Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a323030303a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a323030303a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          zobw871EUKB6x7JnVPrCUJgFXo6AmextK0Keo1goq3E=
Subject key identifier:   95:1C:10:35:98:DC:06:9B:22:84:05:48:B6:5C:6D:ED:51:2B:31:74
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       107804943DF1A2EDD19C6902C60CE0E0C144D3D2
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a323030303a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Tue 13 Feb 2024 11:20:26 +0000
ROA not before:           Tue 13 Feb 2024 11:15:26 +0000
ROA not after:            Tue 11 Feb 2025 11:20:26 +0000
asID:                     262617
IP address blocks:        2804:90c:2000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:78:04:94:3d:f1:a2:ed:d1:9c:69:02:c6:0c:e0:e0:c1:44:d3:d2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Feb 13 11:15:26 2024 GMT
            Not After : Feb 11 11:20:26 2025 GMT
        Subject: CN=951C103598DC069B22840548B65C6DED512B3174
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:13:a2:26:f3:3e:c4:9b:4f:ba:a4:09:ff:5b:
                    41:29:c3:0c:9b:37:ca:16:8d:a8:74:8e:e2:72:da:
                    1e:99:eb:08:30:f0:4f:41:65:31:f4:76:2f:93:b9:
                    7c:f1:34:19:2e:c4:b8:48:67:1d:6a:78:f4:d5:e6:
                    29:d8:9f:e6:de:a8:d5:c8:bb:ce:6b:c7:8f:b8:66:
                    20:11:8d:35:a8:e2:37:78:34:f1:bb:2f:6e:b6:93:
                    c0:3d:b2:4f:14:7b:8a:eb:15:06:26:67:e5:02:1f:
                    66:d9:34:8d:1d:5d:1c:4d:1b:0b:74:a4:89:e7:41:
                    41:ad:47:44:52:12:92:74:8d:3f:4d:94:5f:09:e7:
                    95:28:81:9d:41:6c:cf:f1:43:4c:ac:6d:be:ff:a2:
                    5e:98:8f:59:46:e4:c1:3c:c7:0b:6e:37:53:8c:83:
                    5c:ae:b8:23:65:15:f9:3a:97:21:f1:56:a3:48:f0:
                    44:b4:b8:5a:43:8a:d9:de:26:e9:52:28:9d:91:b2:
                    f1:0c:7a:4d:5b:54:e4:a3:b0:6b:df:69:f6:22:b1:
                    7b:81:e7:40:5a:05:64:fa:6f:3f:bb:2d:d9:41:8d:
                    33:eb:04:97:7f:66:48:95:0e:3d:56:c3:ad:09:5e:
                    26:98:99:59:e7:25:f4:80:a9:2a:27:ee:64:37:6d:
                    7c:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                95:1C:10:35:98:DC:06:9B:22:84:05:48:B6:5C:6D:ED:51:2B:31:74
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a323030303a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:2000::/48

    Signature Algorithm: sha256WithRSAEncryption
         0a:3f:53:f6:ca:29:f6:bb:bb:21:2d:7d:2d:d7:1f:c5:99:da:
         ee:54:c0:0d:47:2b:59:2c:9f:37:d2:0c:62:b2:28:d0:a1:c8:
         dd:6a:20:1b:00:01:fb:e6:d0:35:a7:6e:0a:1c:ea:d9:77:d7:
         b5:5b:08:44:0c:94:d6:32:36:2f:c5:83:97:5f:13:0c:94:3b:
         7b:a9:e9:99:be:b8:08:52:ca:51:99:ce:5d:1e:af:5c:ce:db:
         94:68:3f:78:55:f5:ec:85:f0:b2:57:2c:ed:ca:2c:ce:ae:d9:
         e3:2d:5f:eb:6c:74:14:e5:cc:dd:8e:8b:ac:03:0d:a4:c6:f9:
         9b:5c:47:67:75:54:b6:a9:e2:66:bf:fc:f8:e9:92:76:69:fa:
         2b:87:2a:0c:4a:0e:e5:31:28:bf:e3:47:06:73:87:57:31:30:
         49:73:1a:48:bb:c7:1d:f7:d2:3b:a9:1c:c3:56:fb:86:2e:af:
         05:20:e1:6a:39:17:78:d9:34:8b:b7:1c:a0:71:65:9d:a5:c8:
         be:c2:aa:e3:b4:d4:48:6f:2c:57:37:d6:4a:25:25:52:ae:c5:
         0b:f8:ca:39:8b:4e:c9:0c:4c:cd:33:ad:d7:46:f8:a7:2e:f0:
         58:9d:cf:43:36:c0:e1:be:60:b8:3b:27:ae:44:01:94:f7:1a:
         5b:ff:98:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org