Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/323830343a323366303a3230303a3a2f34302d3430203d3e20323634313932.roa
File:                     323830343a323366303a3230303a3a2f34302d3430203d3e20323634313932.roa (raw, json)
Hash identifier:          kUPBfYUmyWDShPxRiUIQJzAhOcBA02EMhqtXBHKQIr0=
Subject key identifier:   9D:0F:F8:62:EE:B1:8E:8E:42:F1:65:02:F2:DC:43:1A:CA:E6:71:0C
Certificate issuer:       /CN=08C2A112D7B46BB31844B293BA30E7FCC2E551B6
Certificate serial:       3F2B8B5B85AF048036D601559DEAF848E7BC04E9
Authority key identifier: 08:C2:A1:12:D7:B4:6B:B3:18:44:B2:93:BA:30:E7:FC:C2:E5:51:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2A112D7B46BB31844B293BA30E7FCC2E551B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/323830343a323366303a3230303a3a2f34302d3430203d3e20323634313932.roa
Signing time:             Sat 02 Mar 2024 16:03:58 +0000
ROA not before:           Sat 02 Mar 2024 15:58:58 +0000
ROA not after:            Sat 01 Mar 2025 16:03:58 +0000
asID:                     264192
IP address blocks:        2804:23f0:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:2b:8b:5b:85:af:04:80:36:d6:01:55:9d:ea:f8:48:e7:bc:04:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C2A112D7B46BB31844B293BA30E7FCC2E551B6
        Validity
            Not Before: Mar  2 15:58:58 2024 GMT
            Not After : Mar  1 16:03:58 2025 GMT
        Subject: CN=9D0FF862EEB18E8E42F16502F2DC431ACAE6710C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:ba:22:88:8d:ab:2c:12:76:ff:65:60:9d:60:
                    e0:1d:94:cc:b7:84:6d:98:e4:e6:2f:e0:d2:27:07:
                    41:9c:8d:f9:d6:47:80:3f:ff:54:e2:62:f7:67:4e:
                    6d:04:db:c1:ab:a4:68:e8:29:ae:0b:db:bb:5b:a2:
                    93:26:10:90:46:47:d2:a5:57:5c:94:9f:b9:72:2b:
                    08:a5:d3:e6:d2:36:e1:f6:79:d5:8f:35:be:5e:6d:
                    99:a5:6e:96:b9:21:0c:28:42:b4:cc:70:a1:0e:a4:
                    73:70:91:06:8f:f9:8a:c2:ee:82:1a:85:68:f2:df:
                    0d:73:d8:82:90:1d:4d:0e:1d:32:c2:5e:76:2c:29:
                    da:e1:b0:db:c8:82:9c:6d:12:49:e5:b8:85:cb:28:
                    72:63:cc:81:c3:92:8a:54:fb:80:0c:e1:15:bf:41:
                    ee:52:3a:5e:90:4d:a6:37:1b:6b:d7:f3:10:46:f5:
                    84:7e:ed:7a:78:54:4b:05:2f:52:ad:e5:00:ac:db:
                    33:03:2e:10:88:e4:90:d3:b6:8b:37:7c:f8:a3:cb:
                    70:5a:ff:17:35:7f:b1:d0:fa:31:fe:f7:d8:e9:bc:
                    ac:9f:ef:6c:95:e0:d2:a5:9f:57:dd:0f:c2:e0:38:
                    c9:bd:b8:a2:e7:a1:ef:58:80:3f:a8:e4:9a:19:33:
                    a1:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9D:0F:F8:62:EE:B1:8E:8E:42:F1:65:02:F2:DC:43:1A:CA:E6:71:0C
            X509v3 Authority Key Identifier:
                keyid:08:C2:A1:12:D7:B4:6B:B3:18:44:B2:93:BA:30:E7:FC:C2:E5:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/08C2A112D7B46BB31844B293BA30E7FCC2E551B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2A112D7B46BB31844B293BA30E7FCC2E551B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/323830343a323366303a3230303a3a2f34302d3430203d3e20323634313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23f0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         69:c7:65:24:6c:0f:de:41:13:63:d5:37:04:d0:7a:a9:7c:ac:
         9c:8b:9f:ce:d0:a9:50:11:25:a7:c4:e4:22:c9:34:7f:87:e3:
         3e:14:c3:b8:10:32:6b:89:4c:97:94:d4:26:8e:7a:8d:0a:93:
         4b:ec:77:5c:4a:90:4a:df:79:26:c2:e8:b8:d5:0b:f0:82:03:
         86:c7:90:1d:13:b8:43:77:bd:b2:78:fe:23:d3:4a:8f:31:71:
         43:95:d1:66:60:7c:a4:72:0f:25:4f:99:ad:56:a7:74:dd:22:
         cb:9f:33:95:3f:0d:e5:82:ba:0c:59:bc:05:0f:70:33:5e:49:
         55:a2:4f:4f:20:4f:df:b6:5b:c6:31:9c:65:6e:f1:8b:21:d7:
         b8:93:92:4d:c5:52:69:41:51:67:31:52:c9:0f:3e:c9:5e:fc:
         73:8a:81:87:ef:59:b4:69:ae:c1:c0:db:e8:dc:14:84:54:76:
         00:d9:9f:3d:f3:03:00:c4:82:ae:c0:28:ba:76:e1:fb:86:f7:
         f7:4f:fc:12:03:99:1d:01:93:8e:92:04:8c:72:fd:85:6b:88:
         9a:ad:d5:c1:0a:a8:59:82:7c:33:f2:60:78:dc:e3:55:e9:41:
         94:86:05:9a:30:c7:78:d3:8e:66:5d:45:e8:47:08:85:9f:e0:
         95:4d:1f:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org