Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a313830303a3a2f34382d3438203d3e20323637323536.roa
File:                     323830343a346161633a313830303a3a2f34382d3438203d3e20323637323536.roa (raw, json)
Hash identifier:          7U4dDzS4/n7pX7dWW4tGOCoJAB96CpKKCGF2lI/SZXM=
Subject key identifier:   9F:8D:5F:6B:26:36:F8:15:1A:20:F8:64:D1:2C:6F:2A:1E:F4:C9:FE
Certificate issuer:       /CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
Certificate serial:       1D19435CF7F5556ED57F9A0A692DB00F799F694C
Authority key identifier: 89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a313830303a3a2f34382d3438203d3e20323637323536.roa
Signing time:             Sun 27 Aug 2023 18:08:50 +0000
ROA not before:           Sun 27 Aug 2023 18:03:50 +0000
ROA not after:            Sun 25 Aug 2024 18:08:50 +0000
asID:                     267256
IP address blocks:        2804:4aac:1800::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:19:43:5c:f7:f5:55:6e:d5:7f:9a:0a:69:2d:b0:0f:79:9f:69:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=892E6D3C0D9395B16EE74F4027A98C0876C2E78D
        Validity
            Not Before: Aug 27 18:03:50 2023 GMT
            Not After : Aug 25 18:08:50 2024 GMT
        Subject: CN=9F8D5F6B2636F8151A20F864D12C6F2A1EF4C9FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:e1:42:3a:6e:94:72:13:d7:11:bf:97:ee:37:
                    1a:32:43:6a:c4:a4:91:2a:17:7f:6d:16:89:f0:d3:
                    a2:06:58:4b:05:55:03:df:72:36:ed:fe:b9:91:98:
                    43:47:f1:67:ec:47:53:8b:46:0b:ee:db:ee:f5:c6:
                    e5:1f:00:c6:27:66:7a:a4:98:60:bb:98:c8:90:16:
                    35:93:b1:38:b3:e5:fb:c3:5e:9b:35:aa:68:10:b9:
                    57:20:5a:0b:d9:57:ff:79:2b:bd:b8:61:bb:b2:a2:
                    b1:06:35:6a:19:5c:17:5f:36:3d:3d:5c:d7:f4:bd:
                    28:dd:3f:5e:5d:54:aa:8c:f1:c4:55:5e:23:65:c4:
                    55:35:bc:d1:af:3e:77:73:a3:eb:bf:81:02:07:4e:
                    fb:e3:ff:46:bf:4d:4a:53:42:49:b0:25:f2:94:11:
                    6a:c7:46:bb:f1:98:1f:48:d2:7d:39:09:74:a6:2e:
                    37:a8:8e:b8:92:e9:84:1e:6f:54:1e:2f:88:8d:bb:
                    f1:49:8e:cb:92:83:67:b0:62:59:ce:30:ac:77:15:
                    82:c1:cc:53:2b:93:ab:10:98:68:5f:ac:04:1f:55:
                    03:92:e4:17:0e:b8:81:9f:f2:47:24:c9:1b:09:9f:
                    69:65:8f:f6:99:bd:dd:ee:ae:39:6e:bc:63:9a:90:
                    9f:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9F:8D:5F:6B:26:36:F8:15:1A:20:F8:64:D1:2C:6F:2A:1E:F4:C9:FE
            X509v3 Authority Key Identifier:
                keyid:89:2E:6D:3C:0D:93:95:B1:6E:E7:4F:40:27:A9:8C:08:76:C2:E7:8D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/892E6D3C0D9395B16EE74F4027A98C0876C2E78D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a313830303a3a2f34382d3438203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4aac:1800::/48

    Signature Algorithm: sha256WithRSAEncryption
         74:b7:85:f5:b2:ee:a4:0c:84:32:64:d8:6e:24:a9:02:fb:15:
         0e:f1:76:07:e1:6c:6b:c7:6d:b0:34:6b:a5:86:a4:8d:5f:30:
         b5:f3:ad:57:4c:04:1b:b3:47:0f:34:49:f3:66:e3:bf:13:71:
         b9:49:05:65:e4:c2:1c:5a:3a:52:6e:8b:88:5e:72:36:ab:04:
         2e:b2:0c:60:09:f3:12:58:4b:f0:c6:1b:0b:3a:13:22:49:b7:
         25:c1:15:32:67:ae:1e:15:54:f1:1b:75:3d:e7:02:6b:0c:a3:
         09:58:df:92:a2:63:9e:6d:ef:4a:ad:25:dd:1f:73:e5:8a:08:
         20:2b:31:08:a1:7d:0a:c7:49:7d:91:94:30:5b:78:c4:83:1b:
         29:49:81:04:02:a4:0d:81:0f:4f:54:60:07:c6:27:03:d7:e2:
         c9:ce:ee:f9:4a:8a:c0:3e:92:2d:58:e2:73:67:02:2a:a7:5c:
         78:e2:ec:90:86:52:71:f5:de:12:aa:0c:d7:49:c7:bb:c1:c2:
         5c:d1:c6:c0:0f:d2:a1:8e:d2:2e:62:c6:f1:6a:11:5d:85:41:
         6b:3c:17:70:c2:c4:72:f4:a6:66:d9:fb:5d:e0:56:a7:6f:a1:
         6a:88:15:85:b2:ba:df:d9:af:14:83:e3:55:56:74:2e:02:90:
         1a:b3:53:48
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org