Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130303a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3130303a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          I6Q0uaogSNGPGKS7S2b1sl+YVtHn174Jqow32drqkSU=
Subject key identifier:   AA:25:6E:3B:5B:75:2D:1A:AD:1C:1F:02:98:7F:46:30:D0:D5:B6:3F
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       45C85D48EC7B08C5F225DC37C9A8850DFD2DE629
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130303a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:12 +0000
ROA not before:           Thu 03 Aug 2023 13:04:12 +0000
ROA not after:            Thu 01 Aug 2024 13:09:12 +0000
asID:                     262617
IP address blocks:        2804:90c:100::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c8:5d:48:ec:7b:08:c5:f2:25:dc:37:c9:a8:85:0d:fd:2d:e6:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:12 2023 GMT
            Not After : Aug  1 13:09:12 2024 GMT
        Subject: CN=AA256E3B5B752D1AAD1C1F02987F4630D0D5B63F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:43:7e:bd:f3:32:cc:ba:58:53:d2:7d:75:7e:
                    8e:aa:a8:fd:e2:56:a8:c8:be:a4:fc:3c:00:d5:8d:
                    18:55:55:d6:cf:67:65:6f:87:5e:e0:21:1e:d5:6a:
                    97:42:aa:17:c2:80:6c:a9:8c:c4:2c:68:c7:14:f8:
                    dd:be:09:cb:b9:b3:57:5f:90:02:ca:e9:ef:7c:14:
                    6c:d8:c1:06:d3:d3:b3:f1:31:5e:74:03:5c:e7:78:
                    f6:c8:23:48:a5:85:a0:34:5b:9f:5f:78:c8:a6:f7:
                    0e:10:f9:fc:47:13:92:01:d5:6e:24:21:7e:3c:86:
                    a1:4a:a2:d1:2c:3c:66:b8:71:ba:a0:1b:7a:b6:75:
                    92:63:d8:a2:1a:17:e6:17:d8:9a:f2:71:5b:39:b4:
                    01:9a:b4:3f:9e:14:e9:31:97:73:bb:56:a8:af:62:
                    32:18:b7:c5:e0:b9:d3:10:68:18:1a:52:a0:da:a8:
                    2d:b7:38:e0:ef:b6:90:94:79:7c:6b:c6:df:e3:79:
                    0e:ee:57:04:ce:d1:cb:ba:bf:73:03:d5:2c:6b:1e:
                    6b:86:7d:30:8b:10:d6:6e:55:9b:21:4a:98:9a:4a:
                    49:cb:bd:27:5b:d2:00:27:12:54:c6:d7:b0:2e:51:
                    6a:56:0a:bc:07:53:8c:62:39:ec:d1:6c:98:05:0d:
                    77:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:25:6E:3B:5B:75:2D:1A:AD:1C:1F:02:98:7F:46:30:D0:D5:B6:3F
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130303a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:100::/48

    Signature Algorithm: sha256WithRSAEncryption
         49:5e:be:e1:e1:68:fc:fb:42:e1:d6:72:50:36:43:ec:2b:a7:
         f9:ac:c1:a8:96:3f:74:0e:dc:e4:d3:3d:18:d8:3e:08:3b:4c:
         a4:fa:ce:a5:1f:55:dd:5b:33:2d:16:a7:e8:10:20:2a:07:79:
         13:7c:83:ac:54:a7:38:57:dc:b6:a4:49:8c:07:23:f7:f7:35:
         6b:b8:2d:e9:b2:70:48:db:ec:17:73:82:4a:2d:86:5e:70:95:
         c5:a8:be:4a:c8:8c:2f:80:a2:9d:a7:0f:a1:ae:fc:da:1c:e8:
         30:cc:88:64:08:fa:b7:12:97:22:5b:f8:25:ee:2c:87:c7:12:
         99:e1:45:f4:d9:29:46:5f:91:c0:46:45:77:ad:65:77:47:30:
         c4:57:4a:0d:19:f2:97:59:13:e9:90:56:5e:3d:1a:94:7f:31:
         e5:58:21:71:e0:26:d9:d6:f7:97:8e:bb:56:12:80:26:ee:71:
         80:7f:97:b1:c6:70:ec:a2:b1:35:30:d6:aa:cf:12:f7:ea:23:
         b0:2d:1a:dc:1d:7c:fb:7b:ae:f0:a0:22:c5:52:90:31:f7:b0:
         52:1c:2a:33:31:a7:35:4c:92:eb:a2:15:38:3f:4b:2d:fc:54:
         81:f7:23:a4:60:76:52:d2:ea:59:02:d2:f2:e4:cf:19:70:e2:
         7c:c7:df:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org