Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/323830343a326139303a373830303a3a2f34302d3430203d3e20323634303739.roa
File:                     323830343a326139303a373830303a3a2f34302d3430203d3e20323634303739.roa (raw, json)
Hash identifier:          M1PnKhQpuoJvEP2DCfxe38k65aOAyOvLQMbVtM/BZfE=
Subject key identifier:   86:19:03:94:C8:49:A0:B2:F3:2B:C9:CA:63:97:9B:F1:AC:47:25:12
Certificate issuer:       /CN=F9263FFE11163563498950CAD445C8B7EA02C4E9
Certificate serial:       601D20AD76E2C25925E2C5ACAF3BC667F4020454
Authority key identifier: F9:26:3F:FE:11:16:35:63:49:89:50:CA:D4:45:C8:B7:EA:02:C4:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/323830343a326139303a373830303a3a2f34302d3430203d3e20323634303739.roa
Signing time:             Fri 21 Jul 2023 15:03:26 +0000
ROA not before:           Fri 21 Jul 2023 14:58:26 +0000
ROA not after:            Fri 19 Jul 2024 15:03:26 +0000
asID:                     264079
IP address blocks:        2804:2a90:7800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:1d:20:ad:76:e2:c2:59:25:e2:c5:ac:af:3b:c6:67:f4:02:04:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9263FFE11163563498950CAD445C8B7EA02C4E9
        Validity
            Not Before: Jul 21 14:58:26 2023 GMT
            Not After : Jul 19 15:03:26 2024 GMT
        Subject: CN=86190394C849A0B2F32BC9CA63979BF1AC472512
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:00:37:19:af:2b:5f:b2:09:00:f6:b2:bb:9f:
                    8f:b3:de:3b:d5:5c:56:73:9c:96:58:82:10:f8:41:
                    9a:4a:a6:f3:33:00:d2:72:3c:a2:60:2c:ef:f3:7c:
                    08:dd:5e:e0:e4:f3:38:89:20:1d:04:30:e5:94:2e:
                    cd:e7:16:5b:e1:ae:34:52:54:4c:18:4d:41:26:9e:
                    d9:80:d8:ba:55:90:48:8b:62:bf:10:59:60:a7:fd:
                    51:cf:45:1c:31:5e:35:d2:6a:94:2a:ce:f9:50:d9:
                    65:49:a0:3c:7f:df:66:5a:3a:99:8c:e8:30:46:04:
                    16:30:4e:46:71:e8:18:3f:6d:04:c9:14:bb:e4:fd:
                    8a:18:78:64:c5:15:52:d8:b7:16:0f:9e:e0:71:d5:
                    da:cf:72:19:4d:37:69:e9:16:41:24:e2:a3:4b:ec:
                    60:29:b7:12:21:4d:5f:51:1b:c4:26:16:ce:01:8a:
                    01:97:38:4a:2d:92:a7:6b:35:96:b9:b4:68:a7:25:
                    f1:bf:ff:bf:be:46:f4:5e:f6:bd:a3:64:74:b5:01:
                    09:85:c2:e1:ea:11:19:73:4c:1f:96:05:cf:10:11:
                    e7:95:b0:a6:21:ba:c3:22:d8:7a:91:12:fb:73:9e:
                    45:a2:aa:e6:f2:b1:40:b3:bb:00:0c:35:25:0f:da:
                    f6:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:19:03:94:C8:49:A0:B2:F3:2B:C9:CA:63:97:9B:F1:AC:47:25:12
            X509v3 Authority Key Identifier:
                keyid:F9:26:3F:FE:11:16:35:63:49:89:50:CA:D4:45:C8:B7:EA:02:C4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/323830343a326139303a373830303a3a2f34302d3430203d3e20323634303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a90:7800::/40

    Signature Algorithm: sha256WithRSAEncryption
         0e:38:37:fc:7b:6d:96:7d:a8:7f:81:a8:0c:7b:e3:04:23:a6:
         fd:ca:60:42:8a:f8:bd:c1:83:ac:ee:e7:1f:2f:26:e4:ab:7e:
         e5:5d:79:e3:2b:4f:fe:e5:83:04:c3:99:d6:d0:1d:8e:04:0e:
         d3:cb:2e:4f:cc:d6:93:6c:77:40:e0:ec:bd:32:bb:ff:11:9d:
         7a:b7:4a:84:25:b9:37:7c:64:2a:19:e8:86:b0:a8:47:22:10:
         f9:c3:e8:e9:5a:a5:fe:ae:0c:b6:44:ae:3e:06:06:d6:2a:ef:
         95:4d:03:bc:3c:8b:7d:56:72:1d:3d:c9:37:58:db:8d:3e:bc:
         5b:64:22:30:c3:7d:7e:f6:72:04:8b:cf:69:4e:62:e3:ae:7d:
         4f:29:d2:52:c7:3f:87:3d:a9:44:b6:62:37:f4:c5:5d:39:f4:
         98:21:a9:66:b8:73:71:3f:49:76:2b:13:63:53:2a:3e:98:22:
         f6:ff:7f:71:e7:41:e8:ab:61:a3:5a:4d:0c:3e:8c:75:d0:23:
         79:93:82:27:ed:75:60:12:62:7b:41:be:a1:4c:e0:14:b5:a7:
         8a:ab:19:08:40:56:8c:45:b1:0c:fe:7c:ed:99:fb:83:b6:a6:
         08:a0:03:ea:06:0f:8c:27:0c:d5:b2:77:d4:50:b5:ca:92:87:
         bf:0c:60:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org