Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a313a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a313a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          I+ZPT1BjI4EKnUGD0HMCoyg5uJBMkctmp/MRviWW8H4=
Subject key identifier:   E9:88:FA:94:77:10:7E:76:9C:74:8B:00:D6:86:8D:AD:39:E0:F3:44
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       2E40D273D4393741C3E6BEB37A0CD901448EE20E
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a313a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:14 +0000
ROA not before:           Thu 03 Aug 2023 13:04:14 +0000
ROA not after:            Thu 01 Aug 2024 13:09:14 +0000
asID:                     262617
IP address blocks:        2804:90c:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:40:d2:73:d4:39:37:41:c3:e6:be:b3:7a:0c:d9:01:44:8e:e2:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:14 2023 GMT
            Not After : Aug  1 13:09:14 2024 GMT
        Subject: CN=E988FA9477107E769C748B00D6868DAD39E0F344
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:76:54:d6:c8:8d:7d:74:d2:3b:42:fc:b1:
                    fd:9c:9e:f2:24:ef:05:ee:c7:65:9d:bf:c0:de:ed:
                    6f:55:74:2b:ae:37:f2:c7:86:81:b1:b7:44:c5:79:
                    63:fb:5b:11:c3:62:e6:c9:42:54:75:c6:12:a7:14:
                    9b:47:22:0d:d6:bd:dd:f6:e4:84:be:c1:13:71:66:
                    6a:b8:5a:79:9d:89:b5:4e:47:b1:9f:ba:c9:de:e7:
                    4d:65:43:fa:c2:67:65:b2:3a:80:14:a1:fd:9a:ba:
                    4f:77:1a:ee:cb:35:3f:48:b9:dd:9a:24:0b:34:2b:
                    d6:17:ba:48:28:fd:69:b5:63:e4:77:09:4f:3f:a9:
                    e1:80:2b:c0:d9:13:55:22:5a:72:7c:62:6c:8d:b3:
                    91:c1:17:18:a8:fd:35:94:4d:52:2a:ee:ac:37:45:
                    83:f0:70:86:e6:7e:96:5e:55:0b:0b:34:77:01:ae:
                    6b:ca:91:c8:1e:5a:b7:70:67:59:44:f1:3d:49:04:
                    3a:97:c6:e5:35:d6:c3:d4:a9:58:06:ce:0e:23:c6:
                    60:4a:5e:74:2e:d1:0f:18:5c:3d:29:f8:f9:56:d7:
                    06:d3:15:b4:fe:88:ce:4a:cb:9b:60:25:02:c0:1b:
                    7b:d0:5d:19:b8:97:8e:d6:5e:53:31:d3:da:81:88:
                    66:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:88:FA:94:77:10:7E:76:9C:74:8B:00:D6:86:8D:AD:39:E0:F3:44
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a313a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         0d:28:3c:98:7f:cc:f0:b5:28:d9:6a:ad:e8:6d:fe:70:7f:df:
         5c:9b:7c:29:a1:d4:c4:2d:87:c8:af:03:2b:73:52:05:8e:9a:
         d0:c1:ae:f6:e6:c2:74:b6:b1:0a:bb:95:f1:4d:6d:79:ed:75:
         78:92:1c:a3:16:cd:be:33:65:59:b2:72:2c:81:24:13:51:78:
         56:34:0f:24:be:ff:54:41:82:32:64:0c:d2:2d:4c:77:4c:70:
         4b:14:01:f7:66:00:40:df:dc:13:28:2f:70:b6:89:dc:be:b2:
         06:8d:8a:ea:13:66:c8:49:4d:55:22:af:82:bd:d3:fd:fe:94:
         96:59:2e:35:95:d0:e0:cd:29:ac:ac:f2:b3:42:81:20:34:52:
         53:c9:eb:c4:99:61:c2:db:8f:d2:e1:42:5f:d1:8f:83:74:46:
         a1:09:41:23:07:65:8c:28:eb:e5:da:d1:bc:a0:ae:f1:fd:9f:
         23:ff:e3:96:35:66:91:e9:e1:50:42:0d:91:eb:ea:78:59:40:
         92:1a:2a:2b:5a:69:bd:9a:32:65:a1:11:cc:96:c5:74:5b:34:
         84:3d:ff:97:51:d9:7a:8c:94:e9:e4:ee:8b:98:00:c4:76:3c:
         a9:5b:70:f1:30:67:5d:15:4e:bc:08:5f:fa:31:db:ec:fa:e3:
         ea:23:af:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org