Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230333a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3230333a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          g87AMpBH7OIAGQttseqUavUCzNXcekXV8mjtLm3R/eo=
Subject key identifier:   1A:2B:00:40:B4:E3:9D:16:D9:DD:1D:C0:95:4A:48:5D:8C:0F:9C:22
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       0D155C45CD6B5BFB467466C851E151E1D9C3C03C
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230333a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:01 +0000
ROA not before:           Thu 03 Aug 2023 13:04:01 +0000
ROA not after:            Thu 01 Aug 2024 13:09:01 +0000
asID:                     262617
IP address blocks:        2804:90c:203::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:15:5c:45:cd:6b:5b:fb:46:74:66:c8:51:e1:51:e1:d9:c3:c0:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:01 2023 GMT
            Not After : Aug  1 13:09:01 2024 GMT
        Subject: CN=1A2B0040B4E39D16D9DD1DC0954A485D8C0F9C22
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ff:f2:a4:d6:99:f8:46:8f:d2:0c:bf:91:16:
                    16:8c:7f:70:ab:27:1e:7a:17:9f:41:dc:ee:b5:1d:
                    f7:7c:43:f0:b0:55:9f:cd:f6:1f:4a:35:76:fe:75:
                    2c:83:c8:06:e0:b2:9f:2e:6e:61:1c:a8:bf:86:9a:
                    22:d8:aa:9f:52:5c:aa:02:43:1d:5d:5d:92:24:51:
                    ef:29:26:0e:ec:38:3b:74:50:61:e5:0b:96:39:14:
                    4f:c3:4b:de:35:9a:f0:48:70:ff:89:a9:42:7f:b6:
                    bb:14:dd:85:fa:ec:5f:81:32:68:7f:ac:a9:78:d1:
                    54:a9:5e:c0:f2:1a:95:3b:d1:7b:76:82:c7:9d:2b:
                    32:8e:a3:af:39:a3:5d:9e:d4:8a:72:50:eb:02:ec:
                    c2:83:89:a7:74:e5:a4:7d:60:1b:0f:6c:cc:2b:b0:
                    6b:a0:6f:3f:a2:56:da:04:25:a1:22:b2:dd:7f:1b:
                    a0:b6:bb:cd:80:6b:bd:95:5f:d8:e1:5c:f7:6c:1d:
                    18:06:28:07:23:1f:5f:22:27:68:79:37:10:c2:99:
                    b6:04:7a:63:5a:ac:87:93:e4:21:3f:26:82:8b:e7:
                    13:82:00:c2:5c:44:27:98:6d:1b:39:71:16:fc:cc:
                    bc:e0:94:75:ce:51:84:11:b7:1c:79:12:ef:8e:43:
                    08:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2B:00:40:B4:E3:9D:16:D9:DD:1D:C0:95:4A:48:5D:8C:0F:9C:22
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230333a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:203::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:c6:4b:45:25:98:db:5a:32:cb:67:82:9a:5f:a6:ca:ed:5a:
         bd:6f:55:b8:bb:59:40:02:c9:33:d3:76:38:ea:4f:42:58:7f:
         62:0a:ed:5c:f9:df:75:b9:ed:4f:d6:84:56:b9:10:6a:ff:56:
         01:62:f8:d0:93:7a:9d:c1:9d:13:00:ba:0e:05:03:73:f0:92:
         44:4a:3b:87:30:6d:a4:c0:c7:b3:da:a4:c3:8e:d3:2d:48:ff:
         87:8f:cd:33:c1:64:f4:74:0e:85:87:14:77:29:28:2b:1a:57:
         95:b3:d7:78:7c:8b:c6:ef:fc:63:a2:30:3e:9f:2d:23:fd:12:
         6d:f6:6d:ed:e8:5b:e1:04:78:ca:0d:8f:a8:3f:74:16:76:01:
         3b:3c:e6:c5:7d:d8:8f:32:fb:40:7d:1e:da:57:10:04:44:96:
         72:6b:27:75:eb:b0:8f:32:ec:0c:65:a9:56:3e:5b:ed:85:02:
         59:9c:ba:2f:f6:5f:1d:c8:95:c9:b2:0b:6d:13:72:9b:77:b5:
         e1:e2:ec:ec:af:22:09:3b:e9:22:a2:70:3f:31:60:c0:d2:02:
         2a:6f:f2:d5:35:c8:2f:28:ac:65:f1:8e:ca:87:f7:5d:2f:b7:
         fd:b0:51:24:8e:41:8a:73:41:ee:f9:18:2f:b8:7c:bc:b6:3b:
         04:f4:34:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org