Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230343a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3230343a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          EiOOt3poLIOAzT1RWvTd5oskiMGlGmZSYwJt3zV5yPk=
Subject key identifier:   A7:92:BE:25:91:74:3D:7E:7D:DA:CC:18:9C:6D:DB:4D:E7:91:76:2F
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       60E300A147AE5D110D8632C2355E2249A90034B4
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230343a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:08 +0000
ROA not before:           Thu 03 Aug 2023 13:04:08 +0000
ROA not after:            Thu 01 Aug 2024 13:09:08 +0000
asID:                     262617
IP address blocks:        2804:90c:204::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:e3:00:a1:47:ae:5d:11:0d:86:32:c2:35:5e:22:49:a9:00:34:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:08 2023 GMT
            Not After : Aug  1 13:09:08 2024 GMT
        Subject: CN=A792BE2591743D7E7DDACC189C6DDB4DE791762F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:de:94:b0:18:f6:8d:5c:d3:f7:ce:8e:6f:9d:
                    49:b0:97:ff:9e:4a:8a:82:29:2a:23:43:c6:f2:a1:
                    28:ee:8b:dc:3f:86:31:d2:13:b8:e1:64:8a:0d:44:
                    f5:7c:91:f8:30:a5:07:fc:c6:b1:d5:62:ac:2a:0a:
                    10:57:4f:cb:78:79:4b:9f:b6:90:a6:fa:c4:5e:13:
                    65:3d:a8:70:a1:43:f0:30:40:09:9d:12:7f:c9:47:
                    9c:0a:70:0c:4d:c4:17:54:05:8c:df:6f:80:22:fa:
                    1a:d5:65:71:32:d7:9a:40:63:c6:f2:eb:1d:fa:67:
                    c4:30:d2:44:3d:75:28:fd:9a:3f:72:86:74:c6:47:
                    d5:b8:0a:c7:03:d0:7f:8d:04:b5:13:0f:60:ec:f5:
                    13:73:26:63:50:ff:cc:c4:ea:93:c5:77:97:24:a6:
                    69:c4:4a:12:c4:d5:7e:42:64:9c:c9:a1:38:67:6f:
                    61:23:6b:2a:6c:5f:00:a0:45:07:f8:f5:7f:15:1e:
                    5c:95:ea:12:fc:70:57:99:d2:a5:69:3d:62:d4:14:
                    b5:89:0f:05:30:74:a6:c9:5a:e1:83:88:d3:60:30:
                    85:7c:2e:35:32:65:35:1f:61:71:32:7f:3f:4d:3b:
                    3e:a2:12:1d:0b:bd:ee:b7:13:b5:b5:7e:18:02:e0:
                    52:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A7:92:BE:25:91:74:3D:7E:7D:DA:CC:18:9C:6D:DB:4D:E7:91:76:2F
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230343a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:204::/48

    Signature Algorithm: sha256WithRSAEncryption
         7e:7c:d6:e8:26:c7:e5:7d:f6:4f:7a:ab:17:8e:db:fc:6e:80:
         dd:32:8c:8e:27:9b:d9:9a:6b:ef:ef:87:f3:46:0d:0a:61:51:
         93:6d:46:fe:05:61:b8:3a:5d:05:66:5c:56:6e:2f:36:7d:db:
         e8:9a:5d:33:91:cc:59:dc:84:5d:45:53:13:d3:9a:32:13:5f:
         b4:3e:3f:3f:1e:a5:e0:c7:1b:30:b9:f4:18:a2:f7:8d:2d:d3:
         17:4f:a1:ed:ed:85:de:ca:a1:17:d1:8e:e2:df:1e:1a:a3:b8:
         87:2a:42:89:85:1e:40:c1:e1:d8:0f:24:5e:9e:d1:74:8b:82:
         dd:aa:35:e1:e5:8f:d9:43:c7:72:22:ae:1a:e3:8b:dd:e5:45:
         22:20:47:28:d7:3e:52:b3:33:16:cb:c5:4f:1b:98:1f:e8:c1:
         e1:d4:65:b1:90:e4:da:27:c6:7a:36:a4:fa:d0:70:e9:95:3e:
         97:a8:2a:59:73:5f:bd:4e:62:af:f1:e3:09:bf:95:e8:e5:d6:
         44:ee:35:99:3f:27:52:6d:cb:7a:f3:c5:16:47:b2:d5:69:01:
         a1:a7:e4:11:c8:c7:db:70:43:21:fb:2a:93:2c:00:02:ed:d1:
         71:6e:a9:73:16:2d:56:ec:2a:b8:4b:30:e2:e1:71:85:08:3e:
         95:24:d4:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org