Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a383030303a3a2f33342d3334203d3e20323634333933.roa
File:                     323830343a316463383a383030303a3a2f33342d3334203d3e20323634333933.roa (raw, json)
Hash identifier:          khYw9SvTbzSTOVWP1G41S9YTKGul+JJHbVz6nYV09eM=
Subject key identifier:   75:43:BF:0F:B6:57:74:61:C3:D7:D0:84:F3:8B:1C:3C:F2:53:E6:A9
Certificate issuer:       /CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
Certificate serial:       187C0F4B1B5FB73488394929940FD28B30946CA7
Authority key identifier: 9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a383030303a3a2f33342d3334203d3e20323634333933.roa
Signing time:             Tue 10 Jan 2023 12:18:54 +0000
ROA not before:           Tue 10 Jan 2023 12:13:54 +0000
ROA not after:            Tue 09 Jan 2024 12:18:54 +0000
asID:                     264393
IP address blocks:        2804:1dc8:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:7c:0f:4b:1b:5f:b7:34:88:39:49:29:94:0f:d2:8b:30:94:6c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9A3EAB903F3D92104C008B6C652EA21CCFACBF0D
        Validity
            Not Before: Jan 10 12:13:54 2023 GMT
            Not After : Jan  9 12:18:54 2024 GMT
        Subject: CN=7543BF0FB6577461C3D7D084F38B1C3CF253E6A9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:bb:fa:f6:99:fa:6d:eb:79:29:28:7e:3d:f0:
                    ae:bb:57:94:e8:3c:7d:5c:de:d5:05:81:e8:4e:53:
                    ea:76:99:cc:7b:fd:c7:c9:ef:7f:79:b7:b7:97:f0:
                    7a:8d:bc:c0:f8:c4:94:34:d0:1d:8d:d2:8b:5f:1b:
                    b2:95:43:77:71:85:98:cd:9f:02:96:f8:24:41:74:
                    28:2e:bc:23:d5:a6:be:86:0a:b4:4b:3f:fd:ab:a1:
                    40:66:d8:2c:41:00:2b:ea:dc:90:68:35:7e:61:bf:
                    1f:b0:08:bb:b4:b5:64:b0:48:21:e5:45:ea:e9:99:
                    3d:33:76:9f:a6:8f:b2:03:39:21:7e:ef:a4:0a:42:
                    99:fa:f2:38:de:09:10:26:5b:d3:c0:1b:a7:23:7f:
                    a2:1c:e1:83:38:42:17:51:70:3a:1c:a9:62:92:0b:
                    f3:4d:8d:7b:e8:7f:c5:cc:9c:da:9a:b9:15:75:77:
                    56:3a:7d:3a:c3:5d:ac:a6:6a:0d:aa:eb:96:e2:b5:
                    81:04:e7:6d:df:c8:39:e0:99:52:d0:00:a6:d2:4b:
                    b3:d1:37:f2:4a:23:83:6c:eb:40:e9:9e:c7:b2:f0:
                    b7:92:bd:18:f8:e5:9d:3e:16:15:ee:3e:96:81:ac:
                    1d:2e:88:2d:3a:ef:b4:5a:96:aa:84:d8:ad:ef:84:
                    51:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:43:BF:0F:B6:57:74:61:C3:D7:D0:84:F3:8B:1C:3C:F2:53:E6:A9
            X509v3 Authority Key Identifier:
                keyid:9A:3E:AB:90:3F:3D:92:10:4C:00:8B:6C:65:2E:A2:1C:CF:AC:BF:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9A3EAB903F3D92104C008B6C652EA21CCFACBF0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BA8kaM5eE7n2kiVizjSCEggoRsbGgBFCgpMCorxpzrmA/0/323830343a316463383a383030303a3a2f33342d3334203d3e20323634333933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dc8:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         9a:82:59:5e:01:7c:2c:d0:06:62:d5:fb:dd:39:bd:62:f7:df:
         90:d8:e7:ca:91:34:c8:7f:25:62:db:74:1b:5b:7d:26:81:16:
         d1:82:58:e0:da:a4:b7:8f:77:20:c4:58:9a:27:fd:fa:87:f1:
         d9:60:a4:96:e7:5b:06:cc:aa:67:91:05:6f:26:40:64:87:eb:
         b4:39:3a:db:ea:2f:ac:47:24:c3:d7:cb:3b:a0:88:93:8d:74:
         c5:bd:23:9e:9a:30:9b:ea:f3:20:1a:34:d1:bd:b1:57:03:bb:
         b2:f0:be:63:13:2e:2f:b9:15:30:96:31:c1:86:54:e8:dd:36:
         59:ac:8d:f8:70:74:2a:41:ae:cd:da:e6:19:b9:a3:b3:59:9e:
         a0:6c:9f:54:2e:d2:45:8a:2c:a0:bf:01:30:d9:7d:a1:5c:4d:
         c7:93:8e:3b:a1:b2:3b:8b:7a:5f:d3:86:60:21:48:92:a2:16:
         67:06:97:da:5a:e5:be:86:9a:70:6f:dc:72:fb:cc:9b:46:5e:
         78:d1:fd:52:5b:e7:61:84:db:81:9e:95:d1:8a:87:75:75:6e:
         ad:e2:07:3a:4f:62:31:4b:2b:9d:42:fa:9d:c2:38:0c:b1:28:
         70:07:30:17:82:5f:83:58:8e:d6:e9:27:75:f2:2c:fd:ae:e3:
         29:9d:05:c4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:15 2024 by rpki-client on console-fra.rpki-client.org