Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a376663303a3a2f34322d3432203d3e20323634333933.roa
File:                     323830343a316463383a376663303a3a2f34322d3432203d3e20323634333933.roa (raw, json)
Hash identifier:          +c4JUeQ7adLX/7KQ3G0FAH15PpM/upObwyrKFW4KeRQ=
Subject key identifier:   76:C1:06:9A:2F:94:B0:D5:FE:52:D0:48:27:4D:CD:94:78:65:D0:5B
Certificate issuer:       /CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
Certificate serial:       201E38C70F95D62A46177E46BBC0AD33C28E71E0
Authority key identifier: 9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a376663303a3a2f34322d3432203d3e20323634333933.roa
Signing time:             Wed 04 Jan 2023 11:23:40 +0000
ROA not before:           Wed 04 Jan 2023 11:18:40 +0000
ROA not after:            Wed 03 Jan 2024 11:23:40 +0000
asID:                     264393
IP address blocks:        2804:1dc8:7fc0::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:1e:38:c7:0f:95:d6:2a:46:17:7e:46:bb:c0:ad:33:c2:8e:71:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
        Validity
            Not Before: Jan  4 11:18:40 2023 GMT
            Not After : Jan  3 11:23:40 2024 GMT
        Subject: CN=76C1069A2F94B0D5FE52D048274DCD947865D05B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:18:0d:3c:7b:d8:b4:2d:da:2b:de:a7:5a:71:
                    32:6c:c6:f1:aa:40:e7:df:b7:c3:f9:3b:46:81:74:
                    55:b7:df:58:87:69:98:59:81:b7:ba:24:30:04:c7:
                    ba:58:44:a3:5a:1c:ef:7d:6f:7c:11:bb:6f:7e:f1:
                    13:63:02:9c:9c:b1:19:b4:4f:52:d1:ac:64:2a:45:
                    b8:ed:27:52:4d:28:5f:0d:b9:ed:7b:58:84:64:eb:
                    64:79:4f:b8:20:4c:af:49:97:52:2d:e4:3f:89:02:
                    9c:f4:31:69:97:9d:b0:20:42:56:30:a5:5b:42:f4:
                    08:6c:f2:2c:6d:a8:05:4e:be:2b:fb:46:c6:dd:17:
                    13:a1:11:d0:b1:fa:ad:03:c5:ee:90:4e:90:85:78:
                    01:e9:ad:1c:3c:89:23:d3:34:66:f1:60:07:ac:d8:
                    14:fc:0a:c7:03:7e:fb:a0:a2:3f:f5:6e:e3:ae:f0:
                    a8:0d:52:30:fa:80:68:16:2d:53:7e:be:ea:8f:53:
                    b9:92:62:0a:95:52:95:9b:d0:c3:ca:cd:ce:8b:c6:
                    dc:39:b6:3a:10:0b:72:e8:26:bb:42:e3:d6:5d:30:
                    ae:97:4c:c2:53:ec:4c:25:89:fb:2d:91:13:ad:e1:
                    a2:4a:c9:61:fd:a5:68:e2:61:60:b6:85:f9:f1:d8:
                    fc:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:C1:06:9A:2F:94:B0:D5:FE:52:D0:48:27:4D:CD:94:78:65:D0:5B
            X509v3 Authority Key Identifier:
                keyid:9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a376663303a3a2f34322d3432203d3e20323634333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dc8:7fc0::/42

    Signature Algorithm: sha256WithRSAEncryption
         9e:3c:aa:ff:e5:0a:2b:f9:8c:58:69:bf:0a:9b:a3:f3:99:af:
         27:cc:48:b6:ce:e1:0f:57:b0:b6:5c:50:2e:ac:7c:08:25:e4:
         3c:ae:64:19:51:16:32:ce:3b:3f:b8:e0:34:e8:db:b3:fd:ad:
         85:16:16:46:21:d2:20:bc:43:c9:a6:51:d6:74:35:25:20:5a:
         ed:ae:87:7e:82:b1:58:cc:12:69:a4:31:be:66:80:2b:4d:b6:
         6b:6f:da:14:99:f9:0a:88:da:4e:d6:e2:e7:31:92:c6:73:85:
         17:bb:f5:ea:e4:0f:71:29:d1:0a:8f:7a:62:2d:e4:e6:1a:f0:
         1b:cf:9b:a6:92:2a:95:f2:25:cb:bd:18:09:13:d3:86:c7:43:
         fe:34:d7:d0:70:3a:a9:af:a5:cc:40:5b:be:5e:6d:18:ff:b8:
         f3:53:30:d1:64:9f:32:80:3a:6e:d0:0a:06:bb:b0:1e:90:a8:
         c1:70:2d:28:e8:5f:bf:ae:21:6e:8f:50:eb:cf:fd:3c:fa:3b:
         e7:9e:d9:b1:31:82:c3:95:df:71:88:22:78:10:3c:46:c9:6f:
         6a:96:a7:9e:ac:7e:cf:ed:67:d3:58:07:f7:20:d6:7b:ee:e5:
         61:3b:42:a3:c3:32:21:1b:c0:de:d6:a6:0b:3c:e7:ea:d5:ba:
         eb:8d:f2:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org