Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/0/323830343a336263343a3a2f33322d313238203d3e20323636313639.roa
File:                     323830343a336263343a3a2f33322d313238203d3e20323636313639.roa (raw, json)
Hash identifier:          WOPjxf62wcyedmnJxIXkOzEIPqgUuq1M1IxoIe4etbs=
Subject key identifier:   AA:BD:49:76:6E:7B:26:DF:1B:00:08:D8:80:52:5B:9C:96:91:8D:DB
Certificate issuer:       /CN=8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3
Certificate serial:       1C8E1940161341EDDBAE26B54D17499713B7ECE8
Authority key identifier: 83:45:A7:56:1C:0C:4A:73:A3:0F:B2:FE:B6:C9:A6:0A:4E:89:AB:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/0/323830343a336263343a3a2f33322d313238203d3e20323636313639.roa
Signing time:             Tue 06 Feb 2024 01:12:41 +0000
ROA not before:           Tue 06 Feb 2024 01:07:41 +0000
ROA not after:            Tue 04 Feb 2025 01:12:41 +0000
asID:                     266169
IP address blocks:        2804:3bc4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:8e:19:40:16:13:41:ed:db:ae:26:b5:4d:17:49:97:13:b7:ec:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3
        Validity
            Not Before: Feb  6 01:07:41 2024 GMT
            Not After : Feb  4 01:12:41 2025 GMT
        Subject: CN=AABD49766E7B26DF1B0008D880525B9C96918DDB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:5d:5b:04:81:50:18:5d:91:0d:a7:66:e7:e6:
                    ee:5e:de:4c:6c:6d:ee:c9:ff:3e:76:7d:9e:39:d9:
                    00:d0:10:7d:30:72:fa:9e:e4:d5:46:e9:e6:f1:33:
                    2b:1b:12:91:c3:7a:48:5e:32:ed:63:02:84:ba:97:
                    ab:18:25:fb:51:24:ee:c9:58:a4:de:cc:96:c0:85:
                    23:f5:8f:6b:e2:11:c0:51:3e:85:1f:54:3f:78:8d:
                    1b:13:57:c5:e9:5a:9b:90:20:15:f0:fc:3e:ce:23:
                    44:3f:2c:e7:38:12:73:ff:3f:5d:8a:b8:f6:9e:00:
                    c9:8b:a3:d3:4f:ce:1f:34:d1:2f:19:0a:ab:7e:36:
                    88:c1:28:f7:c0:ea:f2:05:8f:47:1a:79:2d:bc:62:
                    aa:aa:4c:dd:66:a0:97:98:95:ae:8f:e2:5b:db:59:
                    87:e4:01:31:72:e9:39:fa:ff:e6:d0:87:cb:fc:51:
                    70:5c:cc:90:48:ef:ad:b2:4d:0d:79:fc:bf:cb:06:
                    6b:e9:b0:0b:f4:01:ce:81:7c:76:9f:6c:36:aa:8e:
                    47:73:55:04:e4:dc:78:7c:5a:39:06:b1:07:88:82:
                    85:36:c7:85:cf:e5:15:d5:37:ce:f2:98:13:aa:21:
                    ac:c8:9b:47:27:80:77:fb:04:2e:75:30:cd:5a:36:
                    a7:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AA:BD:49:76:6E:7B:26:DF:1B:00:08:D8:80:52:5B:9C:96:91:8D:DB
            X509v3 Authority Key Identifier:
                keyid:83:45:A7:56:1C:0C:4A:73:A3:0F:B2:FE:B6:C9:A6:0A:4E:89:AB:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/0/8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8345A7561C0C4A73A30FB2FEB6C9A60A4E89ABA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73sFVR7XQCg8s3LwYgAgY3ACmrkHZtFaNHKaUodjsq1m/0/323830343a336263343a3a2f33322d313238203d3e20323636313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3bc4::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:71:8f:a2:a0:3d:27:71:de:9c:da:66:f6:d4:ba:6c:cd:34:
         b6:02:ad:0e:ce:31:75:30:ee:12:0c:b4:57:67:9c:1d:6c:64:
         d2:49:af:84:ec:41:4d:c2:92:c7:2f:e5:10:f3:64:b5:99:3c:
         e4:16:ba:1f:a6:2c:83:3e:8b:7d:93:cf:fc:47:5c:91:b4:f1:
         a7:41:c5:b8:49:33:d3:d5:8e:a5:d9:55:99:6f:07:26:6b:1f:
         35:0e:17:9d:11:64:7f:71:b7:87:fb:a1:3d:07:af:e7:af:26:
         47:18:15:f8:b3:24:f2:01:34:4a:34:a0:61:d7:6f:aa:5e:06:
         74:ff:37:e9:61:61:60:d7:ad:b0:22:a3:c0:53:9b:0d:c9:56:
         5c:21:50:c1:8d:21:40:17:38:c5:42:45:de:aa:3b:f2:c3:28:
         ce:a1:fb:9b:8c:8e:1a:b3:c1:48:91:4f:4e:b3:b4:e7:f8:42:
         75:49:32:ff:0c:8e:fe:2b:bd:62:79:13:0e:fa:a5:90:34:ba:
         a2:2b:9a:2a:90:e3:e4:27:25:b9:23:f8:76:eb:37:b2:e3:09:
         46:e1:f2:98:37:0f:94:f6:b6:34:e3:ac:0b:be:7e:bc:2f:16:
         03:f9:c3:2f:a7:43:34:e6:04:9c:12:ff:24:2e:ba:b5:a8:2f:
         db:5d:1f:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org