Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/323830343a366232303a383030303a3a2f33342d3334203d3e20323730333830.roa
File:                     323830343a366232303a383030303a3a2f33342d3334203d3e20323730333830.roa (raw, json)
Hash identifier:          k+lBubgNNzy8xf6F1mCBTCIvIHN2rGxJI51ebR48Tdo=
Subject key identifier:   A1:B9:0D:B3:E0:4A:B7:AA:E0:67:DF:A6:B5:30:32:33:B4:C4:C0:B1
Certificate issuer:       /CN=8E8EAB76424F963D218A026D0B5A1ABF5A09F987
Certificate serial:       09D2B4FE96989C7969978EA1DF2A715198E121C9
Authority key identifier: 8E:8E:AB:76:42:4F:96:3D:21:8A:02:6D:0B:5A:1A:BF:5A:09:F9:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E8EAB76424F963D218A026D0B5A1ABF5A09F987.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/323830343a366232303a383030303a3a2f33342d3334203d3e20323730333830.roa
Signing time:             Tue 18 Jul 2023 20:20:07 +0000
ROA not before:           Tue 18 Jul 2023 20:15:07 +0000
ROA not after:            Tue 16 Jul 2024 20:20:07 +0000
asID:                     270380
IP address blocks:        2804:6b20:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:d2:b4:fe:96:98:9c:79:69:97:8e:a1:df:2a:71:51:98:e1:21:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E8EAB76424F963D218A026D0B5A1ABF5A09F987
        Validity
            Not Before: Jul 18 20:15:07 2023 GMT
            Not After : Jul 16 20:20:07 2024 GMT
        Subject: CN=A1B90DB3E04AB7AAE067DFA6B5303233B4C4C0B1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:b5:c9:61:14:64:b5:56:2c:11:41:86:ab:13:
                    db:23:16:39:aa:8c:0e:bc:0d:a2:e1:20:2f:43:64:
                    85:da:9e:54:93:bb:59:6d:28:93:4b:2f:80:76:d3:
                    e0:a3:8f:4b:76:ea:2a:da:e2:50:70:ba:10:dc:e8:
                    01:99:a9:44:0f:a2:93:c4:60:32:28:fe:24:85:81:
                    17:9d:b5:cf:f7:bd:41:b6:7f:f6:09:f6:f3:a7:61:
                    a7:43:38:a0:83:60:a6:67:51:dd:2f:b2:6c:43:0b:
                    9f:de:e9:d9:42:6f:fc:8f:54:6e:51:6e:76:f3:43:
                    e3:11:21:6f:cb:5f:64:a5:f7:b2:63:b7:74:11:42:
                    99:f8:5e:45:c3:37:18:28:c7:c6:ae:39:84:69:16:
                    9c:97:8a:aa:81:0d:7d:a0:e1:36:f4:42:6f:47:6d:
                    fe:b8:4b:69:fe:5d:d7:11:01:ea:bb:38:1b:a9:93:
                    40:8d:21:92:82:3c:60:5a:28:9c:9d:e1:6b:3e:51:
                    e4:ab:2a:1a:ce:0b:e7:71:38:dc:81:b5:7e:1d:19:
                    de:f1:aa:c5:5c:ba:09:dc:cd:e8:93:c6:a2:9e:d9:
                    47:39:ae:2d:d5:86:8c:23:d6:0e:79:78:ac:61:36:
                    95:af:5a:27:be:a6:0e:a3:4b:34:a8:0b:05:6d:37:
                    d5:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:B9:0D:B3:E0:4A:B7:AA:E0:67:DF:A6:B5:30:32:33:B4:C4:C0:B1
            X509v3 Authority Key Identifier:
                keyid:8E:8E:AB:76:42:4F:96:3D:21:8A:02:6D:0B:5A:1A:BF:5A:09:F9:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/8E8EAB76424F963D218A026D0B5A1ABF5A09F987.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E8EAB76424F963D218A026D0B5A1ABF5A09F987.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/14HDtB3RDHx1Ka1BJGxjXx5Hbzfq79JaPoVs4oRBaxWr/0/323830343a366232303a383030303a3a2f33342d3334203d3e20323730333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6b20:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         66:b6:03:fe:ca:d2:60:95:3e:81:a8:c4:ba:9f:96:9b:5b:ac:
         4d:80:bf:35:bf:b0:39:d3:cb:8b:98:26:63:04:4b:8b:40:5d:
         50:dc:f0:ae:27:21:17:55:01:6f:53:bd:1d:8e:77:13:4d:b3:
         a8:e8:02:fa:fc:bd:54:91:4c:85:75:3b:d0:66:ad:6a:88:f3:
         fd:c0:ba:26:84:4b:2d:20:83:45:96:46:0d:ca:d0:c7:68:6e:
         76:e4:5d:92:9e:67:1a:bf:53:2b:5e:69:48:a5:4a:35:41:a3:
         ce:d1:74:96:2f:0b:16:ba:c4:cf:61:1e:84:2c:ff:a2:4b:f2:
         13:c6:4f:21:b3:a1:85:80:da:d2:a0:2a:af:09:b9:74:c9:79:
         e8:ae:06:22:3a:8f:97:10:3c:a4:c0:e0:fb:65:17:05:f4:65:
         14:ec:4d:a3:27:60:f2:b2:10:69:07:65:b4:6d:90:46:ff:6d:
         6b:4f:45:c1:e5:21:7e:0a:b4:13:e7:ec:ef:43:c2:8f:e8:52:
         0e:41:95:1f:29:13:6d:42:7a:15:10:54:bf:cd:22:76:e9:61:
         11:8e:a0:d4:e0:59:93:68:b0:1c:ed:63:45:5b:80:26:de:83:
         3e:48:37:6a:f5:50:9e:14:35:24:62:1b:7a:31:6c:29:bb:58:
         cb:29:52:2e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org