Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/323830343a6166343a3a2f33322d3332203d3e203532393330.roa
File:                     323830343a6166343a3a2f33322d3332203d3e203532393330.roa (raw, json)
Hash identifier:          qkuOx5gdiJQgW1Td50+scmcQv6//NEEYxsCx5oTW4Ho=
Subject key identifier:   9B:E6:24:C0:00:C7:40:0D:0F:BF:AE:AA:62:1B:CD:83:7C:25:B5:0F
Certificate issuer:       /CN=9F447BDED8BDE868DC45F27E97C658F459051FB1
Certificate serial:       2C8809B1AFC1D19AF7A238D9E0F21034608E7FA3
Authority key identifier: 9F:44:7B:DE:D8:BD:E8:68:DC:45:F2:7E:97:C6:58:F4:59:05:1F:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/323830343a6166343a3a2f33322d3332203d3e203532393330.roa
Signing time:             Wed 12 Jul 2023 18:33:06 +0000
ROA not before:           Wed 12 Jul 2023 18:28:06 +0000
ROA not after:            Wed 10 Jul 2024 18:33:06 +0000
asID:                     52930
IP address blocks:        2804:af4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:88:09:b1:af:c1:d1:9a:f7:a2:38:d9:e0:f2:10:34:60:8e:7f:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F447BDED8BDE868DC45F27E97C658F459051FB1
        Validity
            Not Before: Jul 12 18:28:06 2023 GMT
            Not After : Jul 10 18:33:06 2024 GMT
        Subject: CN=9BE624C000C7400D0FBFAEAA621BCD837C25B50F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:ab:6f:e3:8a:62:72:5d:f7:c5:fe:1d:5f:c2:
                    b4:43:5b:ab:7c:d1:df:27:b6:25:ec:7c:53:ea:4f:
                    84:5e:fd:48:69:cf:fd:26:e1:b9:c3:0e:b4:bf:b9:
                    e5:87:f4:e9:84:3b:39:f5:38:0c:63:45:58:26:6a:
                    ea:f3:f5:47:e3:fe:aa:e8:eb:6f:ed:a8:0c:1b:de:
                    2e:4d:af:1b:4b:50:95:11:89:e5:57:cb:8d:a2:78:
                    0a:78:99:72:c6:6a:38:b2:90:a8:ca:73:2a:d5:9d:
                    d6:94:ee:f5:4c:5c:f2:b7:6f:a9:e1:e6:bc:a4:c2:
                    a3:f8:05:b2:8f:2d:6e:8f:c0:11:ec:97:da:bb:6b:
                    3a:7d:57:33:40:ff:91:7d:14:3a:17:28:93:4e:9a:
                    b8:79:bf:1d:a7:3a:28:28:93:ca:56:e4:a2:d4:eb:
                    0b:0a:fc:de:fc:b1:4b:d5:3e:02:ca:33:61:0c:4a:
                    3a:3f:d2:f4:69:bd:bd:a9:02:e6:90:d6:fc:0c:fe:
                    58:cf:43:f3:6a:40:4a:b1:7a:52:46:a1:f5:72:e3:
                    cf:7d:a6:f1:9b:e1:df:a4:e2:5b:ca:f1:be:46:94:
                    6e:82:7c:88:1e:3b:43:b5:e8:77:91:c2:0a:39:b9:
                    aa:f4:6d:8f:79:d5:1a:dd:ba:ee:b9:3a:cc:1b:e9:
                    5d:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:E6:24:C0:00:C7:40:0D:0F:BF:AE:AA:62:1B:CD:83:7C:25:B5:0F
            X509v3 Authority Key Identifier:
                keyid:9F:44:7B:DE:D8:BD:E8:68:DC:45:F2:7E:97:C6:58:F4:59:05:1F:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F447BDED8BDE868DC45F27E97C658F459051FB1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/0/323830343a6166343a3a2f33322d3332203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:af4::/32

    Signature Algorithm: sha256WithRSAEncryption
         cf:d9:59:fb:fb:7b:e7:5f:59:71:e0:36:3a:00:08:0e:33:80:
         24:e9:52:78:4f:d5:17:9d:18:11:72:f0:89:79:2c:57:6a:35:
         11:c4:6b:e2:7f:11:67:04:ce:f2:af:0d:a0:e1:7b:23:1e:f9:
         cb:69:03:53:ef:40:20:76:55:f6:86:cb:27:ed:f8:79:a7:bc:
         7f:ad:38:f0:9b:78:34:e9:44:36:39:b9:44:2f:8b:a7:49:01:
         23:38:ca:17:53:6d:e0:f5:b9:01:8e:06:d6:8d:1f:b0:8c:dd:
         da:4f:d9:a1:24:af:ce:ae:7c:c2:7d:00:91:43:32:a5:f0:d3:
         3f:c4:5a:02:5a:5b:13:02:29:14:e2:d4:ae:5c:e2:84:f4:eb:
         03:a9:d0:09:31:cf:5b:af:4d:e2:80:b7:05:2c:66:f9:66:3d:
         32:da:bb:06:27:ed:4c:76:e4:cb:05:43:61:b8:b9:b3:b9:6b:
         81:fd:4d:e6:89:1c:6d:50:1c:eb:82:35:3a:f4:df:09:0b:9a:
         ec:5f:11:7d:22:63:79:08:0b:8f:80:12:2d:bc:c0:87:b6:09:
         7e:9a:0f:89:a3:fe:a0:bb:e2:81:19:22:af:31:66:2e:fa:3f:
         55:16:a6:69:df:c2:3f:fa:e0:84:b1:ac:85:09:c5:66:67:72:
         71:4a:28:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org