Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a363a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a363a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          oJJaJocfc7xdJ41FLLyW7NfU54wUUAcDOZC+HQeK6hQ=
Subject key identifier:   CC:05:AB:86:51:6B:15:D9:9C:55:B9:CC:9E:48:C9:95:6B:3C:4D:60
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       65C00C55A321D35C9CE5420B3751EC98EB821C9C
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a363a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:11 +0000
ROA not before:           Thu 03 Aug 2023 13:04:11 +0000
ROA not after:            Thu 01 Aug 2024 13:09:11 +0000
asID:                     262617
IP address blocks:        2804:90c:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c0:0c:55:a3:21:d3:5c:9c:e5:42:0b:37:51:ec:98:eb:82:1c:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:11 2023 GMT
            Not After : Aug  1 13:09:11 2024 GMT
        Subject: CN=CC05AB86516B15D99C55B9CC9E48C9956B3C4D60
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:62:39:7b:e6:71:45:c6:89:4c:e7:3d:20:92:
                    2f:50:ae:30:ab:94:47:fb:97:ca:75:d1:a0:fd:ad:
                    99:a3:7c:0b:19:72:81:f3:53:2f:84:5e:06:a3:8d:
                    65:27:07:32:af:5e:1b:ef:50:80:77:7d:19:45:f1:
                    01:a1:ec:ac:ab:3d:27:a0:a1:8e:3c:83:9b:24:06:
                    60:7a:93:f6:e0:0e:78:47:6d:df:e3:d2:74:b9:1a:
                    62:39:e4:c5:0a:29:7d:e8:b4:bf:f7:53:d4:db:6c:
                    58:f6:18:c4:b3:61:e6:26:d8:27:00:ae:8d:f8:e4:
                    ee:ab:58:d1:b4:3e:f3:20:10:51:46:6a:f2:23:15:
                    1c:d1:c4:0f:17:cf:b4:91:a2:98:10:f9:73:d9:f5:
                    80:ce:b5:dd:92:7b:2f:8c:e2:2a:fd:c2:a3:07:64:
                    9b:1e:32:61:17:c4:d0:9e:1c:9e:1b:78:d1:94:1e:
                    ab:a4:fc:59:89:fd:65:a1:af:cb:88:9c:da:56:b0:
                    12:7d:c1:3f:14:af:ab:f2:46:91:db:24:f3:43:4e:
                    ed:ac:4e:fb:18:93:fa:5c:ab:13:c9:6b:12:70:f4:
                    88:c6:55:02:4c:df:47:ca:dd:98:c4:6f:03:43:9e:
                    f2:fb:9e:fc:d1:c9:03:0a:ca:b2:a4:0f:8b:71:6c:
                    34:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:05:AB:86:51:6B:15:D9:9C:55:B9:CC:9E:48:C9:95:6B:3C:4D:60
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a363a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:e7:ce:a6:92:e1:11:7f:92:07:3d:c1:79:1c:64:95:7b:07:
         96:b5:90:01:9a:ba:78:cc:30:9c:39:73:97:4b:27:ce:57:f3:
         92:f2:77:4e:ee:35:43:40:0c:cc:3c:ff:49:40:27:c6:69:ea:
         1f:9f:c5:d4:4a:d0:58:86:d5:81:5d:d5:4c:3b:21:d0:3b:5c:
         d1:61:b1:de:ee:b5:de:bc:7a:6c:61:a4:29:ff:31:49:ed:e5:
         67:cf:02:e1:29:8f:2a:e1:ab:09:4c:73:de:8d:66:23:de:8a:
         99:29:a4:e2:e3:7d:90:14:dd:14:d2:bd:6b:d2:9d:0e:8b:27:
         2d:dd:2c:9e:c8:ea:4e:ea:35:4e:4b:e6:4b:0e:86:c5:51:1a:
         59:0d:4d:0c:58:63:59:f3:9a:a4:6a:29:a4:43:77:b6:d0:c2:
         c0:66:f1:74:62:db:b6:50:a8:79:f6:d7:59:13:63:3b:c0:d8:
         07:34:2d:f5:a0:d3:49:24:4d:81:2d:e0:41:10:a9:a3:c0:07:
         ac:ee:11:18:e2:05:2f:fa:5e:19:89:91:19:60:5a:23:3a:9e:
         a4:51:85:24:0b:0b:02:c4:e3:ca:6b:ad:6e:a8:65:c3:66:3b:
         5c:68:d7:c5:76:22:e0:d0:ae:13:79:b3:dc:39:2a:21:23:85:
         ad:63:84:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org