Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/323830343a323839303a3a2f33322d3634203d3e203238323630.roa
File:                     323830343a323839303a3a2f33322d3634203d3e203238323630.roa (raw, json)
Hash identifier:          yONbDCDiLXUcs5SJYHDdsrlmET0HXbaiV69b1tjCxCM=
Subject key identifier:   F0:06:16:8A:44:00:59:BA:9C:59:B4:5F:7E:06:F1:E1:8F:47:B8:9F
Certificate issuer:       /CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
Certificate serial:       2D8E2757897704DCE4E836BFD3FB5132580574CE
Authority key identifier: 8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/323830343a323839303a3a2f33322d3634203d3e203238323630.roa
Signing time:             Sat 11 Mar 2023 01:21:04 +0000
ROA not before:           Sat 11 Mar 2023 01:16:04 +0000
ROA not after:            Sat 09 Mar 2024 01:21:04 +0000
asID:                     28260
IP address blocks:        2804:2890::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:8e:27:57:89:77:04:dc:e4:e8:36:bf:d3:fb:51:32:58:05:74:ce
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DF5F3E70EB9D6971638464E557907A395C47FAD
        Validity
            Not Before: Mar 11 01:16:04 2023 GMT
            Not After : Mar  9 01:21:04 2024 GMT
        Subject: CN=F006168A440059BA9C59B45F7E06F1E18F47B89F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:d3:b4:80:66:b3:e9:ae:9f:51:4c:73:84:85:
                    5e:1a:43:15:7b:88:2e:7b:7e:4b:1f:94:f6:6f:92:
                    47:d8:5f:7d:14:7c:7d:e8:32:82:06:69:57:48:e2:
                    bf:99:a0:ab:c0:93:36:3a:bb:e0:54:f6:a4:c6:1f:
                    b9:4a:af:db:98:5c:3b:f1:1c:b3:2e:c3:51:fd:b4:
                    61:20:ac:ef:5e:b7:9c:dd:86:45:4f:a0:94:e4:99:
                    3c:2c:ae:b7:73:1c:89:70:ae:56:0d:e2:6b:fd:1a:
                    3a:d8:69:a2:be:8a:c7:e9:cc:c6:cd:f9:b7:ee:40:
                    3b:8c:48:44:fc:f1:a9:58:51:b6:29:7b:83:d2:5c:
                    cd:70:5c:c0:99:2d:09:0e:c0:86:f4:3f:dc:a8:2a:
                    08:10:68:12:94:8d:34:30:87:57:84:d3:28:cb:28:
                    d3:b3:22:27:db:4f:bf:0f:33:5f:86:8c:3a:c4:62:
                    cb:fe:fd:8e:a0:a0:ba:de:69:c0:f7:6c:07:27:80:
                    f3:61:fc:04:7e:bd:78:23:0e:ea:d3:08:ad:1f:21:
                    71:1d:c8:34:75:63:fc:03:60:a8:d0:1f:d0:ed:d4:
                    19:8a:72:2d:ee:b7:9b:14:4e:63:09:88:b0:c2:27:
                    d1:6f:f7:d4:45:45:c7:13:de:15:6f:07:ed:b7:33:
                    d4:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:06:16:8A:44:00:59:BA:9C:59:B4:5F:7E:06:F1:E1:8F:47:B8:9F
            X509v3 Authority Key Identifier:
                keyid:8D:F5:F3:E7:0E:B9:D6:97:16:38:46:4E:55:79:07:A3:95:C4:7F:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DF5F3E70EB9D6971638464E557907A395C47FAD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3RsUcBXjfMKqFys3NHjVUYhE8ovPy1VVr4rhSuTpKqW4/0/323830343a323839303a3a2f33322d3634203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2890::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:25:04:72:29:79:91:e7:4f:f0:16:5c:20:8a:05:d3:9e:34:
         01:5d:5d:e6:bf:56:ca:8b:8a:96:46:fb:ce:be:26:47:5f:d7:
         ef:ce:32:03:c1:ea:ae:74:bf:cd:c2:a7:7c:f4:c0:18:51:b7:
         e2:bc:24:8c:ad:02:39:6a:6d:5c:70:78:82:58:ee:a2:ab:7b:
         9d:81:7c:b2:63:ad:2a:3f:4a:4a:22:ad:96:e6:c8:de:7c:aa:
         1e:74:18:89:28:71:15:36:67:40:f6:a9:d5:f1:00:e4:2f:4b:
         c2:5e:b2:3b:99:aa:75:09:b3:53:a8:29:fc:46:f1:07:61:e2:
         79:86:d2:37:54:dd:d1:cb:2a:0f:c9:31:7a:5c:17:82:bb:62:
         fe:9f:a0:f9:5a:06:5f:0b:91:cb:5b:79:f7:af:89:d6:71:15:
         f8:4a:dc:5d:2a:62:69:e3:03:af:61:77:7b:bb:e2:d1:6a:be:
         4a:30:af:5a:29:9e:c3:9c:c8:9e:ad:6c:79:db:15:27:64:19:
         4b:86:b9:49:2d:ce:ca:b2:6e:0c:d2:6d:77:01:32:2a:17:75:
         fe:14:6f:c2:7f:e5:1a:08:22:90:d0:1f:fe:9e:ca:a0:b4:d7:
         81:24:ca:c2:46:e9:cd:1b:22:ca:c3:20:fb:26:82:6c:a6:6a:
         5d:54:ce:2c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org