Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3230303a3a2f34302d3430203d3e20323634353936.roa
File:                     323830343a323232633a3230303a3a2f34302d3430203d3e20323634353936.roa (raw, json)
Hash identifier:          89aeE1SG1u4Uunjbp6bQ9x8poXCDxqjaOWvjKL1s92Y=
Subject key identifier:   B4:73:C8:15:12:38:53:87:B1:19:8C:9F:FB:CF:7A:7E:79:07:8E:D2
Certificate issuer:       /CN=9D28D657B942A6DA857BB23C8B6684ABC7261738
Certificate serial:       4C92D56FD0952318CF93ACE72645D96D982EBE54
Authority key identifier: 9D:28:D6:57:B9:42:A6:DA:85:7B:B2:3C:8B:66:84:AB:C7:26:17:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3230303a3a2f34302d3430203d3e20323634353936.roa
Signing time:             Tue 07 Nov 2023 15:19:11 +0000
ROA not before:           Tue 07 Nov 2023 15:14:11 +0000
ROA not after:            Tue 05 Nov 2024 15:19:11 +0000
asID:                     264596
IP address blocks:        2804:222c:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4c:92:d5:6f:d0:95:23:18:cf:93:ac:e7:26:45:d9:6d:98:2e:be:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D28D657B942A6DA857BB23C8B6684ABC7261738
        Validity
            Not Before: Nov  7 15:14:11 2023 GMT
            Not After : Nov  5 15:19:11 2024 GMT
        Subject: CN=B473C81512385387B1198C9FFBCF7A7E79078ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:c4:90:62:fe:14:f5:ea:d1:5e:17:be:41:e4:
                    0c:3e:40:74:fb:9a:3b:63:42:ac:6c:47:34:8e:00:
                    8e:1d:e5:f6:1b:92:ef:dd:d2:3b:c8:75:3c:95:a1:
                    85:12:e0:10:90:e6:02:23:05:32:62:9e:49:27:e6:
                    f3:ed:fa:06:26:b6:4a:f1:33:60:54:fd:19:d0:24:
                    6d:64:5a:43:0a:2e:48:ab:e2:d3:ef:88:44:c5:33:
                    92:ab:1e:1d:32:bb:6c:7d:b4:d2:e1:e7:0a:be:2e:
                    08:e0:ac:51:58:8e:54:9c:15:db:a7:55:86:70:7a:
                    f0:20:1a:45:ce:b6:7b:67:ea:a8:42:1e:f2:f5:91:
                    c6:88:be:e5:56:c6:c0:99:51:73:d0:33:5c:17:f4:
                    3c:92:f6:97:7e:db:2e:59:7c:de:65:54:78:18:fe:
                    d1:5a:1e:ce:bd:3f:aa:e4:89:b8:44:ce:6e:12:a9:
                    7a:ed:b2:77:68:07:23:88:c4:ca:68:43:bb:93:c4:
                    ae:ac:a2:12:fa:42:48:fe:65:f4:16:ba:68:6d:52:
                    e5:52:a7:73:ec:a0:f9:d2:54:e9:9f:e0:3e:d2:74:
                    a8:3c:e4:af:fe:91:ba:66:f3:fa:81:47:ef:6f:26:
                    e5:b7:81:32:3f:df:50:6f:01:97:47:12:6a:fd:f5:
                    30:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:73:C8:15:12:38:53:87:B1:19:8C:9F:FB:CF:7A:7E:79:07:8E:D2
            X509v3 Authority Key Identifier:
                keyid:9D:28:D6:57:B9:42:A6:DA:85:7B:B2:3C:8B:66:84:AB:C7:26:17:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3230303a3a2f34302d3430203d3e20323634353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:222c:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:f5:5b:10:39:4b:a9:ad:b3:f8:da:98:9f:e3:48:c5:34:51:
         a9:88:29:a8:28:93:4a:e5:01:9b:fd:b7:4a:80:23:8c:db:a4:
         f3:71:44:46:02:27:87:43:8c:89:4e:90:15:1f:32:82:03:2b:
         16:64:c5:97:af:0a:40:b8:db:4e:24:30:d5:a7:ff:fa:b5:ca:
         df:28:25:dc:f5:c0:3b:2d:e9:d4:05:20:ec:6b:ab:c0:7a:26:
         95:b4:ab:9b:70:85:0f:cb:5f:1a:b7:82:46:39:ac:dd:cb:e8:
         ac:eb:fc:2f:7d:28:98:95:96:ef:ce:b7:25:64:e2:f1:8d:76:
         f2:4d:1d:18:5e:9b:e0:5c:14:e4:48:d6:94:7a:bf:2a:be:27:
         86:51:05:3a:de:ae:b4:32:9b:34:48:1b:86:16:fe:6b:61:17:
         87:8a:e2:6c:28:1f:cc:60:c9:b3:46:7e:d5:43:72:ef:a2:da:
         7d:b0:43:41:fe:a2:07:78:1c:5c:e1:12:54:95:3a:1a:b2:f6:
         6c:ac:18:73:4c:c1:f2:7d:ec:a2:59:6d:c8:7e:66:3f:74:b2:
         04:90:99:7f:85:dc:91:74:0b:6a:8c:54:02:c9:35:ce:64:ed:
         db:29:44:12:08:26:40:3a:ba:86:f9:ee:04:c3:5d:fe:28:e8:
         74:7a:da:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org