Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/323830343a373964343a3a2f33322d3332203d3e20323731333330.roa
File:                     323830343a373964343a3a2f33322d3332203d3e20323731333330.roa (raw, json)
Hash identifier:          1SWwb+o0/0NlOK1peE2N54MWlk++2aNuRErbqOCDBco=
Subject key identifier:   AC:3C:F5:88:74:2F:AD:3B:BF:F7:94:7C:1D:15:66:58:F6:6A:6F:3B
Certificate issuer:       /CN=8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE
Certificate serial:       501C36CA5DC78D1DBD2886AC24EA0F44460378DD
Authority key identifier: 8B:1A:F1:93:2D:9A:8C:21:DF:C9:26:8E:9F:A9:30:8C:30:4C:58:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/323830343a373964343a3a2f33322d3332203d3e20323731333330.roa
Signing time:             Tue 11 Oct 2022 15:56:50 +0000
ROA not before:           Tue 11 Oct 2022 15:51:50 +0000
ROA not after:            Tue 10 Oct 2023 15:56:50 +0000
asID:                     271330
IP address blocks:        2804:79d4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:1c:36:ca:5d:c7:8d:1d:bd:28:86:ac:24:ea:0f:44:46:03:78:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE
        Validity
            Not Before: Oct 11 15:51:50 2022 GMT
            Not After : Oct 10 15:56:50 2023 GMT
        Subject: CN=3082010A0282010100FC1C616076FF8EF555B507AE5514E48DE0A2EAD809B7BA5C3D07BED5195C534763B260C4497BE8A1FD3A17752541AD8A07A2BAA6FB7EBEF74B6D454343CA1BBFADC55F210B8280EC565012ACCFACB715F40AEB9E4961171B4F3D62B089D0767F6AD5BA54A17092EDEC82A057D973688905C65519BACDDDDE4A26730EE729265C9DEF4DDCAB61634739E20631B274BDA58F3E2CED8C65688126A7921F4011A2CB48759B8146C33633DECC4C397F17298D4C67D6D44FC37B00ED313300A3C27BD43E777461F1EA12DD88841B5E856232F74823150B8912C0CBA25C750D5301B885CB6522B190008BCADC83D1939ED9C0FD8EBD1CC8CC736DF704B55760EF1925390203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fc:1c:61:60:76:ff:8e:f5:55:b5:07:ae:55:14:
                    e4:8d:e0:a2:ea:d8:09:b7:ba:5c:3d:07:be:d5:19:
                    5c:53:47:63:b2:60:c4:49:7b:e8:a1:fd:3a:17:75:
                    25:41:ad:8a:07:a2:ba:a6:fb:7e:be:f7:4b:6d:45:
                    43:43:ca:1b:bf:ad:c5:5f:21:0b:82:80:ec:56:50:
                    12:ac:cf:ac:b7:15:f4:0a:eb:9e:49:61:17:1b:4f:
                    3d:62:b0:89:d0:76:7f:6a:d5:ba:54:a1:70:92:ed:
                    ec:82:a0:57:d9:73:68:89:05:c6:55:19:ba:cd:dd:
                    de:4a:26:73:0e:e7:29:26:5c:9d:ef:4d:dc:ab:61:
                    63:47:39:e2:06:31:b2:74:bd:a5:8f:3e:2c:ed:8c:
                    65:68:81:26:a7:92:1f:40:11:a2:cb:48:75:9b:81:
                    46:c3:36:33:de:cc:4c:39:7f:17:29:8d:4c:67:d6:
                    d4:4f:c3:7b:00:ed:31:33:00:a3:c2:7b:d4:3e:77:
                    74:61:f1:ea:12:dd:88:84:1b:5e:85:62:32:f7:48:
                    23:15:0b:89:12:c0:cb:a2:5c:75:0d:53:01:b8:85:
                    cb:65:22:b1:90:00:8b:ca:dc:83:d1:93:9e:d9:c0:
                    fd:8e:bd:1c:c8:cc:73:6d:f7:04:b5:57:60:ef:19:
                    25:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:3C:F5:88:74:2F:AD:3B:BF:F7:94:7C:1D:15:66:58:F6:6A:6F:3B
            X509v3 Authority Key Identifier:
                keyid:8B:1A:F1:93:2D:9A:8C:21:DF:C9:26:8E:9F:A9:30:8C:30:4C:58:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B1AF1932D9A8C21DFC9268E9FA9308C304C58AE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FwGpKehJjQpxLqrMdSukg6s5vbHgunHntSmUFekanVK/0/323830343a373964343a3a2f33322d3332203d3e20323731333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:d9:c0:7d:e0:39:20:0e:8a:8d:2b:1a:ec:ea:47:5d:f5:44:
         11:b1:3e:4f:8b:c9:1b:6f:83:04:09:ca:36:30:33:1a:ca:cd:
         61:7e:88:39:61:c6:c9:9e:ea:43:8b:ae:f0:07:56:de:04:ee:
         37:b1:a6:f6:b9:39:ea:b8:10:b3:c1:01:64:29:3d:57:8e:d9:
         c2:59:f5:2a:8e:36:05:4c:b4:93:4d:b9:15:61:3f:60:07:05:
         81:ca:53:08:bf:96:cb:4f:2d:41:41:66:30:62:22:9c:5d:f8:
         b6:1a:b2:5d:68:f9:48:fe:02:88:e5:6c:9d:43:82:c0:28:85:
         7d:8f:09:17:2b:75:16:ae:e9:f3:b5:a9:3e:ae:15:b2:bf:42:
         3f:0f:bf:4e:32:e3:9a:a2:7b:d1:5b:9c:83:2d:65:f8:59:df:
         f3:84:25:ae:23:52:26:a1:7f:22:aa:41:31:c5:d7:0e:52:f5:
         8d:1d:ee:e9:b1:ff:50:29:57:a8:c9:33:d3:8e:74:3e:22:73:
         bf:c5:bd:70:29:a6:d7:b3:46:3b:17:ba:2c:39:79:2e:6f:78:
         ce:d1:17:79:72:0e:37:65:93:ef:9f:30:2d:a1:e2:e3:9a:ec:
         5a:70:eb:96:ad:9e:ab:f1:88:fa:82:23:59:b4:cc:57:52:bd:
         aa:46:f6:37
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:02 2024 by rpki-client on console-ams.rpki-client.org