Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/323830343a326139303a3a2f33332d3333203d3e20323634303739.roa
File:                     323830343a326139303a3a2f33332d3333203d3e20323634303739.roa (raw, json)
Hash identifier:          9dtEVmqLTkY6n7J3H7kSMAjWYh53r09a51IwCZYbAmE=
Subject key identifier:   A0:B3:8C:89:93:59:CE:C0:7A:A7:1B:15:95:7B:88:22:18:43:E2:23
Certificate issuer:       /CN=F9263FFE11163563498950CAD445C8B7EA02C4E9
Certificate serial:       329E26105856DF465DFA00AEF513C6E66D4DB334
Authority key identifier: F9:26:3F:FE:11:16:35:63:49:89:50:CA:D4:45:C8:B7:EA:02:C4:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/323830343a326139303a3a2f33332d3333203d3e20323634303739.roa
Signing time:             Fri 21 Jul 2023 15:03:24 +0000
ROA not before:           Fri 21 Jul 2023 14:58:24 +0000
ROA not after:            Fri 19 Jul 2024 15:03:24 +0000
asID:                     264079
IP address blocks:        2804:2a90::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:9e:26:10:58:56:df:46:5d:fa:00:ae:f5:13:c6:e6:6d:4d:b3:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9263FFE11163563498950CAD445C8B7EA02C4E9
        Validity
            Not Before: Jul 21 14:58:24 2023 GMT
            Not After : Jul 19 15:03:24 2024 GMT
        Subject: CN=A0B38C899359CEC07AA71B15957B88221843E223
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ed:b8:e8:22:5a:c4:dd:dc:27:89:72:6e:47:
                    cd:0e:21:db:4c:64:75:be:c0:26:c1:1d:1a:ab:d7:
                    12:01:49:23:0f:ac:77:28:14:f8:8d:85:c1:bd:59:
                    60:f6:a3:8d:83:55:ea:7e:df:37:11:eb:29:30:85:
                    77:87:01:ed:74:dc:30:26:95:21:01:a7:58:ed:41:
                    c6:0b:7a:5c:b8:df:a6:dc:cb:86:9f:bc:54:ef:53:
                    9b:de:7a:c7:46:24:31:b3:76:44:1f:d4:13:cc:3f:
                    f0:01:56:44:49:5f:9c:d9:e7:b1:be:38:65:df:1a:
                    25:09:66:70:3a:ad:09:cd:7f:f7:a6:5f:18:ea:a5:
                    61:a0:e5:14:ca:96:ac:e1:16:7a:20:23:07:b3:d4:
                    34:2a:81:66:f6:86:bf:74:9e:00:24:d5:60:eb:5d:
                    42:54:e9:73:af:da:e0:60:36:3f:35:6d:57:1a:cf:
                    79:90:4b:b6:3c:7e:1b:d3:b8:4a:27:6c:54:00:9b:
                    ea:5c:b7:3f:2a:ba:a2:63:54:56:1f:fd:07:28:b1:
                    b3:89:60:8e:6e:b0:c0:e9:41:7a:85:f0:85:81:1a:
                    6a:98:05:2a:1a:d1:23:3a:23:cb:2f:e7:25:b5:ed:
                    8d:b4:10:2f:3e:35:43:cb:77:85:d4:f0:5f:f8:36:
                    35:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:B3:8C:89:93:59:CE:C0:7A:A7:1B:15:95:7B:88:22:18:43:E2:23
            X509v3 Authority Key Identifier:
                keyid:F9:26:3F:FE:11:16:35:63:49:89:50:CA:D4:45:C8:B7:EA:02:C4:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F9263FFE11163563498950CAD445C8B7EA02C4E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AaQA9umfCcCsuCgR857YHrdrghTBMfngPbFpu5k7MLJb/0/323830343a326139303a3a2f33332d3333203d3e20323634303739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a90::/33

    Signature Algorithm: sha256WithRSAEncryption
         7d:6b:4f:77:a5:d5:8b:2c:08:dd:9d:8f:a0:66:21:d4:b4:d0:
         71:4c:75:94:ce:dc:47:66:d0:e7:84:a0:a3:8a:d2:78:71:a7:
         1c:b5:3c:6b:62:ac:f0:51:3f:5f:05:2c:0e:7f:9a:bc:89:89:
         f4:5e:a3:cb:4e:3d:28:b0:dd:d0:fa:f2:46:43:1f:22:e8:92:
         cb:6c:b0:cf:e5:06:8e:95:51:9c:ea:46:cc:e7:0c:91:91:03:
         0a:3b:d8:66:95:73:31:12:b9:94:35:a7:d0:a7:3f:34:79:de:
         d8:d0:a5:9f:13:1e:cd:5a:e4:7c:a9:b2:bb:96:72:1e:f6:61:
         7e:4b:86:3a:b0:1c:37:60:a4:7c:43:04:1c:03:68:12:9f:88:
         51:37:c1:9e:1b:12:e6:19:9f:44:c4:f5:7f:6b:7d:e4:94:7e:
         f3:9d:9a:fa:b7:35:42:fd:4a:27:a4:7a:43:cd:f2:81:68:b8:
         47:ed:2d:3a:f7:18:76:47:44:95:7a:1c:f7:6b:f0:d4:d2:7e:
         22:9f:b4:3c:79:30:9b:21:f9:a0:c4:fb:30:12:33:f8:dc:c0:
         af:e6:0d:4c:b4:71:d1:65:29:54:2b:33:b4:68:40:27:c3:fb:
         b6:02:03:c1:22:1a:12:64:21:9a:3a:f4:b2:95:80:d6:32:f3:
         32:2a:63:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org