Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/323830343a323633343a323131303a3a2f34342d3434203d3e20323634333332.roa
File:                     323830343a323633343a323131303a3a2f34342d3434203d3e20323634333332.roa (raw, json)
Hash identifier:          R9ngKK+hE6+Q9PQWFP/3vRARA0os4uZpWkElG8QAFrc=
Subject key identifier:   65:66:66:0D:6A:2A:9C:3D:B3:3F:DB:85:98:20:AE:27:91:8D:A5:2C
Certificate issuer:       /CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
Certificate serial:       441387A2970CCD76C221CA53BEA0A84EBB0ED805
Authority key identifier: F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/323830343a323633343a323131303a3a2f34342d3434203d3e20323634333332.roa
Signing time:             Wed 15 Feb 2023 18:48:38 +0000
ROA not before:           Wed 15 Feb 2023 18:43:38 +0000
ROA not after:            Wed 14 Feb 2024 18:48:38 +0000
asID:                     264332
IP address blocks:        2804:2634:2110::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:13:87:a2:97:0c:cd:76:c2:21:ca:53:be:a0:a8:4e:bb:0e:d8:05
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F427EBED04EEA9E14CD726DEB3CC299993C1802E
        Validity
            Not Before: Feb 15 18:43:38 2023 GMT
            Not After : Feb 14 18:48:38 2024 GMT
        Subject: CN=6566660D6A2A9C3DB33FDB859820AE27918DA52C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f3:84:fb:73:b9:b3:61:94:b6:88:5a:3d:b5:58:
                    d6:c5:1e:8e:ec:88:b6:80:69:cb:78:38:5e:58:0f:
                    51:84:8d:62:bc:e1:f1:c9:4b:a9:11:73:d4:8c:50:
                    57:e4:21:e5:e0:e2:2d:48:58:9b:7e:b3:24:59:7d:
                    8a:8e:71:23:9e:28:78:0b:d5:4d:94:f2:26:5e:d9:
                    4a:db:c8:b7:94:f7:0e:99:7c:4d:32:d3:e4:cc:1b:
                    4b:8f:eb:be:c5:a0:c0:b6:89:4a:0f:58:cb:43:d6:
                    8e:30:f0:60:42:66:0f:d0:98:d8:fa:ee:3b:33:75:
                    a1:51:43:ad:75:b2:ba:e4:6c:7f:e0:1a:45:66:d3:
                    11:6c:9c:f8:ab:19:8f:78:c4:8c:ce:cb:49:c2:72:
                    89:29:c0:8c:40:3a:88:dc:8d:4b:aa:c7:0c:45:26:
                    d6:d1:4a:7f:ee:bc:0b:9b:9b:a3:a5:16:7e:a0:78:
                    8b:08:d8:2a:20:e7:63:69:a6:f9:d7:a4:b2:64:f1:
                    4d:1f:1b:1c:2e:d8:98:2f:da:3c:6e:98:d2:c1:51:
                    1f:68:b5:b9:2b:a7:e5:fd:c6:a8:d6:dc:01:65:d4:
                    17:5d:03:47:ec:69:0b:45:52:ad:14:82:39:4d:8e:
                    9b:1c:ce:07:9d:9d:11:86:0d:d5:5e:2d:84:27:17:
                    8a:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                65:66:66:0D:6A:2A:9C:3D:B3:3F:DB:85:98:20:AE:27:91:8D:A5:2C
            X509v3 Authority Key Identifier:
                keyid:F4:27:EB:ED:04:EE:A9:E1:4C:D7:26:DE:B3:CC:29:99:93:C1:80:2E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F427EBED04EEA9E14CD726DEB3CC299993C1802E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G9NPfZebqgHoP5yNCzUxa3JMSPjKTNeDfxQQvkpPJNFM/0/323830343a323633343a323131303a3a2f34342d3434203d3e20323634333332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2634:2110::/44

    Signature Algorithm: sha256WithRSAEncryption
         11:56:8d:8e:08:cd:59:b4:b1:d8:28:16:8d:6f:10:ec:cf:7e:
         38:08:d3:27:92:9e:87:bc:c8:24:42:99:3e:f5:b1:9f:d1:1b:
         fb:4d:77:72:84:0e:37:59:92:83:07:22:7b:c0:dc:7a:1c:b0:
         c7:c0:04:1b:97:91:19:91:ee:c9:fd:5e:39:ef:05:54:52:9d:
         86:c3:26:9f:22:58:32:19:5a:3d:db:2a:24:7e:1d:d5:74:8d:
         ee:22:90:16:9d:08:16:8a:9c:09:bf:d5:a6:bf:79:76:f1:b1:
         95:b9:d9:f0:37:cc:77:4b:06:d7:ce:f5:15:88:4d:98:10:65:
         89:d8:03:18:df:17:6e:ad:2d:2f:aa:fc:f3:ce:d7:af:d7:89:
         94:f8:0f:9f:50:3f:0d:ad:60:30:6f:78:65:09:32:67:aa:fe:
         5e:7c:a3:b3:4f:7b:d2:d1:24:df:12:f1:40:07:ba:96:2c:bf:
         51:2a:dc:65:fd:89:7e:3a:4c:55:87:63:34:0e:95:ca:a3:43:
         0a:59:c5:9e:b2:7d:e6:43:f3:6a:47:57:dc:03:34:07:69:19:
         4b:ea:f9:f7:c9:7f:30:24:80:a6:e4:7c:59:5d:f1:04:ef:5f:
         ba:8a:35:7e:05:fb:0a:8b:4e:7a:51:90:5f:b5:56:3b:ed:0b:
         07:df:0b:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org