Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a353a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a353a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          20TqcbjLlXAC9LhkCBdcjJ20v2cE50MBYjbpjn98e4A=
Subject key identifier:   93:B2:03:31:F8:0D:9A:7E:DC:21:6B:4A:F0:51:EF:89:FD:16:CF:B4
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       33DC4C4DEFA55A536166E6459B3B6B626DE0DF03
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a353a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:13 +0000
ROA not before:           Thu 03 Aug 2023 13:04:13 +0000
ROA not after:            Thu 01 Aug 2024 13:09:13 +0000
asID:                     262617
IP address blocks:        2804:90c:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:dc:4c:4d:ef:a5:5a:53:61:66:e6:45:9b:3b:6b:62:6d:e0:df:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:13 2023 GMT
            Not After : Aug  1 13:09:13 2024 GMT
        Subject: CN=93B20331F80D9A7EDC216B4AF051EF89FD16CFB4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:dd:d0:5e:9e:41:0a:74:3d:a3:ee:ea:a0:c8:
                    1c:c8:1d:6f:70:93:85:c3:28:ea:a8:4b:32:77:29:
                    87:e2:25:0e:4a:f1:70:f0:72:1d:8c:d6:85:4b:62:
                    09:af:2f:f9:d0:cf:f2:25:ba:dd:d9:52:77:19:70:
                    7e:55:95:b8:6c:b2:41:ee:20:5b:9f:ba:13:09:38:
                    35:74:ee:cd:db:9a:9d:9f:34:e0:58:0e:08:59:66:
                    c7:c2:76:0a:8b:57:51:8f:16:98:d9:60:20:7e:06:
                    4a:49:3f:ba:9c:d1:c9:f9:45:13:d2:45:b7:2b:b3:
                    f4:39:8a:66:58:43:d3:e4:7c:a9:f6:a6:7b:6d:ba:
                    37:c0:81:bc:34:fd:65:cd:b4:1c:51:85:dc:a0:d3:
                    c8:60:cc:a0:20:22:8f:2d:a7:5c:88:33:ad:96:8d:
                    93:64:ad:2a:8b:95:5b:95:e1:27:8c:a6:05:2d:0d:
                    dc:c3:33:48:98:6d:b1:07:c9:21:ae:00:f7:5c:1f:
                    f0:98:9f:94:03:88:7d:85:dd:b1:51:a3:01:1c:6d:
                    b2:60:fe:8d:75:f3:61:80:6e:09:bc:ae:da:f9:c2:
                    b7:63:62:07:cf:30:e8:9c:1f:4e:57:0e:9e:43:d3:
                    13:cc:96:20:2c:76:33:d2:4b:98:ee:9e:5e:d4:5d:
                    a7:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:B2:03:31:F8:0D:9A:7E:DC:21:6B:4A:F0:51:EF:89:FD:16:CF:B4
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a353a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         21:37:35:3a:c5:02:f8:a7:17:9f:7e:1d:c2:d3:53:5f:f8:c8:
         7d:66:97:99:af:b9:61:f0:c0:a3:52:88:80:b5:47:0c:c7:55:
         60:af:ba:e4:39:41:7d:27:2c:50:d7:a9:a9:a5:92:61:28:af:
         29:b0:83:c2:82:e0:c9:d7:96:fb:ae:81:42:e1:5a:a5:af:e8:
         bc:76:0f:58:87:ea:4a:cd:ef:37:5a:c4:30:18:d0:77:38:f5:
         d4:0a:28:07:d8:b5:64:83:5c:38:ed:da:2e:f1:7b:17:33:3a:
         41:5e:86:9e:c9:c8:36:30:8f:48:85:39:56:0f:4e:a8:36:02:
         7d:8c:5e:ad:9f:2d:6b:83:6a:57:f1:37:3e:12:6c:e5:60:50:
         77:bf:d7:64:d4:54:07:f4:13:9d:46:58:2b:8b:d7:1b:55:fc:
         c8:74:75:f8:1f:ec:8d:57:4e:ec:13:2e:81:cb:2e:5b:f2:d4:
         21:34:b1:9d:87:67:3a:2b:6f:c7:ce:e9:6d:46:5f:d4:45:cb:
         55:a6:06:e8:32:2b:63:75:33:d6:48:12:72:ed:33:d0:b1:b7:
         db:32:5c:f8:24:d4:ac:c5:92:d8:b2:10:db:9d:34:35:51:6b:
         15:f3:91:f7:cb:1c:97:f0:fd:f8:58:ac:2a:0e:d4:ff:8c:d1:
         a1:91:40:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:32 2024 by rpki-client on console-fra.rpki-client.org