Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a343030303a3a2f33342d3334203d3e20323636323437.roa
File:                     323830343a336430303a343030303a3a2f33342d3334203d3e20323636323437.roa (raw, json)
Hash identifier:          QI8zHWXApnQ3XFx9wNPh+QWi2VqmYHsletPRX8Vuwxs=
Subject key identifier:   1E:FB:09:9A:A6:CA:B7:8A:6E:B9:9F:5A:15:D5:F0:87:F1:82:05:47
Certificate issuer:       /CN=0FF897150A721E543538D1FB1C6A7C5017A68480
Certificate serial:       1F3590E0B7499DFE62BECAC0376352ED26C53465
Authority key identifier: 0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a343030303a3a2f33342d3334203d3e20323636323437.roa
Signing time:             Sun 14 May 2023 17:10:44 +0000
ROA not before:           Sun 14 May 2023 17:05:44 +0000
ROA not after:            Sun 12 May 2024 17:10:44 +0000
asID:                     266247
IP address blocks:        2804:3d00:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:35:90:e0:b7:49:9d:fe:62:be:ca:c0:37:63:52:ed:26:c5:34:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0FF897150A721E543538D1FB1C6A7C5017A68480
        Validity
            Not Before: May 14 17:05:44 2023 GMT
            Not After : May 12 17:10:44 2024 GMT
        Subject: CN=1EFB099AA6CAB78A6EB99F5A15D5F087F1820547
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:0d:ea:29:32:9d:ec:c8:fb:33:e4:0f:79:74:
                    45:32:c2:83:00:4b:4c:e3:3f:30:05:c3:69:de:d6:
                    34:46:47:38:06:4c:fd:3b:d1:be:04:10:d6:d2:e8:
                    43:cb:20:fb:19:5b:86:7a:4b:4f:a4:f3:31:4f:e3:
                    f0:fb:74:c4:d8:4e:49:61:cb:59:33:b0:9f:f0:7d:
                    80:d4:d4:11:66:c8:13:94:2a:be:e6:9f:27:dc:a4:
                    24:c9:4f:7c:62:ae:be:3d:31:77:e0:a6:5c:3b:43:
                    15:dd:84:19:f9:e4:29:6e:31:8c:6a:39:41:c1:b4:
                    8c:ac:04:a8:be:1a:5a:11:ae:a5:a8:ae:87:08:ab:
                    e1:c5:2c:99:d4:76:a5:5f:6c:00:af:e3:85:00:bc:
                    cb:2b:81:44:74:8d:e2:4b:52:30:32:25:36:9d:22:
                    dd:d8:8e:78:2f:32:51:41:75:d7:df:73:d7:66:0a:
                    6b:40:32:9e:04:29:9e:b7:64:27:1d:64:31:68:37:
                    12:4a:33:ba:25:3e:e2:8b:77:db:03:f6:26:ca:c8:
                    2c:2f:b9:0c:27:8b:a1:23:b7:bf:51:ab:46:4f:0e:
                    49:d8:7e:03:8d:6e:2e:7d:43:21:fa:91:e5:45:96:
                    51:88:30:b8:3e:c9:0a:77:d8:94:99:e5:38:c3:b6:
                    56:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:FB:09:9A:A6:CA:B7:8A:6E:B9:9F:5A:15:D5:F0:87:F1:82:05:47
            X509v3 Authority Key Identifier:
                keyid:0F:F8:97:15:0A:72:1E:54:35:38:D1:FB:1C:6A:7C:50:17:A6:84:80

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/0FF897150A721E543538D1FB1C6A7C5017A68480.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0FF897150A721E543538D1FB1C6A7C5017A68480.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9VktAynynf4BbK4tpdgB6fRy2cBvS5mkSbcVhXckd7b/0/323830343a336430303a343030303a3a2f33342d3334203d3e20323636323437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d00:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         45:f9:65:d7:16:5e:7a:e1:22:88:95:a5:2b:f4:6d:ed:1a:a1:
         ec:f9:44:82:50:2e:b2:b0:00:5a:e7:8a:df:e1:20:ee:67:f9:
         39:7b:bb:7b:59:34:f1:ee:3e:c0:c5:42:10:03:b2:61:7e:cc:
         0f:56:49:3b:b9:e2:72:e5:cf:0d:98:a4:67:23:cd:4a:60:a0:
         26:ca:72:c2:de:10:8b:e4:80:05:78:62:b7:b6:9e:64:eb:44:
         3a:12:9a:57:7b:b9:0b:4f:0d:6e:85:a9:16:a5:a1:8d:7e:43:
         2b:da:9d:59:b2:e5:33:e4:db:e5:3d:32:6e:ec:1c:67:8f:f8:
         0b:4a:ec:83:11:38:6f:b2:3c:12:5c:f5:b7:16:79:54:ae:2b:
         ad:2b:3c:a8:d9:92:44:2e:6a:55:dd:18:9e:0a:cf:4b:47:6b:
         10:0c:6f:b8:0f:03:32:30:65:a6:82:3b:67:e1:79:79:74:b1:
         fb:c0:0b:b7:6f:e4:d4:79:14:75:29:09:88:db:13:ab:11:6c:
         a9:aa:38:f3:78:1c:cf:ac:8c:25:8a:ce:d5:f2:dd:94:8a:b7:
         c3:8d:44:4e:83:a2:5e:fb:fe:cf:03:29:ca:8b:97:a4:4e:c7:
         b7:d5:57:c5:4b:cc:e3:05:02:e0:31:cc:05:8b:4e:9a:2e:e0:
         e9:45:78:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org