Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a343a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a343a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          +T/AJ0qo6280yI2XoBAeTtstg/Ug9XThQPGyG6f2Piw=
Subject key identifier:   C2:12:80:D6:B1:CF:6C:6C:89:04:9E:A3:39:4B:E1:1E:38:77:6B:3D
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       0FE5BF639C8CB25DE9E99059E64307FF466FF3D4
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a343a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:00 +0000
ROA not before:           Thu 03 Aug 2023 13:04:00 +0000
ROA not after:            Thu 01 Aug 2024 13:09:00 +0000
asID:                     262617
IP address blocks:        2804:90c:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0f:e5:bf:63:9c:8c:b2:5d:e9:e9:90:59:e6:43:07:ff:46:6f:f3:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:00 2023 GMT
            Not After : Aug  1 13:09:00 2024 GMT
        Subject: CN=C21280D6B1CF6C6C89049EA3394BE11E38776B3D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:b7:f4:b6:e0:7d:48:be:7b:0d:17:e7:6c:af:
                    d5:38:b2:09:e4:99:2a:2e:bd:7e:a3:9d:fd:e4:c6:
                    b4:9e:4b:b3:4c:fa:02:93:f6:0c:d8:27:c8:e9:4a:
                    f3:31:c4:4f:9a:eb:76:92:2a:c4:64:3d:26:25:9a:
                    0a:3d:9c:ec:20:39:e9:e9:bf:ce:c9:96:30:1c:c5:
                    18:d4:b1:4d:47:56:6d:d7:13:db:9e:39:f8:88:dd:
                    7d:26:d3:c0:dc:22:9e:b1:de:8e:27:d2:3f:c4:b5:
                    38:6c:e8:c1:58:70:3f:19:9e:eb:ee:1b:23:aa:58:
                    3d:af:37:ac:c8:c9:b0:35:20:72:7a:8b:aa:d5:84:
                    c6:aa:7f:58:54:49:d2:8b:18:28:6c:11:69:6c:96:
                    78:5e:18:a9:e2:4d:b8:06:ed:a9:ec:82:08:8b:54:
                    43:99:74:49:c7:1f:36:38:9f:6b:f8:18:70:97:6d:
                    de:4a:d1:f4:d7:46:c8:43:4a:0e:d9:7f:ca:06:70:
                    13:98:46:f3:62:74:52:65:c1:94:58:42:b3:69:6f:
                    f1:4f:b0:b7:57:65:24:db:23:52:36:48:41:49:20:
                    f7:53:d5:da:92:fc:1d:47:7b:eb:4d:5b:29:a8:bd:
                    df:b4:55:b3:8d:40:8f:d7:f3:ed:6a:6a:a2:5d:84:
                    48:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:12:80:D6:B1:CF:6C:6C:89:04:9E:A3:39:4B:E1:1E:38:77:6B:3D
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a343a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         1f:83:e1:16:8f:21:bb:45:5b:4a:5e:5f:fa:91:31:e1:8f:10:
         bd:15:9e:6f:c2:90:66:2d:53:2d:a2:0f:e9:60:61:1a:1f:a3:
         38:70:e7:9b:fc:18:ba:de:4e:ec:ed:4d:58:2b:a8:49:d7:13:
         c3:38:da:6c:52:87:ff:58:63:42:ff:37:4b:0b:f4:54:83:df:
         7a:5e:40:18:71:18:36:8b:ee:1b:08:07:6b:df:92:0a:79:78:
         a7:cd:df:1d:07:01:b4:84:48:4d:dc:fd:29:a6:0b:ae:c7:a7:
         32:34:bd:6b:91:2b:11:92:0d:f2:5f:f7:e9:31:d8:86:15:ce:
         24:ab:cb:ca:10:b0:9d:98:af:4d:27:93:ee:20:13:0b:8e:d4:
         d2:aa:82:b6:58:2e:a3:6e:1a:ac:68:23:61:08:c6:00:ac:b1:
         48:62:86:d2:a8:9d:03:e5:de:89:32:0b:5b:7e:d9:8a:4f:83:
         5d:a1:78:87:85:1f:97:5a:ad:3b:45:5b:b0:70:dd:75:62:ec:
         65:01:7f:f2:c3:f0:33:78:bd:a8:e8:0d:5f:25:a1:49:62:cf:
         c8:46:92:29:30:e6:71:d2:95:f3:1a:53:6b:cc:a8:6f:72:3a:
         a2:d2:ae:62:be:42:77:a6:8c:71:34:b7:a5:ae:e4:4a:d4:13:
         ee:62:bb:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org