Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130313a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3130313a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          bGrIvUr6KAwlKMOFlCH35td1YNc1PLSh4bSLf401Xc8=
Subject key identifier:   2D:05:86:CF:F6:6C:DA:E7:11:EF:AC:AF:17:5F:EF:F6:3E:32:34:E6
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       6DB4047839F147F683D0A49AB069C48E6A5C3ADA
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130313a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:16 +0000
ROA not before:           Thu 03 Aug 2023 13:04:16 +0000
ROA not after:            Thu 01 Aug 2024 13:09:16 +0000
asID:                     262617
IP address blocks:        2804:90c:101::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:b4:04:78:39:f1:47:f6:83:d0:a4:9a:b0:69:c4:8e:6a:5c:3a:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:16 2023 GMT
            Not After : Aug  1 13:09:16 2024 GMT
        Subject: CN=2D0586CFF66CDAE711EFACAF175FEFF63E3234E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:03:23:d2:05:0e:12:83:d7:cd:38:70:8f:57:
                    84:0b:6e:2a:61:57:6a:cf:ff:09:da:52:bc:99:a9:
                    02:79:71:43:ad:08:b6:88:3a:46:6c:19:53:45:00:
                    f6:46:0c:85:be:ca:c5:c9:43:de:7c:8e:9b:6e:34:
                    bd:92:8e:7d:94:88:26:7b:f7:1f:71:3b:2e:82:97:
                    58:90:13:f0:a1:14:dc:87:2f:4d:b1:3f:3f:3d:c1:
                    5f:b1:f8:39:e6:42:4c:fd:35:64:93:3d:30:30:13:
                    21:68:95:23:ba:27:18:86:9e:1b:6a:a8:b1:2e:58:
                    2c:61:55:cf:1a:e5:f3:9c:2b:76:c3:0e:5b:ba:e4:
                    56:87:2a:aa:2f:be:34:04:23:8e:1a:0e:bc:fc:bf:
                    8c:16:cd:09:12:a5:ac:9a:1e:f7:59:69:40:83:a7:
                    14:7e:89:d8:e1:76:2f:ee:15:b4:86:16:4e:21:b3:
                    7b:c9:86:e0:92:8f:eb:ac:07:06:d7:24:f8:9c:24:
                    41:7b:1f:20:d6:cf:ec:0a:ec:3a:ab:2a:34:d1:a4:
                    47:75:77:e2:a1:a0:fa:49:e2:37:91:88:19:10:f0:
                    cc:40:2d:a2:96:8f:65:c2:e4:a9:47:86:85:d4:97:
                    5f:94:66:db:40:c0:df:4d:74:4e:c0:b8:04:ef:c1:
                    2a:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:05:86:CF:F6:6C:DA:E7:11:EF:AC:AF:17:5F:EF:F6:3E:32:34:E6
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3130313a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:101::/48

    Signature Algorithm: sha256WithRSAEncryption
         13:44:9c:7d:4e:7c:53:91:03:a2:e1:0b:e7:5d:33:7f:2e:db:
         7b:bb:9e:e8:d5:f7:3b:db:77:9a:e8:2c:f0:2f:db:f8:17:25:
         43:ef:e9:8b:7f:9c:8d:75:50:08:65:b0:ef:04:a3:58:85:62:
         a3:49:fe:f8:54:b6:b7:05:02:e2:26:09:47:38:9f:9e:5e:80:
         4f:21:33:b1:b8:8f:08:10:00:0f:05:48:a9:3f:8d:7f:74:0f:
         42:22:42:3c:27:cf:76:32:38:f3:05:94:52:a2:72:d2:42:99:
         97:a9:ca:2a:e4:bb:39:cf:f7:7c:79:35:03:a7:b5:28:13:f4:
         0a:7b:a8:de:24:b5:b8:b9:08:3d:28:a3:08:34:c5:38:5a:2b:
         21:4a:b0:67:73:c6:b5:cd:c3:ad:a7:8d:83:ee:84:52:f3:ea:
         43:77:48:1a:1a:65:d4:6c:ea:a4:ba:9c:32:b1:a8:5c:9f:68:
         8f:73:3c:d3:58:98:c9:57:2c:54:93:06:42:7e:b9:c3:5c:e6:
         e9:00:d5:95:09:7e:3b:a3:e1:13:a0:f3:37:86:d3:78:12:b1:
         95:f9:57:22:c4:fc:c5:d9:4c:df:71:9d:35:37:ab:06:24:c3:
         21:26:09:6e:48:fd:34:52:17:2d:32:58:fc:7e:46:91:df:ba:
         03:46:e8:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org