Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/323830343a333332633a383030303a3a2f33332d3333203d3e20323635333739.roa
File:                     323830343a333332633a383030303a3a2f33332d3333203d3e20323635333739.roa (raw, json)
Hash identifier:          J3j4HSOXr4INr17wg2VlpguH6F71eRYXvvurC+9Cl+A=
Subject key identifier:   72:51:B8:6A:B1:B6:52:C8:19:80:5C:B3:8E:1D:9E:D6:0F:97:D1:11
Certificate issuer:       /CN=088F189D0C73ADF77B005E95BF5583276C57D174
Certificate serial:       984FFC65E1AC710C80BE25914136FA3BD1AC6E
Authority key identifier: 08:8F:18:9D:0C:73:AD:F7:7B:00:5E:95:BF:55:83:27:6C:57:D1:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F189D0C73ADF77B005E95BF5583276C57D174.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/323830343a333332633a383030303a3a2f33332d3333203d3e20323635333739.roa
Signing time:             Sat 16 Dec 2023 00:00:02 +0000
ROA not before:           Fri 15 Dec 2023 23:55:02 +0000
ROA not after:            Sat 14 Dec 2024 00:00:02 +0000
asID:                     265379
IP address blocks:        2804:332c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            98:4f:fc:65:e1:ac:71:0c:80:be:25:91:41:36:fa:3b:d1:ac:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=088F189D0C73ADF77B005E95BF5583276C57D174
        Validity
            Not Before: Dec 15 23:55:02 2023 GMT
            Not After : Dec 14 00:00:02 2024 GMT
        Subject: CN=7251B86AB1B652C819805CB38E1D9ED60F97D111
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:dd:d0:7d:06:14:61:65:fe:c0:80:2a:6c:1e:
                    c1:8f:e6:db:ca:76:8e:80:94:f8:10:9c:ca:4d:d8:
                    07:e8:ef:e8:5c:1e:22:33:8d:82:88:6c:6e:8e:92:
                    bc:8b:5a:1a:00:fd:20:6d:44:1e:01:97:df:ea:f6:
                    b4:4f:8b:ce:46:10:8d:37:13:ed:61:fe:45:b2:2c:
                    20:7d:f9:4a:6b:cf:ca:0e:01:23:7d:44:a3:19:a3:
                    7c:78:86:41:40:b7:46:9d:6d:f4:be:6f:98:c8:43:
                    69:2c:90:e8:f7:38:16:c2:60:ea:ca:a4:34:5a:0c:
                    6d:c2:06:6d:f3:ed:07:fe:84:00:c8:34:29:2d:a1:
                    15:82:5a:33:5d:8d:5b:22:d5:85:f9:09:4d:58:5e:
                    2a:bb:be:05:07:2e:77:20:0f:b2:d5:0f:b1:e2:3f:
                    56:14:60:9e:19:17:4a:63:66:55:f4:6d:0c:a0:27:
                    5a:4a:26:5a:0c:cc:62:3e:61:21:ba:6c:d5:55:c8:
                    2a:28:dc:b2:35:7a:c3:39:b9:4c:2c:33:0e:e5:bf:
                    0b:49:63:2f:aa:29:a7:60:f0:eb:6e:42:42:f9:4f:
                    38:69:42:cb:c2:fb:9d:fb:a3:80:5a:5b:c6:b5:a0:
                    ef:10:e5:65:9e:e7:38:13:d9:b7:58:a3:fb:28:d8:
                    fe:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:51:B8:6A:B1:B6:52:C8:19:80:5C:B3:8E:1D:9E:D6:0F:97:D1:11
            X509v3 Authority Key Identifier:
                keyid:08:8F:18:9D:0C:73:AD:F7:7B:00:5E:95:BF:55:83:27:6C:57:D1:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/088F189D0C73ADF77B005E95BF5583276C57D174.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/088F189D0C73ADF77B005E95BF5583276C57D174.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/81MBENFLH9n774A7GtBpX2iiDovbLZM3vKPcV2c7Ywpp/0/323830343a333332633a383030303a3a2f33332d3333203d3e20323635333739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:332c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         65:30:3a:a5:94:34:4a:64:37:bf:09:2a:18:10:09:d8:0c:4e:
         57:6d:3d:1a:b9:01:df:ab:86:76:95:c5:85:7f:dc:8b:ee:31:
         17:8e:9b:54:97:08:0f:eb:89:94:9a:b8:08:f5:b6:37:90:86:
         8c:2b:1d:2c:54:ef:3f:0c:47:2c:e8:93:6e:cb:7d:d3:8d:fe:
         bc:37:0a:b3:28:42:f9:9c:82:07:9a:d4:95:b9:cc:3e:5f:e0:
         1e:ce:03:eb:61:71:dd:eb:db:09:d4:d8:c3:b8:de:ee:2a:e9:
         a9:d8:0c:a6:b5:88:79:29:c7:71:67:8d:c5:bf:89:bb:c1:01:
         e1:f9:eb:fb:39:af:77:e1:27:8e:15:8f:a4:63:53:4c:60:19:
         42:9c:05:4c:da:77:13:0e:3c:06:1b:8b:46:a0:4a:15:1c:9d:
         41:05:e1:2e:97:a9:97:15:6b:a6:74:7c:30:8d:7f:76:43:72:
         8c:9e:ab:a4:bf:31:2f:cc:b5:7c:c2:7c:bd:c8:de:f1:35:bc:
         8a:c3:dd:93:1d:04:01:eb:08:23:b0:c8:72:96:dc:17:1e:48:
         90:98:64:e8:26:b4:e0:b0:83:19:19:e7:61:2f:a0:d4:0e:ff:
         c4:0b:61:9a:2d:72:2b:44:23:9e:3b:b6:e0:17:a0:3b:90:cb:
         8a:bb:ef:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:07 2024 by rpki-client on console-ams.rpki-client.org