Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a383030303a3a2f33332d3333203d3e20323638343235.roa
File:                     323830343a353130343a383030303a3a2f33332d3333203d3e20323638343235.roa (raw, json)
Hash identifier:          BFSfHcyH9KkRCkHI4D8AGG+pXJn2fQgCGt8+TT97MlQ=
Subject key identifier:   1F:1D:D0:DA:F8:93:BC:B6:9B:37:DA:28:B7:81:B6:DA:89:DE:7C:D3
Certificate issuer:       /CN=8EF256D4FCA01CDB9A770856E1E10926567597F3
Certificate serial:       7B6EE7448E5E0A08A8E9D9AD4E7D21BFB78F15C9
Authority key identifier: 8E:F2:56:D4:FC:A0:1C:DB:9A:77:08:56:E1:E1:09:26:56:75:97:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EF256D4FCA01CDB9A770856E1E10926567597F3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a383030303a3a2f33332d3333203d3e20323638343235.roa
Signing time:             Tue 21 Mar 2023 14:36:30 +0000
ROA not before:           Tue 21 Mar 2023 14:31:30 +0000
ROA not after:            Tue 19 Mar 2024 14:36:30 +0000
asID:                     268425
IP address blocks:        2804:5104:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:6e:e7:44:8e:5e:0a:08:a8:e9:d9:ad:4e:7d:21:bf:b7:8f:15:c9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EF256D4FCA01CDB9A770856E1E10926567597F3
        Validity
            Not Before: Mar 21 14:31:30 2023 GMT
            Not After : Mar 19 14:36:30 2024 GMT
        Subject: CN=1F1DD0DAF893BCB69B37DA28B781B6DA89DE7CD3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:91:25:2e:32:d9:66:c5:22:08:84:1b:5c:37:
                    a5:5f:70:fb:47:dd:77:9a:78:c2:54:29:ae:e6:a9:
                    52:27:90:0a:24:45:8b:7d:20:11:78:d3:85:70:2e:
                    b2:c7:df:91:70:a7:9f:24:fa:10:f4:15:0d:d0:5b:
                    ff:a1:3f:6a:c0:81:25:fa:52:0d:f8:3f:d9:2d:8b:
                    d8:3d:2c:53:38:e1:6b:8d:42:3e:a4:db:eb:c3:47:
                    9e:c3:d8:99:8b:31:58:1e:be:82:1b:0d:fc:bd:11:
                    a7:a1:e4:2f:5b:a8:a8:4b:be:a9:6a:bf:af:9f:8d:
                    51:5e:ef:28:61:78:ab:bf:bb:53:4c:ec:d1:72:7e:
                    85:83:ac:07:5c:72:d8:e9:66:db:2e:6f:30:83:5f:
                    14:21:20:bf:86:5c:c8:39:fd:b5:b4:b3:2b:25:80:
                    32:a9:2e:2c:55:fa:87:3c:62:19:13:30:49:a0:67:
                    5f:6e:60:d1:c9:8f:4a:85:92:49:cc:76:c6:7d:08:
                    ec:36:09:74:8a:3d:c2:6f:f4:40:70:6a:bb:87:09:
                    9c:cc:a8:03:3e:fa:bc:72:e4:de:a8:4e:12:63:8f:
                    fb:7d:88:18:5d:69:93:1b:4c:b6:c8:4a:ec:41:cc:
                    f7:29:34:c4:b2:1e:95:10:ab:ee:47:27:d0:63:b3:
                    27:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1F:1D:D0:DA:F8:93:BC:B6:9B:37:DA:28:B7:81:B6:DA:89:DE:7C:D3
            X509v3 Authority Key Identifier:
                keyid:8E:F2:56:D4:FC:A0:1C:DB:9A:77:08:56:E1:E1:09:26:56:75:97:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/8EF256D4FCA01CDB9A770856E1E10926567597F3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EF256D4FCA01CDB9A770856E1E10926567597F3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2P2W5TGybSF7AWWK9AKkAdNNoBSVufyjy632uvXSCMVN/0/323830343a353130343a383030303a3a2f33332d3333203d3e20323638343235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5104:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         37:55:36:72:11:cc:77:f5:01:13:4b:66:ae:df:d7:fb:70:f7:
         47:79:7a:1e:5d:08:ac:4f:29:49:7f:5b:a6:d1:1f:08:8d:45:
         74:1f:7a:48:a2:05:cc:89:5b:7b:4e:65:f7:a1:8e:7d:be:64:
         ee:f8:84:a0:34:37:9d:64:1b:35:1f:c0:b2:5f:ca:ca:2e:84:
         9e:56:97:f7:49:97:2e:06:ff:5f:9f:c5:92:f8:f2:b9:8e:cf:
         b2:21:af:03:53:2d:f7:af:e1:21:27:95:3c:fd:1b:0c:6b:80:
         b9:77:6b:eb:e5:3e:bc:88:8a:08:7f:34:b0:3a:f4:7c:00:10:
         d7:5b:bc:bf:01:bb:e1:ac:d2:80:a9:86:c4:9a:57:86:17:ce:
         97:78:0b:53:2f:fb:f6:1b:cb:21:ce:f7:6c:4e:ae:9c:55:37:
         b3:dc:cf:ad:89:4f:21:ca:c5:af:f9:52:77:37:83:5c:8a:68:
         40:66:9e:f4:9d:8a:10:e3:df:f4:5c:26:9d:98:47:e9:5e:f8:
         63:7d:2a:03:66:31:11:76:91:d0:4b:fa:9e:96:e3:c8:ce:61:
         aa:92:1f:09:7e:5d:bd:a7:eb:d7:a4:3b:47:34:70:af:a2:76:
         ca:48:eb:4e:a6:0e:0e:dc:3d:29:a6:94:d3:1d:95:dd:07:05:
         0a:38:a6:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org