Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/323830343a336263383a383030303a3a2f33332d3333203d3e20323636313730.roa
File:                     323830343a336263383a383030303a3a2f33332d3333203d3e20323636313730.roa (raw, json)
Hash identifier:          fCeIThMbEStSBeumtwTBTizo288PHT6xsg/LYFTOzJE=
Subject key identifier:   CB:88:C8:4C:BD:2F:7F:62:1C:1F:3F:8F:10:CA:CB:9D:86:57:9C:40
Certificate issuer:       /CN=9D5AD2A27015B084D717893DE61B62934999BC26
Certificate serial:       4E2649A2340E1E099F87869D6C736BA4411A89D2
Authority key identifier: 9D:5A:D2:A2:70:15:B0:84:D7:17:89:3D:E6:1B:62:93:49:99:BC:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5AD2A27015B084D717893DE61B62934999BC26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/323830343a336263383a383030303a3a2f33332d3333203d3e20323636313730.roa
Signing time:             Thu 04 Apr 2024 10:42:06 +0000
ROA not before:           Thu 04 Apr 2024 10:37:06 +0000
ROA not after:            Thu 03 Apr 2025 10:42:06 +0000
asID:                     266170
IP address blocks:        2804:3bc8:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:26:49:a2:34:0e:1e:09:9f:87:86:9d:6c:73:6b:a4:41:1a:89:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D5AD2A27015B084D717893DE61B62934999BC26
        Validity
            Not Before: Apr  4 10:37:06 2024 GMT
            Not After : Apr  3 10:42:06 2025 GMT
        Subject: CN=CB88C84CBD2F7F621C1F3F8F10CACB9D86579C40
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2f:32:82:f1:00:62:3a:80:97:fa:cb:07:4b:
                    ab:41:07:bc:cb:7a:5b:bf:13:a8:9f:2b:ab:28:af:
                    5b:9c:8b:34:bc:42:9a:ab:51:0c:41:a6:f2:f4:8f:
                    5e:cb:f0:d7:f2:47:6f:8c:ca:b2:8c:11:c7:6e:bd:
                    ef:d5:f9:b7:ee:4e:8e:dc:33:79:30:3d:9c:ed:45:
                    61:cf:f6:46:14:38:51:76:b7:cd:ad:25:10:4a:ff:
                    29:69:b0:bb:a1:57:9f:38:f3:0b:b4:81:4b:c9:38:
                    46:73:0b:10:26:ec:be:fe:9e:c4:4c:f6:a4:f6:e8:
                    b3:14:98:d7:47:31:00:89:b3:01:69:4d:c8:f8:bc:
                    a8:5b:32:ea:0b:13:f3:e2:c1:34:ab:33:28:30:d1:
                    4b:7c:9e:29:a8:86:2d:b8:f9:f7:8c:30:7f:51:3d:
                    3f:5e:a2:08:67:83:50:ca:38:bb:25:8a:5a:0d:7b:
                    5c:fb:97:80:af:5d:c4:8a:33:85:2b:3d:53:ea:ed:
                    c6:88:5d:7d:d9:de:d2:4b:2e:e9:af:28:9b:ec:a6:
                    fa:d2:ff:b6:81:dd:e8:99:13:55:fe:ca:bb:d9:11:
                    02:3d:47:bd:c5:d4:a3:ce:32:e3:0e:9f:2a:c1:9f:
                    b8:8b:64:ea:90:06:3d:ed:b7:68:76:12:22:a1:b2:
                    b2:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:88:C8:4C:BD:2F:7F:62:1C:1F:3F:8F:10:CA:CB:9D:86:57:9C:40
            X509v3 Authority Key Identifier:
                keyid:9D:5A:D2:A2:70:15:B0:84:D7:17:89:3D:E6:1B:62:93:49:99:BC:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/9D5AD2A27015B084D717893DE61B62934999BC26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5AD2A27015B084D717893DE61B62934999BC26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/323830343a336263383a383030303a3a2f33332d3333203d3e20323636313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc8:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a7:09:54:cd:f3:3b:37:06:73:18:1b:57:89:82:c7:09:98:3e:
         c5:64:67:52:b3:7d:62:48:44:ff:1f:d3:bc:61:f0:1f:c1:d9:
         db:3e:aa:21:9b:a7:19:67:ad:b3:2b:92:b5:90:43:05:e6:84:
         22:f5:84:b4:91:bb:8c:6b:88:a3:a1:75:cf:1e:1e:4a:2d:c8:
         74:5d:42:6e:dc:36:93:8f:17:e2:41:a2:9d:81:33:4b:f5:12:
         79:da:95:3a:75:b7:12:2d:25:20:eb:e8:4e:c6:ea:de:c3:63:
         34:9a:4f:8d:fe:7e:87:d4:62:07:52:e6:b9:1e:a5:3b:55:c4:
         a4:01:a8:3a:84:df:c4:5d:95:94:3c:08:a2:75:23:c4:79:88:
         db:5a:db:5c:63:cc:fc:1e:78:3b:3f:fb:94:e6:7e:9f:7e:2e:
         94:28:ec:53:0a:c2:65:37:ac:67:19:89:24:fb:6a:6e:ab:11:
         37:14:8f:a6:5d:38:44:ef:0d:1e:4f:71:3c:09:f5:f9:97:f9:
         04:2e:30:4a:95:8e:62:0c:6d:04:61:f7:fe:23:ed:e2:7e:37:
         c4:30:0d:13:93:c3:5a:98:cd:26:98:0b:2d:db:ea:49:af:86:
         9f:40:44:86:ee:99:8f:dc:e2:5b:00:1d:ed:16:a7:84:7d:18:
         46:48:66:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org