Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a666666303a3a2f34342d3434203d3e20323637333339.roa
File:                     323830343a346266343a666666303a3a2f34342d3434203d3e20323637333339.roa (raw, json)
Hash identifier:          2BtRqz+PW3YplWic5/E9IhBJC8HsIwTHJS3DdBtKNHE=
Subject key identifier:   44:2E:F8:9A:0F:53:14:2C:5E:63:82:3E:9A:DB:4C:29:59:40:CB:F7
Certificate issuer:       /CN=A09087E55846274477AB0E4597FD754DB0509203
Certificate serial:       37F20D37E3F2F29C14B8DE760CE539065561449A
Authority key identifier: A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a666666303a3a2f34342d3434203d3e20323637333339.roa
Signing time:             Sun 09 Jul 2023 04:08:06 +0000
ROA not before:           Sun 09 Jul 2023 04:03:06 +0000
ROA not after:            Sun 07 Jul 2024 04:08:06 +0000
asID:                     267339
IP address blocks:        2804:4bf4:fff0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f2:0d:37:e3:f2:f2:9c:14:b8:de:76:0c:e5:39:06:55:61:44:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09087E55846274477AB0E4597FD754DB0509203
        Validity
            Not Before: Jul  9 04:03:06 2023 GMT
            Not After : Jul  7 04:08:06 2024 GMT
        Subject: CN=442EF89A0F53142C5E63823E9ADB4C295940CBF7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:18:6c:13:a5:eb:f7:ce:6d:b2:38:c6:de:d4:
                    87:28:73:55:29:b6:ff:93:a2:75:72:ad:af:6e:e6:
                    f9:83:f9:89:fb:96:af:ef:4e:ac:8c:d2:5e:41:0a:
                    bf:48:a2:c8:e7:b6:1b:14:ff:98:f0:b1:95:8a:fc:
                    dd:0e:9e:17:6e:9e:df:1a:95:d1:14:88:f6:b9:02:
                    9b:c3:c4:6d:73:1c:41:82:74:c0:da:31:a1:9c:4b:
                    9b:1a:eb:f1:a2:7f:a2:8a:43:3f:a6:cc:3c:08:d6:
                    fb:15:57:7c:5c:5a:c6:2e:95:28:ed:5e:3d:60:26:
                    89:eb:b6:4a:4f:ef:c0:44:03:11:0b:7a:21:9d:52:
                    73:c4:6f:0c:7e:55:00:45:f4:59:10:ed:3d:18:91:
                    58:09:97:aa:2f:fa:ef:bd:f0:9f:38:f8:5a:f2:73:
                    8e:30:77:98:cf:f3:28:98:65:7b:5c:2b:50:63:2c:
                    44:1b:5c:fd:a1:29:14:c7:f2:f9:04:06:0d:d6:2d:
                    55:14:35:7b:06:5e:fd:63:f4:3c:ab:84:26:a2:fe:
                    6b:a7:b7:c7:09:40:b9:7a:0d:03:2a:ed:41:23:5b:
                    ca:6b:b9:de:ed:bd:75:93:c9:fd:d8:11:59:7a:03:
                    01:be:04:b9:30:30:ca:cd:cd:a3:a9:22:af:81:8c:
                    b1:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                44:2E:F8:9A:0F:53:14:2C:5E:63:82:3E:9A:DB:4C:29:59:40:CB:F7
            X509v3 Authority Key Identifier:
                keyid:A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/A09087E55846274477AB0E4597FD754DB0509203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a666666303a3a2f34342d3434203d3e20323637333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bf4:fff0::/44

    Signature Algorithm: sha256WithRSAEncryption
         36:21:2e:1b:07:91:54:8e:d3:91:62:1b:b8:9f:c1:85:4d:8e:
         c5:e9:84:b4:dd:05:0b:39:df:6f:b2:69:0e:cf:52:a9:c3:bd:
         ca:76:7f:69:7b:50:1d:4e:cd:2e:d8:e0:21:9f:5d:de:42:76:
         32:66:f9:48:c1:df:41:50:89:4e:9f:f4:47:b8:11:dc:ef:ce:
         91:48:b0:2e:ee:e6:dc:64:9b:cc:1f:83:0f:de:0a:1a:41:db:
         4e:fe:a1:93:8f:ce:2d:49:2c:1c:2d:11:76:a6:3b:46:99:b6:
         f7:8d:e5:d0:93:02:00:a8:ba:85:91:80:0a:c4:7f:6a:9d:ee:
         4e:88:e5:16:91:6b:8c:00:1d:d7:eb:c7:04:67:41:09:36:39:
         bb:a8:dc:e9:62:46:63:39:6c:17:01:57:ed:ba:bd:69:a9:49:
         df:76:05:e9:20:8e:c0:b3:bf:44:62:80:63:4f:8f:20:0d:d4:
         b3:47:e3:53:91:f0:fc:59:43:b2:85:e9:34:9a:26:3d:d4:06:
         39:f4:23:d3:61:63:d6:4b:d7:5e:5b:2f:c9:9b:4d:08:3e:30:
         c7:9c:18:81:65:69:a8:92:18:67:b4:2e:a7:ab:18:9a:ed:73:
         e4:8a:e7:5d:f6:f4:08:57:e1:12:3d:cf:b8:ef:34:b3:6f:3c:
         6c:2d:17:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:32 2024 by rpki-client on console-ams.rpki-client.org