Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jx9VYdBA2u8YQmcyw5CdfJCMdspXpPBtpmuQPoerHUy/0/323830343a386437343a3a2f33322d3334203d3e20323733333538.roa
File:                     323830343a386437343a3a2f33322d3334203d3e20323733333538.roa (raw, json)
Hash identifier:          PjW4kRhjAQfKRUWTCAFxAZ2WIoyxOe2UnD0txbrlZQE=
Subject key identifier:   A9:A2:97:99:BF:0F:30:A0:1C:E2:9C:46:A6:0F:89:74:0D:E8:FA:72
Certificate issuer:       /CN=1196CC06328D06E4DA084EAF6336F0F0E0750923
Certificate serial:       6F8B4C4FD9E5E25E90CA7F4AD96AC57BAB36D115
Authority key identifier: 11:96:CC:06:32:8D:06:E4:DA:08:4E:AF:63:36:F0:F0:E0:75:09:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1196CC06328D06E4DA084EAF6336F0F0E0750923.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jx9VYdBA2u8YQmcyw5CdfJCMdspXpPBtpmuQPoerHUy/0/323830343a386437343a3a2f33322d3334203d3e20323733333538.roa
Signing time:             Mon 30 Oct 2023 18:45:12 +0000
ROA not before:           Mon 30 Oct 2023 18:40:12 +0000
ROA not after:            Mon 28 Oct 2024 18:45:12 +0000
asID:                     273358
IP address blocks:        2804:8d74::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:8b:4c:4f:d9:e5:e2:5e:90:ca:7f:4a:d9:6a:c5:7b:ab:36:d1:15
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1196CC06328D06E4DA084EAF6336F0F0E0750923
        Validity
            Not Before: Oct 30 18:40:12 2023 GMT
            Not After : Oct 28 18:45:12 2024 GMT
        Subject: CN=A9A29799BF0F30A01CE29C46A60F89740DE8FA72
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:36:c3:fd:bc:7b:9d:ac:32:b2:a5:5a:a9:10:
                    ad:b6:b4:30:37:45:c0:51:52:3c:bd:81:f8:ca:73:
                    ac:59:49:9d:c8:04:21:c9:0d:6f:ce:89:0c:3a:8d:
                    d1:68:c6:d6:46:24:64:e1:be:20:a1:20:93:e7:52:
                    34:b5:30:22:22:0b:ae:66:c9:5e:e5:89:36:1c:7b:
                    d2:47:ef:81:8f:4e:cf:d1:4e:b5:52:d4:4a:a5:16:
                    b0:7d:8f:5f:77:52:9a:d1:ad:61:7d:0a:2a:b9:b5:
                    25:67:e1:9c:3d:6e:28:27:37:36:4d:38:f2:e7:cf:
                    48:80:0e:f4:0d:d8:29:c9:a4:79:df:e9:b1:e5:33:
                    72:4e:b5:0c:e2:d3:66:81:44:0c:a9:20:76:ae:c7:
                    5f:93:b8:52:9f:34:b7:93:ba:d6:2b:ce:d5:4c:34:
                    1f:bc:e6:b5:ae:b4:e0:9e:58:f1:83:b1:5a:e0:e1:
                    1c:05:57:c2:b6:cf:3f:2e:11:89:63:2d:9e:d0:40:
                    91:c5:14:63:37:5b:39:c6:2f:58:d8:ea:4e:8a:7c:
                    ce:82:c9:5c:8a:58:fe:85:7a:d1:72:59:dd:31:ea:
                    93:91:5d:9b:fe:6d:d7:48:1f:4d:24:39:5c:00:45:
                    60:fd:e7:38:8c:23:a8:dd:1c:38:88:d8:ee:f2:8c:
                    6b:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:A2:97:99:BF:0F:30:A0:1C:E2:9C:46:A6:0F:89:74:0D:E8:FA:72
            X509v3 Authority Key Identifier:
                keyid:11:96:CC:06:32:8D:06:E4:DA:08:4E:AF:63:36:F0:F0:E0:75:09:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jx9VYdBA2u8YQmcyw5CdfJCMdspXpPBtpmuQPoerHUy/0/1196CC06328D06E4DA084EAF6336F0F0E0750923.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1196CC06328D06E4DA084EAF6336F0F0E0750923.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jx9VYdBA2u8YQmcyw5CdfJCMdspXpPBtpmuQPoerHUy/0/323830343a386437343a3a2f33322d3334203d3e20323733333538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8d74::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:0c:68:dd:e4:a0:b9:2c:2e:72:29:82:b4:38:fd:74:e8:6f:
         46:a1:99:f1:9e:49:55:a6:fa:e5:11:0b:9f:41:db:09:84:0f:
         c8:38:0f:17:75:89:a5:56:19:fb:c3:a9:26:ce:ce:fa:4c:b0:
         cb:b3:19:64:6e:68:89:79:1f:b4:5a:53:3f:59:22:4b:2a:a0:
         28:23:fb:2f:a4:7f:44:cb:c4:44:dd:a4:a4:b6:55:6f:84:3a:
         d9:1b:f9:c0:d7:6c:ba:75:6a:4d:34:17:03:37:ce:1c:c6:52:
         5c:ab:67:60:30:fa:ec:2e:1c:63:3b:6d:73:1c:0d:fb:3f:61:
         ca:d7:c2:f5:0d:1c:b9:4d:f1:87:a3:ad:5b:04:74:a2:85:e4:
         eb:90:25:0a:26:01:7f:e1:56:6c:70:b1:78:f0:cb:70:c5:0d:
         4c:f3:e4:a1:c0:a3:6d:b3:85:98:f3:d0:e3:d2:d0:92:4a:b1:
         44:60:ce:91:cb:1b:74:23:24:d1:62:89:d1:a6:29:f5:d8:2e:
         06:a1:8e:85:2a:b3:82:77:45:29:5e:e4:1b:15:32:33:01:60:
         27:16:d1:c9:c2:b0:0c:11:00:4c:4b:f6:34:84:2f:cb:18:01:
         ad:84:f0:93:02:bc:9e:39:2e:9e:f4:1d:43:ee:9c:04:df:af:
         12:b4:83:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org