Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/323830343a343033303a3a2f33322d3334203d3e20323635393433.roa
File:                     323830343a343033303a3a2f33322d3334203d3e20323635393433.roa (raw, json)
Hash identifier:          zggqrSWLkjcPxPMA8xUOkQiD3iySM6DgV6iOhebGs/8=
Subject key identifier:   42:74:59:BF:0A:7F:5B:E7:63:6F:29:CB:96:2C:4A:FB:94:C2:CD:08
Certificate issuer:       /CN=909D66A56DAB994D661A76537BBDF66696E55FAA
Certificate serial:       01DAFD04CE9C4CD7487674D9910C1E1469A02626
Authority key identifier: 90:9D:66:A5:6D:AB:99:4D:66:1A:76:53:7B:BD:F6:66:96:E5:5F:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/909D66A56DAB994D661A76537BBDF66696E55FAA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/323830343a343033303a3a2f33322d3334203d3e20323635393433.roa
Signing time:             Mon 05 Jul 2021 16:54:28 +0000
ROA not before:           Mon 05 Jul 2021 16:49:28 +0000
ROA not after:            Mon 04 Jul 2022 16:54:28 +0000
asID:                     265943
IP address blocks:        2804:4030::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:da:fd:04:ce:9c:4c:d7:48:76:74:d9:91:0c:1e:14:69:a0:26:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909D66A56DAB994D661A76537BBDF66696E55FAA
        Validity
            Not Before: Jul  5 16:49:28 2021 GMT
            Not After : Jul  4 16:54:28 2022 GMT
        Subject: CN=3082010A0282010100BD0BA68A9E7E0B98B45380324D1EE659C9B9DC6D60A048889D933F97DF0D7FC9B0E1F1F33AA9726F5C0FE2534DF91133CCBB7DC5B05BC8AA54B5412E33B6CF7784B95342926BC674E48C04689AA13859408E35E2E9B7ED8242FC9435047085A29B4AD7079AB7B8B39E67ADA2FA7A93093B783DDEFE7D5258927DFA7D517C01FEDDAF8DEE97B1829CAD5961A045CF85C03BB8F27C7AA1BE86EF1D1EEFA09F333BFB3C126BEC2B78174599C00593E5E7F0D015FA414AA97B680987004304767A88D8A95C852CAE7CBF8A631B84B758ED390442EDDEDACDD6AAB271636A39D403E374BE1008D9286A55DFB0A04B92CD2A2936252DDAC80493176B4091E1E41814730203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:0b:a6:8a:9e:7e:0b:98:b4:53:80:32:4d:1e:
                    e6:59:c9:b9:dc:6d:60:a0:48:88:9d:93:3f:97:df:
                    0d:7f:c9:b0:e1:f1:f3:3a:a9:72:6f:5c:0f:e2:53:
                    4d:f9:11:33:cc:bb:7d:c5:b0:5b:c8:aa:54:b5:41:
                    2e:33:b6:cf:77:84:b9:53:42:92:6b:c6:74:e4:8c:
                    04:68:9a:a1:38:59:40:8e:35:e2:e9:b7:ed:82:42:
                    fc:94:35:04:70:85:a2:9b:4a:d7:07:9a:b7:b8:b3:
                    9e:67:ad:a2:fa:7a:93:09:3b:78:3d:de:fe:7d:52:
                    58:92:7d:fa:7d:51:7c:01:fe:dd:af:8d:ee:97:b1:
                    82:9c:ad:59:61:a0:45:cf:85:c0:3b:b8:f2:7c:7a:
                    a1:be:86:ef:1d:1e:ef:a0:9f:33:3b:fb:3c:12:6b:
                    ec:2b:78:17:45:99:c0:05:93:e5:e7:f0:d0:15:fa:
                    41:4a:a9:7b:68:09:87:00:43:04:76:7a:88:d8:a9:
                    5c:85:2c:ae:7c:bf:8a:63:1b:84:b7:58:ed:39:04:
                    42:ed:de:da:cd:d6:aa:b2:71:63:6a:39:d4:03:e3:
                    74:be:10:08:d9:28:6a:55:df:b0:a0:4b:92:cd:2a:
                    29:36:25:2d:da:c8:04:93:17:6b:40:91:e1:e4:18:
                    14:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                42:74:59:BF:0A:7F:5B:E7:63:6F:29:CB:96:2C:4A:FB:94:C2:CD:08
            X509v3 Authority Key Identifier:
                keyid:90:9D:66:A5:6D:AB:99:4D:66:1A:76:53:7B:BD:F6:66:96:E5:5F:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/909D66A56DAB994D661A76537BBDF66696E55FAA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/909D66A56DAB994D661A76537BBDF66696E55FAA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GQ2tU396DHQeLeebPY5S7xV6yHYWpZ8Rrb4GdNxhVPz4/0/323830343a343033303a3a2f33322d3334203d3e20323635393433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4030::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:08:90:53:b4:1d:f5:a7:5a:02:25:7f:c7:e7:d9:50:59:9f:
         21:9a:52:6b:3c:30:32:b9:75:ef:a9:82:ba:a8:e3:af:c4:f9:
         99:b0:4c:f6:87:ae:50:2e:b0:70:2e:df:6d:40:97:6f:cf:8c:
         41:b2:b9:49:44:c5:cf:d9:f7:36:6c:d7:ea:70:59:89:72:b6:
         71:e8:07:62:27:17:b7:4c:01:19:9e:10:20:71:2e:22:c8:21:
         e5:3c:0e:2e:0a:3b:39:46:45:ee:19:48:62:f4:e5:02:10:13:
         63:57:29:26:e5:b0:c9:dd:e3:fe:13:97:2d:4d:30:6d:60:83:
         40:5a:d2:77:8c:c5:09:10:66:ac:2b:43:22:42:c8:42:b5:24:
         32:9d:40:43:05:6b:be:6c:a0:60:b7:3c:e3:ba:b0:7c:9d:cb:
         67:9e:24:3f:0a:d8:bc:e0:b1:b0:a8:bc:e4:80:6c:ed:d3:41:
         4f:e3:f7:db:ed:b9:7e:26:6c:4f:26:3f:76:b9:cd:68:c5:3b:
         3a:95:a1:1e:bc:9c:a2:fd:1c:1d:05:76:b0:d3:96:f2:2b:66:
         f9:d1:f8:21:0f:40:8a:93:7b:1a:88:7d:07:32:9e:d2:b6:b7:
         5b:b0:3e:43:f0:cb:d8:67:50:2b:ea:74:1c:6f:d9:1c:73:d7:
         45:cc:27:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org