Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/323830343a3531633a3a2f33322d3332203d3e20323632343935.roa
File:                     323830343a3531633a3a2f33322d3332203d3e20323632343935.roa (raw, json)
Hash identifier:          kOsHtqWccKeFAe2eb4vwwar32ieGgCFyUBsiU/7MA9E=
Subject key identifier:   9C:56:9D:87:F0:9F:AA:28:E4:4D:1E:0F:7B:FD:2B:52:AF:1F:DA:BF
Certificate issuer:       /CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
Certificate serial:       6263A9C3644D933DB529D98C7EABDDE065538BB2
Authority key identifier: 2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/323830343a3531633a3a2f33322d3332203d3e20323632343935.roa
Signing time:             Mon 07 Nov 2022 18:25:01 +0000
ROA not before:           Mon 07 Nov 2022 18:20:01 +0000
ROA not after:            Mon 06 Nov 2023 18:25:01 +0000
asID:                     262495
IP address blocks:        2804:51c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:63:a9:c3:64:4d:93:3d:b5:29:d9:8c:7e:ab:dd:e0:65:53:8b:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A020A5FE3C599222BE72D3E9F37B50FE4D89331
        Validity
            Not Before: Nov  7 18:20:01 2022 GMT
            Not After : Nov  6 18:25:01 2023 GMT
        Subject: CN=9C569D87F09FAA28E44D1E0F7BFD2B52AF1FDABF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:8e:e4:b6:71:72:0a:7a:0c:2d:eb:ca:db:2d:
                    e8:27:c3:76:a2:bd:ca:70:f5:7f:eb:c7:6e:a4:77:
                    47:2e:06:cf:fe:80:e5:29:b9:60:fc:3d:ef:0b:1c:
                    f2:5c:e2:f2:93:12:d2:75:ab:44:32:b9:87:6c:2a:
                    ee:66:7a:5c:f2:6d:57:d4:54:16:22:72:6f:84:de:
                    e7:a1:88:53:a4:0a:a4:2b:1b:17:01:83:9f:86:2b:
                    a8:ce:08:2f:cc:37:e9:1e:24:ca:f4:5a:5f:23:4d:
                    1d:0a:3b:e6:91:3a:9e:49:e8:92:2a:f1:a4:30:3e:
                    de:e9:3d:06:00:07:6d:77:ee:77:e0:e0:6a:27:18:
                    ee:b0:72:65:0f:ed:79:79:56:32:6a:72:ec:a4:a1:
                    d3:13:30:2f:f3:d7:a8:d6:20:a2:93:a3:b9:d8:b1:
                    2b:d8:83:29:aa:5a:02:de:2a:fd:9e:50:a7:b7:12:
                    30:8c:ac:f8:6f:91:e3:3d:de:53:56:ac:e7:fb:4d:
                    1f:49:12:c9:e2:6c:41:71:a6:f2:a6:81:a8:e0:8a:
                    68:5b:fe:82:3f:6f:44:66:b7:45:0c:21:3f:32:a9:
                    ce:3c:a4:db:d2:1e:c6:f4:35:e1:2c:bb:42:d7:44:
                    f9:d1:29:86:2e:22:d3:9e:cc:5a:a4:9e:15:d5:a5:
                    08:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:56:9D:87:F0:9F:AA:28:E4:4D:1E:0F:7B:FD:2B:52:AF:1F:DA:BF
            X509v3 Authority Key Identifier:
                keyid:2A:02:0A:5F:E3:C5:99:22:2B:E7:2D:3E:9F:37:B5:0F:E4:D8:93:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A020A5FE3C599222BE72D3E9F37B50FE4D89331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9wF2w3pV447EBuv9QtmCPTy1AoM5enLSpDnT966aLfX6/0/323830343a3531633a3a2f33322d3332203d3e20323632343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:51c::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:14:29:dd:b9:6b:f4:1a:3c:e0:6d:5c:56:ae:eb:90:3a:46:
         e8:3e:8c:70:06:1d:15:32:1c:c0:15:92:a0:68:f8:1b:ad:df:
         79:75:2d:1d:36:f8:29:37:3b:9d:f1:09:a2:e9:a8:42:a5:20:
         0b:04:0f:cb:0e:9c:15:91:4a:bc:4d:36:b6:b7:ea:18:81:46:
         5e:00:4e:03:98:1c:ba:bb:24:e0:43:c3:da:77:9b:53:66:24:
         e6:dc:1e:6a:d6:dd:d8:ea:17:6d:4f:a0:2e:c2:2d:55:74:86:
         56:1f:12:2a:fa:22:cb:62:68:66:6c:b1:bf:63:64:bc:ab:ce:
         e8:9d:7c:9c:14:bc:79:fe:a1:a0:25:63:b1:95:43:05:fc:72:
         76:58:89:62:60:80:e6:b1:8d:e0:b4:1e:d6:20:53:4a:de:6b:
         75:ee:ca:df:bb:d2:5b:6a:d6:e1:7d:85:c5:8b:ad:bc:4e:f8:
         8a:21:b9:8a:29:6c:16:b5:77:48:da:b4:c8:38:da:1a:70:12:
         05:a9:4e:54:27:90:38:f2:af:1f:73:b0:07:4c:9e:b4:3b:e2:
         ba:be:21:ae:67:99:bd:88:3c:39:de:09:06:ad:61:64:1f:86:
         30:5a:b7:63:7e:92:79:dc:5c:35:a9:51:83:08:c7:0a:9a:6a:
         c3:6d:cc:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org