Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/323830343a326139303a383030303a3a2f33332d3333203d3e20323634303739.roa
File:                     323830343a326139303a383030303a3a2f33332d3333203d3e20323634303739.roa (raw, json)
Hash identifier:          eTkOmIEwkjf9GwZ40Hzs+8KujkR35tMOoPgIWEKB0fs=
Subject key identifier:   4C:57:FB:36:42:AE:75:4C:97:A7:2B:29:0D:B8:D2:24:26:D6:05:03
Certificate issuer:       /CN=F9263FFE11163563498950CAD445C8B7EA02C4E9
Certificate serial:       766323043513BF63471E89B7D259DFC728430F00
Authority key identifier: F9:26:3F:FE:11:16:35:63:49:89:50:CA:D4:45:C8:B7:EA:02:C4:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/323830343a326139303a383030303a3a2f33332d3333203d3e20323634303739.roa
Signing time:             Fri 21 Jul 2023 15:03:29 +0000
ROA not before:           Fri 21 Jul 2023 14:58:29 +0000
ROA not after:            Fri 19 Jul 2024 15:03:29 +0000
asID:                     264079
IP address blocks:        2804:2a90:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:63:23:04:35:13:bf:63:47:1e:89:b7:d2:59:df:c7:28:43:0f:00
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9263FFE11163563498950CAD445C8B7EA02C4E9
        Validity
            Not Before: Jul 21 14:58:29 2023 GMT
            Not After : Jul 19 15:03:29 2024 GMT
        Subject: CN=4C57FB3642AE754C97A72B290DB8D22426D60503
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:c6:8c:1f:1e:0a:c1:08:8a:ac:e0:51:0c:24:
                    db:76:cb:ab:9d:70:03:51:07:1f:3c:8f:24:7a:a4:
                    6a:5c:31:c9:d3:f0:18:8d:a0:26:ab:a9:a5:9e:24:
                    6d:1d:bb:00:62:7c:36:29:87:b7:ce:e8:93:e0:89:
                    79:9b:2d:37:19:8c:2b:3f:ed:a8:6f:15:14:a2:54:
                    8c:91:e3:2c:a3:2c:e3:70:da:c7:1f:c4:2b:d3:f2:
                    0d:02:6f:7b:e4:1c:9c:39:59:60:84:c2:dc:78:66:
                    bc:f5:6c:27:0c:53:e6:ef:dd:65:ab:e2:39:d6:13:
                    42:87:f1:08:2d:e2:2b:90:fe:37:ba:dc:3c:9d:c8:
                    81:1e:f3:4c:25:cd:ef:88:18:36:99:d3:84:ed:24:
                    55:c9:a9:67:fc:7b:65:33:5d:a0:39:b6:5c:a7:13:
                    ca:3a:aa:03:31:1b:95:20:95:d1:bc:4d:c7:b2:54:
                    8f:9e:ff:4f:da:87:4c:33:95:02:13:8c:46:5e:72:
                    65:bd:1a:52:65:00:18:4d:6e:9c:e6:66:6c:b9:86:
                    9e:f4:16:0c:74:77:a8:d8:4f:36:f8:16:9d:e3:35:
                    41:65:da:3c:8a:57:db:c0:29:85:14:8c:26:03:d2:
                    7b:eb:d0:e9:bf:ae:14:4e:9b:8b:23:3a:a3:87:0f:
                    61:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:57:FB:36:42:AE:75:4C:97:A7:2B:29:0D:B8:D2:24:26:D6:05:03
            X509v3 Authority Key Identifier:
                keyid:F9:26:3F:FE:11:16:35:63:49:89:50:CA:D4:45:C8:B7:EA:02:C4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/323830343a326139303a383030303a3a2f33332d3333203d3e20323634303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a90:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         3f:82:18:37:55:57:d9:09:c3:ae:68:01:01:ff:05:93:48:88:
         31:88:d6:8c:80:b0:6a:ad:17:2f:9f:9c:5c:2a:90:62:b9:eb:
         17:9c:23:96:e0:85:a8:bd:b3:cf:14:f1:26:c4:0e:0a:7c:7a:
         af:6c:d2:25:b8:67:b2:37:b2:22:34:c3:71:a6:76:7f:45:d1:
         eb:63:26:7d:26:2c:45:65:a5:ad:69:cf:83:b9:03:9d:6f:ea:
         07:72:b6:c5:2a:b0:0d:08:60:99:4c:6c:00:8b:ca:de:f8:9b:
         1d:32:95:f9:20:9e:f4:97:7f:96:d6:04:57:78:40:8a:c1:ad:
         3b:09:2a:9c:b8:e2:f5:fa:a0:ff:82:fb:42:69:c9:bb:3c:ad:
         8f:56:81:8e:c3:3d:ca:69:fe:4c:f0:ef:9a:24:b2:b1:c2:b4:
         bb:93:6c:c4:b4:9d:23:18:af:d3:68:e8:fa:87:2f:f4:28:61:
         a3:79:6b:ab:b1:0e:40:de:88:a8:dc:08:c3:72:eb:f7:4a:b3:
         e4:17:fc:cb:22:05:89:43:31:67:01:06:52:8e:84:72:3b:4a:
         a8:a9:ed:c2:42:11:6f:29:84:a1:a9:fd:28:3f:fb:04:41:23:
         d2:ca:df:b3:0c:b4:d6:0d:b7:bf:b1:86:cb:5c:3d:f2:d7:1f:
         83:bf:fc:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org