Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a313a3a2f35362d3536203d3e20323632363137.roa
File:                     323830343a3930633a313a3a2f35362d3536203d3e20323632363137.roa (raw, json)
Hash identifier:          2XT/tSBi9dHILEjCTmdaDXLnZuzAhZid9Uj3+ogcPcA=
Subject key identifier:   75:63:D6:D5:2B:86:20:76:39:5D:1F:FA:A2:52:97:CF:97:FC:26:A4
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       31D1D05B68E99A1E4432256E6CC4DE090169FB04
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a313a3a2f35362d3536203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:16 +0000
ROA not before:           Thu 03 Aug 2023 13:04:16 +0000
ROA not after:            Thu 01 Aug 2024 13:09:16 +0000
asID:                     262617
IP address blocks:        2804:90c:1::/56 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:d1:d0:5b:68:e9:9a:1e:44:32:25:6e:6c:c4:de:09:01:69:fb:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:16 2023 GMT
            Not After : Aug  1 13:09:16 2024 GMT
        Subject: CN=7563D6D52B862076395D1FFAA25297CF97FC26A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:f4:4d:bf:d0:37:9e:dc:41:16:15:75:ff:d7:
                    3d:d0:e6:39:c9:b0:b9:79:da:36:e4:8a:7d:be:9f:
                    9f:15:6b:1a:9d:ac:aa:c6:9f:18:a1:c1:b0:db:d9:
                    28:90:16:eb:87:35:44:0b:06:96:65:28:fe:60:a4:
                    ed:f2:bf:ef:58:63:58:94:3a:97:46:d5:c2:26:c7:
                    a7:d5:c0:53:ab:b0:9b:e7:cd:7d:e2:b5:d5:fa:07:
                    25:b1:af:95:71:f4:1b:b2:a7:f5:96:b3:3a:eb:0a:
                    08:98:de:17:aa:1b:f6:ec:4b:a8:af:cf:ac:03:c9:
                    43:ce:b7:4e:db:12:ee:62:e9:3e:8a:ac:27:8e:3d:
                    da:b4:7e:8b:60:cf:71:ca:1f:68:fe:d9:dc:b5:61:
                    f1:fb:14:03:01:da:48:55:06:83:58:ea:21:0b:87:
                    e7:a1:1f:97:a9:e4:a1:75:c5:a7:94:aa:14:b1:6d:
                    62:63:fc:ad:b3:6e:d8:b8:fc:9a:d2:ab:76:1c:8e:
                    10:95:44:e1:c9:96:77:7b:5f:31:bf:36:93:a1:4d:
                    37:c5:a8:9e:6d:40:f6:c2:3d:e3:12:62:1d:0e:fc:
                    e0:99:94:f6:e1:89:ea:7c:e0:f1:f2:b4:c3:32:4d:
                    cc:d6:25:b9:61:3b:0e:49:4b:ae:52:06:9e:cf:11:
                    3f:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:63:D6:D5:2B:86:20:76:39:5D:1F:FA:A2:52:97:CF:97:FC:26:A4
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a313a3a2f35362d3536203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:1::/56

    Signature Algorithm: sha256WithRSAEncryption
         61:72:db:3f:66:26:a2:35:13:90:9e:08:e4:2a:bb:c1:87:42:
         2f:42:ee:e7:5d:6a:5b:44:b0:b0:d6:c8:e1:02:13:ba:5b:eb:
         b2:d4:9f:39:ad:8f:fc:e4:ab:a6:ea:a3:58:e6:c9:ba:b9:dd:
         74:21:e0:bb:de:06:b0:54:07:64:b2:69:55:b9:ef:6e:42:ca:
         62:2c:b8:ec:17:66:66:92:c1:a9:ab:3d:e7:6e:fc:67:8e:1a:
         a8:45:06:15:3f:33:67:bd:0f:12:c1:3b:d9:74:bd:ed:98:bc:
         53:17:db:1a:ea:92:3d:77:ab:e0:55:c1:ef:e5:0b:d8:2e:62:
         77:5c:1c:f4:6e:7a:3f:01:3c:80:2a:fc:45:15:c6:76:78:2c:
         77:f8:33:a7:97:50:f5:69:a5:6e:12:e8:53:b9:21:a4:ab:2d:
         10:bf:9d:ba:ef:e6:9a:4d:58:57:19:7e:39:46:a2:7f:f3:fa:
         39:e6:a5:8f:45:1a:34:12:3b:ec:f3:18:ac:4a:f5:4b:d8:c8:
         74:7b:c0:83:20:64:7f:ac:ac:9d:5a:88:39:60:a6:76:0e:d9:
         83:cb:1a:f2:80:5c:65:a5:37:55:a5:fb:14:dc:af:f9:94:88:
         29:38:04:5f:e8:c5:aa:e0:4e:38:2c:33:ce:ff:df:27:ef:37:
         a1:1e:d6:f0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org