Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a3a2f33332d3333203d3e20323639353332.roa
File:                     323830343a363631343a3a2f33332d3333203d3e20323639353332.roa (raw, json)
Hash identifier:          me7fT9jg7zdncRiKEylXvKMjjU9QJEJyc2xYcKzMLUQ=
Subject key identifier:   32:EB:A7:C1:0A:E4:77:A8:43:80:1C:39:23:08:01:A0:43:40:C7:A5
Certificate issuer:       /CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
Certificate serial:       28DBED35209E2C0003D8431BC49A421C98690279
Authority key identifier: 8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a3a2f33332d3333203d3e20323639353332.roa
Signing time:             Sat 16 Sep 2023 19:32:08 +0000
ROA not before:           Sat 16 Sep 2023 19:27:08 +0000
ROA not after:            Sat 14 Sep 2024 19:32:08 +0000
asID:                     269532
IP address blocks:        2804:6614::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:db:ed:35:20:9e:2c:00:03:d8:43:1b:c4:9a:42:1c:98:69:02:79
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6
        Validity
            Not Before: Sep 16 19:27:08 2023 GMT
            Not After : Sep 14 19:32:08 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:2b:cc:d2:02:da:52:c1:2e:01:02:c4:f9:bf:
                    7b:91:da:a6:c5:1c:05:75:df:9d:0c:8f:3b:ca:ac:
                    a0:a6:d4:20:a8:ce:08:2d:a8:46:30:54:72:52:4a:
                    92:80:f9:0f:a5:1f:c0:db:37:e6:f6:10:dc:59:f2:
                    4c:c9:c9:57:8d:d8:72:80:7f:3e:10:02:a2:a4:95:
                    4f:a3:29:9c:e4:81:e8:4f:b9:e2:ae:1f:91:8a:a5:
                    b6:b0:63:e5:43:81:9e:8f:4a:8f:e0:fe:fe:4d:b1:
                    83:be:e7:a0:d8:61:58:b3:67:53:77:44:c2:ab:cb:
                    97:a6:00:ac:0f:e6:11:a2:9e:6b:32:f2:2a:da:72:
                    cb:c9:c1:99:4d:a9:b9:b9:e9:ed:06:f1:7c:4f:9d:
                    fb:e7:76:78:6c:36:68:1c:3c:ec:b3:64:10:d7:32:
                    cd:d8:e2:3c:d3:bd:79:83:b8:6f:dc:07:51:15:a9:
                    ef:34:53:67:ab:20:3a:e0:8f:a4:11:42:a6:69:89:
                    e3:9a:41:6a:ae:a4:55:33:9b:1a:f3:a6:f7:9a:6a:
                    a8:e8:80:e8:db:d0:ca:d2:d8:b9:9f:90:a4:45:b0:
                    08:68:b5:fc:81:4a:c6:1b:4e:c1:61:d4:70:89:a1:
                    80:59:88:50:39:db:c5:6a:3d:4a:63:17:53:39:9a:
                    2f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:EB:A7:C1:0A:E4:77:A8:43:80:1C:39:23:08:01:A0:43:40:C7:A5
            X509v3 Authority Key Identifier:
                keyid:8E:1C:7A:BA:AC:76:2E:88:94:83:2A:3C:D3:26:E1:0F:EA:B3:C6:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1C7ABAAC762E8894832A3CD326E10FEAB3C6B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKVbb1MNSL8RAregAc3MkWsgMkw7fK2FbEzkDfSwk8N2/0/323830343a363631343a3a2f33332d3333203d3e20323639353332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6614::/33

    Signature Algorithm: sha256WithRSAEncryption
         44:67:1e:3e:d8:f6:6c:c9:6a:9f:0d:c3:72:db:75:1a:b6:df:
         3e:6b:26:54:4e:f8:2b:7f:f0:2c:f7:40:05:52:ca:e8:04:45:
         b8:da:c3:51:ed:09:91:08:44:36:d9:bd:ff:7a:40:0c:dc:5c:
         f1:b3:1f:bc:2c:e1:92:21:31:c9:c8:5e:ed:ed:3b:ce:ff:23:
         bf:f7:d0:0e:7c:16:7b:76:ef:c2:b2:80:7a:c6:ff:59:8d:17:
         b7:01:fb:e8:40:ae:5c:c3:fb:19:5d:f9:ea:0f:b2:c8:1a:2c:
         65:db:ea:47:a1:25:5a:3c:30:54:1c:5c:0f:16:6a:14:79:f3:
         1d:21:8f:17:7d:98:29:65:c0:5b:ab:bf:93:bb:ec:9c:49:34:
         f5:f6:24:f9:52:77:a1:55:9a:04:a2:54:5b:95:03:48:25:bf:
         3d:4d:8d:6e:1e:51:ba:94:d1:5a:9c:04:6a:01:20:f0:f5:a2:
         87:69:47:eb:3c:37:e0:0c:9d:46:54:bd:dd:f7:66:00:00:be:
         39:51:30:1f:39:1d:77:3f:77:66:e0:85:3b:28:2e:31:f2:37:
         55:56:5f:8b:9f:47:20:5d:33:c4:bd:3a:66:a0:69:71:e1:d7:
         e3:7f:0b:e6:44:47:98:57:6b:ea:aa:6a:20:27:31:fe:51:02:
         6e:c1:2a:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org