:a2:
                    f9:bb:4c:73:a8:86:3a:90:d6:6f:68:ba:b4:6d:55:
                    6e:a9:81:b4:33:a5:1e:65:2e:e1:eb:90:d5:70:9d:
                    aa:f1:89:c5:d8:92:d9:98:b7:31:91:61:9d:c8:eb:
                    6c:3f:1b:f8:57:39:a9:b8:ba:7c:6a:06:37:e8:25:
                    e5:ce:ee:c6:db:20:2c:35:8a:57:77:ec:3c:a6:bc:
                    38:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:E7:AA:3D:A0:C2:66:09:9A:8E:5A:A0:EE:B9:C0:1D:19:53:D7:2C
            X509v3 Authority Key Identifier:
                keyid:95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/323830343a326563303a3a2f33332d3333203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ec0::/33

    Signature Algorithm: sha256WithRSAEncryption
         97:f7:67:32:8a:f4:bd:a9:d3:09:88:7a:ea:10:f8:8a:48:aa:
         18:66:f9:69:68:70:d3:1a:e0:30:54:94:98:95:05:65:ef:90:
         86:47:42:17:f3:51:92:26:af:68:f4:2a:b6:8a:b3:40:6d:a3:
         33:f1:31:fa:c8:67:c5:7a:8c:c3:09:0f:99:fc:71:e2:6a:c7:
         da:dd:ca:ac:65:0d:cc:2a:49:8d:ed:66:48:84:3c:a8:36:a7:
         9c:59:80:5c:20:c6:c8:79:65:a8:60:07:dc:06:87:c5:9b:5e:
         7a:1d:b2:3e:c6:c9:20:be:d3:d8:4c:28:bd:27:3c:88:27:4b:
         12:98:c9:1f:a6:5e:78:a8:61:48:dc:c8:6a:b2:28:0a:79:0f:
         20:29:4e:6b:02:e4:ab:71:6b:95:d8:6c:db:02:94:14:cd:d2:
         6e:d5:50:47:55:33:2c:dd:40:36:3c:f1:62:a7:15:3f:1d:11:
         e9:9d:f7:95:9a:8e:70:20:fa:23:f5:d1:19:f4:9a:00:ac:cf:
         4b:07:3f:07:5b:b1:e3:94:26:79:50:0c:ae:2d:f9:5b:b6:69:
         50:d8:1f:d5:d3:5f:ba:33:7d:68:28:8c:e8:1b:2c:a4:a5:03:
         83:4e:2c:fa:45:68:44:b8:cf:27:26:6f:d9:94:4f:a1:e3:6f:
         27:77:c6:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org