Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3a2f33322d3335203d3e20323634353936.roa
File:                     323830343a323232633a3a2f33322d3335203d3e20323634353936.roa (raw, json)
Hash identifier:          +EFzVuLo/wPAdXRitclaR7+lyLfeCqBRcWzTC2FSqRc=
Subject key identifier:   AF:36:2D:46:5F:EE:43:D1:18:DE:68:27:B9:DE:9C:AD:25:20:85:B4
Certificate issuer:       /CN=9D28D657B942A6DA857BB23C8B6684ABC7261738
Certificate serial:       1608640DBF476676080369B86C92245B0F7D5B07
Authority key identifier: 9D:28:D6:57:B9:42:A6:DA:85:7B:B2:3C:8B:66:84:AB:C7:26:17:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3a2f33322d3335203d3e20323634353936.roa
Signing time:             Tue 07 Nov 2023 15:19:11 +0000
ROA not before:           Tue 07 Nov 2023 15:14:11 +0000
ROA not after:            Tue 05 Nov 2024 15:19:11 +0000
asID:                     264596
IP address blocks:        2804:222c::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:08:64:0d:bf:47:66:76:08:03:69:b8:6c:92:24:5b:0f:7d:5b:07
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D28D657B942A6DA857BB23C8B6684ABC7261738
        Validity
            Not Before: Nov  7 15:14:11 2023 GMT
            Not After : Nov  5 15:19:11 2024 GMT
        Subject: CN=AF362D465FEE43D118DE6827B9DE9CAD252085B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:57:08:59:d2:3c:14:18:a1:0d:ab:16:6a:50:
                    f9:90:17:eb:af:f3:08:51:0c:bc:46:58:12:84:81:
                    e4:d0:d2:54:68:9e:9a:fe:83:cf:cc:f8:61:41:51:
                    f0:f2:47:8e:db:38:f8:c4:12:d0:32:76:b6:35:14:
                    f0:d5:70:45:f3:90:35:ee:8e:0d:ba:f0:20:82:17:
                    c4:7b:c8:22:2d:60:cf:17:f4:4c:c0:ae:e3:d7:46:
                    d4:30:14:f8:ce:6e:93:7b:9a:cb:77:cb:ca:80:2c:
                    39:5b:d0:d1:da:b9:6a:82:30:9e:c5:a9:75:65:f3:
                    8c:28:5a:f1:a0:94:48:a8:91:70:8d:43:18:97:0f:
                    82:19:3f:89:03:ef:0f:ac:cd:ee:e1:44:8d:c2:98:
                    4d:7f:be:9f:e8:5e:9b:7e:b4:8c:89:16:f9:dd:dd:
                    ac:1e:19:bc:c3:c7:0e:a6:b7:61:fa:b0:01:fe:fb:
                    a0:78:6b:55:da:0c:d3:cf:e8:59:a2:e2:92:62:68:
                    60:c1:90:09:e5:f1:9f:89:1c:ce:d7:91:97:f5:e6:
                    c8:66:e7:69:ed:ba:a3:c9:8a:07:fe:5b:34:10:f7:
                    63:7a:38:08:5a:8c:4e:ca:85:67:f9:9c:07:aa:f9:
                    9b:90:a1:0a:55:fe:3c:ed:30:17:c4:2f:1b:6f:01:
                    e9:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:36:2D:46:5F:EE:43:D1:18:DE:68:27:B9:DE:9C:AD:25:20:85:B4
            X509v3 Authority Key Identifier:
                keyid:9D:28:D6:57:B9:42:A6:DA:85:7B:B2:3C:8B:66:84:AB:C7:26:17:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9D28D657B942A6DA857BB23C8B6684ABC7261738.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BKmFDnF6bXvEYbLpbnhZEWEkxjGrZRQppXQK4FnUTNVZ/0/323830343a323232633a3a2f33322d3335203d3e20323634353936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:222c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6d:a9:48:1f:1d:79:0c:49:65:cd:b9:3c:65:22:16:1f:91:08:
         a4:fb:07:1e:ce:9f:76:26:08:33:cc:19:19:6b:ef:11:ba:a4:
         89:27:4b:35:ed:1b:29:4c:ed:5c:b4:50:d1:49:41:34:da:28:
         d1:4b:62:09:4f:40:58:e8:8b:eb:d0:b2:85:2e:15:8a:19:ae:
         d3:dc:a9:86:4b:fc:b1:f1:fa:74:ce:46:eb:33:e7:7f:ad:54:
         a6:11:66:40:5d:41:ed:5c:e1:ce:42:82:84:44:91:05:7d:10:
         dd:93:c7:48:46:81:e0:a7:33:68:89:fc:98:6a:9a:6d:6d:39:
         99:6f:d2:3f:5e:9d:29:ef:75:35:8f:b4:4d:3d:e5:ef:b4:09:
         2a:7a:46:32:83:f6:87:85:0e:7b:95:01:b5:59:90:4b:e9:7e:
         6e:1c:79:aa:a6:c1:00:3e:88:d8:e3:8c:ba:ab:4b:8c:e7:21:
         03:8d:df:1f:39:08:be:a5:f6:c9:26:9d:79:5b:64:c9:72:de:
         90:d3:40:5a:92:bd:37:70:3d:ff:91:4a:86:cf:04:ec:45:9f:
         f8:21:97:99:17:78:03:e4:65:7c:53:6b:71:57:99:0a:24:94:
         fa:90:b3:1a:15:e3:d2:a2:00:11:13:13:dd:74:b0:6e:ab:6a:
         81:15:a7:1f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:18 2024 by rpki-client on console-fra.rpki-client.org