Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/323830343a336261633a3a2f33322d313238203d3e20323636313634.roa
File:                     323830343a336261633a3a2f33322d313238203d3e20323636313634.roa (raw, json)
Hash identifier:          665nfoNrllFtuyLCga4XOx7qDl5ANPPnDgW4rlVtCNA=
Subject key identifier:   BE:80:CB:56:63:9D:0C:3B:22:F5:49:2C:ED:FF:95:50:65:43:51:0E
Certificate issuer:       /CN=8ACB44001222477F120CEC52E5689FA8BF637DEA
Certificate serial:       676094DEA9CC68E239F24A701AC77F2011F45031
Authority key identifier: 8A:CB:44:00:12:22:47:7F:12:0C:EC:52:E5:68:9F:A8:BF:63:7D:EA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8ACB44001222477F120CEC52E5689FA8BF637DEA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/323830343a336261633a3a2f33322d313238203d3e20323636313634.roa
Signing time:             Wed 01 Nov 2023 05:45:51 +0000
ROA not before:           Wed 01 Nov 2023 05:40:51 +0000
ROA not after:            Wed 30 Oct 2024 05:45:51 +0000
asID:                     266164
IP address blocks:        2804:3bac::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:60:94:de:a9:cc:68:e2:39:f2:4a:70:1a:c7:7f:20:11:f4:50:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8ACB44001222477F120CEC52E5689FA8BF637DEA
        Validity
            Not Before: Nov  1 05:40:51 2023 GMT
            Not After : Oct 30 05:45:51 2024 GMT
        Subject: CN=BE80CB56639D0C3B22F5492CEDFF95506543510E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:87:3d:25:24:dc:cc:c2:7d:65:cf:6b:a8:e0:e2:
                    2a:7c:52:40:52:fb:4f:3e:31:36:ee:e3:c0:bb:d9:
                    7a:92:f1:3e:cd:50:2e:a8:54:60:60:ac:29:20:6b:
                    09:53:0f:1b:a8:6c:52:01:8a:38:c6:6c:c1:0d:89:
                    61:51:8d:2b:49:6c:1e:8c:1e:f7:04:65:ed:cd:23:
                    68:f0:57:ee:9d:4a:71:af:7e:12:f1:29:82:3d:62:
                    37:0d:f7:f6:5f:ea:99:90:d5:e0:35:3f:c2:7d:a4:
                    14:3c:e2:b9:e7:a8:5f:6f:bd:81:14:20:04:a3:20:
                    f6:16:f9:c1:cc:5e:c2:60:0a:da:b5:b4:73:2a:b8:
                    c5:c1:12:6a:58:b4:22:c2:8d:0b:b6:e6:ab:9d:61:
                    16:11:c8:90:bc:2d:f3:cb:9e:1f:77:3f:89:18:91:
                    90:e6:71:45:bf:9f:5c:e3:ac:e7:d9:39:0e:24:e2:
                    e3:19:44:02:a1:9f:41:6f:b1:62:41:2c:64:bf:32:
                    96:b2:f7:ea:3e:36:41:02:75:eb:d6:9c:51:33:8f:
                    a5:bd:86:10:3f:6d:c4:35:0f:46:22:b3:1f:0f:71:
                    7b:1d:67:7a:44:9e:c1:2c:a0:a6:b1:a8:c7:af:7c:
                    4c:5c:3c:67:17:54:f6:9a:53:ed:11:c6:47:c4:95:
                    ea:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:80:CB:56:63:9D:0C:3B:22:F5:49:2C:ED:FF:95:50:65:43:51:0E
            X509v3 Authority Key Identifier:
                keyid:8A:CB:44:00:12:22:47:7F:12:0C:EC:52:E5:68:9F:A8:BF:63:7D:EA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/8ACB44001222477F120CEC52E5689FA8BF637DEA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8ACB44001222477F120CEC52E5689FA8BF637DEA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6TqQLmwgMiTW6KvmqYxeYFtg93sRsGwF5ZdgRvGCWPAb/0/323830343a336261633a3a2f33322d313238203d3e20323636313634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bac::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:c6:80:d8:e3:0d:6c:b4:a0:45:65:c0:22:f0:76:c6:3d:2a:
         21:b8:57:4b:af:36:91:1f:d4:c0:14:50:86:a2:ab:c6:4c:3a:
         2f:94:6a:c1:e5:0c:58:d3:42:d7:83:63:43:95:7a:d3:21:08:
         e5:3a:47:53:6b:3b:0c:85:8b:40:08:2e:c5:12:7e:2d:52:8d:
         88:11:8c:96:fa:b6:09:88:a6:e1:31:70:e0:a8:81:7f:87:a5:
         78:ff:f7:4d:c6:ab:f0:79:66:f2:ed:9e:30:10:e7:99:54:f7:
         ce:18:c5:5f:25:29:75:6b:da:46:ef:1b:00:b8:28:4d:cb:bb:
         d3:4c:84:83:0e:5f:73:ef:66:0c:37:43:c9:b1:0e:4e:16:8f:
         c3:56:68:67:62:da:4a:a2:8b:d4:d4:40:de:63:31:b0:83:b9:
         7b:db:06:01:e9:c9:42:36:90:b5:fc:55:fe:13:85:65:60:cd:
         e1:8f:74:26:8b:b2:f2:20:d4:5f:19:bc:65:b6:90:1c:31:a3:
         90:c3:d3:de:d2:7b:04:18:92:71:14:7e:2d:4a:6a:84:c1:88:
         c9:71:bf:94:ec:02:b1:ed:90:8a:e6:60:12:a0:81:be:3a:2c:
         03:4a:21:92:a2:3d:91:2f:02:f9:20:56:ca:ae:56:d9:8a:20:
         05:a8:0d:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org