Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/323830343a336263383a3a2f33332d3438203d3e20323636313730.roa
File:                     323830343a336263383a3a2f33332d3438203d3e20323636313730.roa (raw, json)
Hash identifier:          VsuqFYjBJi4uKSf7ZWbvw8CGyN7tr5l3r2JA1CsMYzo=
Subject key identifier:   9A:34:BC:F0:D9:8B:FA:3F:40:FB:04:12:46:A0:92:EA:CF:21:43:91
Certificate issuer:       /CN=9D5AD2A27015B084D717893DE61B62934999BC26
Certificate serial:       17FA3283590E7E479B19BD31CADAB1F141EB184B
Authority key identifier: 9D:5A:D2:A2:70:15:B0:84:D7:17:89:3D:E6:1B:62:93:49:99:BC:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5AD2A27015B084D717893DE61B62934999BC26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/323830343a336263383a3a2f33332d3438203d3e20323636313730.roa
Signing time:             Thu 04 Apr 2024 10:42:07 +0000
ROA not before:           Thu 04 Apr 2024 10:37:07 +0000
ROA not after:            Thu 03 Apr 2025 10:42:07 +0000
asID:                     266170
IP address blocks:        2804:3bc8::/33 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:fa:32:83:59:0e:7e:47:9b:19:bd:31:ca:da:b1:f1:41:eb:18:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D5AD2A27015B084D717893DE61B62934999BC26
        Validity
            Not Before: Apr  4 10:37:07 2024 GMT
            Not After : Apr  3 10:42:07 2025 GMT
        Subject: CN=9A34BCF0D98BFA3F40FB041246A092EACF214391
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:d2:c3:44:02:bc:1a:96:61:c4:8c:2c:c9:7b:
                    dd:81:bb:03:ff:61:f1:1d:20:95:b5:42:18:fb:d8:
                    91:56:f9:e8:c7:d1:d8:34:e5:fe:b2:cc:61:b2:02:
                    cc:e3:69:99:2d:e4:84:35:b8:f5:b6:d7:21:fd:a0:
                    43:86:c1:5c:cf:34:8a:f1:9b:13:f6:0e:1d:14:33:
                    84:f2:97:90:a4:36:c6:dd:c9:77:35:3b:86:1f:1d:
                    09:b6:79:3f:af:b5:dd:6c:d1:66:52:af:ff:55:26:
                    e1:dd:3a:43:b5:89:21:d7:39:7d:12:b6:92:e5:e9:
                    c2:08:a6:c7:71:0b:df:3d:f2:d7:4d:1c:f1:c0:b6:
                    5c:d1:2a:4d:3f:c2:75:00:5d:8c:d6:f4:65:75:1a:
                    e5:81:47:18:6f:16:37:80:3d:77:b5:6d:a9:36:36:
                    f1:98:83:7f:9d:c3:89:c7:8b:8b:44:44:5f:20:d5:
                    52:62:94:64:20:9f:c9:a9:46:8c:69:3b:5a:16:73:
                    d9:31:f1:86:48:00:59:8b:18:0b:1e:32:42:cd:15:
                    12:15:65:04:48:ce:8b:c5:f8:0b:b8:a9:75:43:29:
                    ea:23:2c:65:d7:c2:ef:72:d4:2b:47:1d:10:50:70:
                    94:ff:cb:52:a1:12:24:f1:73:5b:90:b7:3a:b6:68:
                    64:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:34:BC:F0:D9:8B:FA:3F:40:FB:04:12:46:A0:92:EA:CF:21:43:91
            X509v3 Authority Key Identifier:
                keyid:9D:5A:D2:A2:70:15:B0:84:D7:17:89:3D:E6:1B:62:93:49:99:BC:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/9D5AD2A27015B084D717893DE61B62934999BC26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D5AD2A27015B084D717893DE61B62934999BC26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B9H9NDN1Dmy6jFY4UcCWbyoYawCwcruEBPUrrMUwQEkY/1/323830343a336263383a3a2f33332d3438203d3e20323636313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc8::/33

    Signature Algorithm: sha256WithRSAEncryption
         09:c2:8d:db:fc:17:e2:44:7f:97:75:26:5b:b3:11:08:2b:01:
         9a:78:a6:9b:02:bb:e2:2d:c8:c4:31:7c:e8:c5:67:4f:a1:db:
         d2:f2:db:cb:2a:25:fa:48:85:08:d4:78:23:52:47:2d:29:fe:
         16:d2:fc:62:98:86:8f:50:ba:14:22:ad:ed:3f:5b:50:4f:99:
         8f:36:54:34:05:6b:9c:d9:5b:f0:00:df:6e:a8:0f:ac:ad:41:
         80:65:a9:38:1a:bc:b8:27:75:5e:32:75:ff:08:f5:7c:67:99:
         de:fa:43:59:b0:50:b2:7b:47:f2:3f:b0:2c:c9:f5:7d:26:eb:
         06:85:f1:9d:80:b4:e2:8a:43:96:61:11:76:00:8b:fb:9b:74:
         31:51:69:af:a3:6f:99:e5:fd:8b:08:f3:73:1f:a8:5a:7e:22:
         34:10:90:c2:d3:6e:35:b3:6b:57:bb:d5:cf:cf:21:69:3b:b4:
         74:41:6b:a6:df:66:fa:04:5b:8d:e5:fa:10:13:c2:15:c2:14:
         64:12:cc:c4:fa:5e:24:33:d0:0f:56:8b:21:48:13:d6:9c:07:
         4d:8f:8c:b9:32:96:c9:78:7c:0a:e3:20:7c:35:46:82:e7:8c:
         74:30:ce:44:e4:bf:48:a8:a4:3c:07:32:8f:e5:0d:fb:a2:ad:
         a4:95:42:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:38 2024 by rpki-client on console-ams.rpki-client.org