Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/323830343a326339383a383030303a3a2f33332d3333203d3e20323635323239.roa
File:                     323830343a326339383a383030303a3a2f33332d3333203d3e20323635323239.roa (raw, json)
Hash identifier:          4FABkmjwcscu69q0uA2wp27HfS0BuXr04qXcKsmlkXA=
Subject key identifier:   48:E4:09:26:40:24:9B:81:85:44:1E:7A:83:32:68:3C:26:57:46:4A
Certificate issuer:       /CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
Certificate serial:       3740D278D062C626CBCF9508BADEF0C31821583E
Authority key identifier: 0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/323830343a326339383a383030303a3a2f33332d3333203d3e20323635323239.roa
Signing time:             Mon 09 Oct 2023 23:51:52 +0000
ROA not before:           Mon 09 Oct 2023 23:46:52 +0000
ROA not after:            Mon 07 Oct 2024 23:51:52 +0000
asID:                     265229
IP address blocks:        2804:2c98:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:40:d2:78:d0:62:c6:26:cb:cf:95:08:ba:de:f0:c3:18:21:58:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9
        Validity
            Not Before: Oct  9 23:46:52 2023 GMT
            Not After : Oct  7 23:51:52 2024 GMT
        Subject: CN=48E4092640249B8185441E7A8332683C2657464A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:90:fe:d0:27:01:8e:d9:fe:d4:8f:58:4a:53:
                    96:2a:00:68:dd:00:17:75:2f:48:c3:81:27:52:b3:
                    ba:0f:d3:88:e7:26:11:b2:b4:5f:21:31:fa:94:28:
                    a6:fe:b6:7e:7c:98:51:39:0e:f7:e9:33:eb:2e:fb:
                    33:86:f9:a4:18:f2:b1:c5:59:e3:3d:9b:c9:04:71:
                    ae:96:48:d1:c9:76:e0:ed:cb:04:c9:9d:cb:87:8c:
                    9d:12:86:63:14:40:bd:4a:3e:1c:42:00:4b:00:12:
                    cc:78:de:0a:0b:14:01:06:7e:79:10:4a:f4:ac:65:
                    cb:31:3d:8f:a4:53:c3:d1:0f:45:2c:4b:3c:e5:99:
                    d7:31:26:1e:05:67:74:44:39:cc:2d:54:39:c7:bd:
                    cc:4a:97:7b:42:35:9c:74:3e:12:83:1a:73:ad:98:
                    f3:65:4a:3d:46:65:d8:50:c9:ab:b3:65:d2:c3:04:
                    37:6c:fe:af:d3:35:0c:7f:19:9b:58:62:a6:97:59:
                    23:73:d1:4c:60:11:c6:56:81:99:42:1f:97:df:c6:
                    48:3d:aa:91:16:75:67:a6:a8:11:ad:8b:b0:11:e9:
                    c6:5a:da:48:44:22:ba:2b:68:f6:cc:94:c8:02:6f:
                    66:ff:e0:32:a2:5e:42:be:77:0b:55:4b:f6:76:af:
                    86:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:E4:09:26:40:24:9B:81:85:44:1E:7A:83:32:68:3C:26:57:46:4A
            X509v3 Authority Key Identifier:
                keyid:0F:9B:21:CA:94:19:DA:FD:F6:63:FF:AC:5D:81:58:97:1B:88:A9:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F9B21CA9419DAFDF663FFAC5D8158971B88A9C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/kA6biJdoJyqBwQNrubXgV4gZ22fFBxkGUtbL9xNxh4U/0/323830343a326339383a383030303a3a2f33332d3333203d3e20323635323239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2c98:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         25:1a:10:23:c8:1c:0a:cb:d5:49:90:71:77:0c:6e:cb:74:b0:
         eb:a6:74:a7:41:5f:f1:44:ca:a1:f5:02:ce:ff:db:7b:db:73:
         c7:45:48:35:b7:d2:5d:19:7a:f4:5a:cd:60:8b:b9:78:23:ad:
         2e:50:f6:58:74:f5:84:dc:88:5f:08:49:07:d8:06:b6:ca:6c:
         d1:8b:27:a6:e0:64:4b:53:f8:26:b4:e9:b5:fa:cf:55:73:74:
         ac:0d:13:2d:65:bc:2a:42:e2:4a:70:2d:a9:a8:5f:b8:1b:ae:
         8e:39:7c:ff:71:16:ba:3f:16:0a:fb:24:ce:0c:08:9c:70:a3:
         7c:1c:8f:06:da:82:e2:a0:8b:e4:15:84:b1:12:a9:62:39:e3:
         5e:11:98:cb:93:65:50:14:1e:9e:f3:9e:d1:b1:d6:6f:47:72:
         6e:db:4f:1c:6b:4b:a5:85:01:e8:97:01:0e:58:60:19:c2:59:
         de:e9:de:52:70:90:f1:1e:4b:84:74:4e:9e:92:3d:36:d7:ef:
         b4:cf:0f:85:9c:c2:a7:9d:88:b7:95:33:59:77:61:9b:e7:f7:
         06:a4:14:a4:fc:88:17:f3:74:19:4c:9b:40:d6:b8:d7:64:26:
         66:e2:61:44:4e:09:2c:58:92:73:3f:37:f1:08:fb:12:d1:1a:
         c1:11:11:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org