Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a383030303a3a2f33342d3334203d3e20323637333633.roa
File:                     323830343a346335303a383030303a3a2f33342d3334203d3e20323637333633.roa (raw, json)
Hash identifier:          9MXiF2hMv/tyAezx2/O4i7vFaS8jXzeKb2Ghdo2DHOs=
Subject key identifier:   BE:CD:D0:23:F7:7E:B9:DA:84:5C:65:C5:42:44:88:F4:7C:FE:75:6E
Certificate issuer:       /CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Certificate serial:       205F5D37A1E4BC6AC5EC113D11E7BDED79B4B4FB
Authority key identifier: 2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a383030303a3a2f33342d3334203d3e20323637333633.roa
Signing time:             Wed 20 Mar 2024 19:26:17 +0000
ROA not before:           Wed 20 Mar 2024 19:21:17 +0000
ROA not after:            Wed 19 Mar 2025 19:26:17 +0000
asID:                     267363
IP address blocks:        2804:4c50:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:5f:5d:37:a1:e4:bc:6a:c5:ec:11:3d:11:e7:bd:ed:79:b4:b4:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
        Validity
            Not Before: Mar 20 19:21:17 2024 GMT
            Not After : Mar 19 19:26:17 2025 GMT
        Subject: CN=BECDD023F77EB9DA845C65C5424488F47CFE756E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:fc:b4:ef:84:22:3d:d0:d9:67:d0:12:66:
                    80:28:27:72:59:54:d1:2b:fe:8b:40:91:59:e8:96:
                    40:38:3f:57:2c:b0:26:22:b9:02:37:59:a8:22:ae:
                    ab:30:a1:c5:12:2e:b1:42:74:c9:5e:b0:6a:2d:49:
                    22:b8:22:cf:b0:69:71:ec:51:97:a3:a1:54:0d:d1:
                    1e:9a:99:4b:e2:44:83:78:c3:d3:57:20:2e:c0:83:
                    69:c0:1f:b1:b9:3b:1c:9e:92:f8:b1:dd:c4:da:59:
                    ea:be:fd:ab:32:07:9a:0b:00:af:1d:c7:65:a1:ff:
                    3e:fa:06:e7:59:6a:4c:ff:66:ff:f4:89:f1:4c:42:
                    33:2b:df:c1:a4:d6:c7:6a:ed:8b:05:9d:03:0f:0c:
                    31:ac:88:0c:03:a3:e3:cb:28:de:6e:8d:04:4a:c7:
                    f2:27:5b:7f:54:df:ec:90:00:74:94:f9:bf:a3:b8:
                    b6:2a:d4:06:f3:1b:bb:03:15:3f:ea:29:ca:85:ae:
                    ce:14:85:ce:c1:bc:5a:96:5f:80:8d:e6:e1:8d:4b:
                    55:97:81:82:a0:7f:a6:f9:a6:a9:9f:6c:f0:c5:8d:
                    0a:c4:60:19:64:dd:16:45:c8:43:70:51:eb:0d:c4:
                    7e:18:98:85:d7:3a:a2:1b:eb:e6:9d:0b:08:70:01:
                    f9:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:CD:D0:23:F7:7E:B9:DA:84:5C:65:C5:42:44:88:F4:7C:FE:75:6E
            X509v3 Authority Key Identifier:
                keyid:2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a383030303a3a2f33342d3334203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         22:92:f8:e0:b3:4e:09:cb:cf:9b:79:af:5c:7b:0a:42:b5:9a:
         12:18:43:dc:94:09:d6:a9:44:cf:93:b3:d5:4e:14:0c:b6:3d:
         24:df:ad:25:6e:7b:ca:3c:59:43:39:88:3d:4b:f6:ba:a0:cd:
         5f:2c:27:7b:51:9c:11:0d:62:5f:81:e3:47:ab:b4:a2:31:5a:
         c7:7b:3a:43:b8:52:3e:2b:06:f9:1a:0b:8e:31:f2:2e:6b:7e:
         d6:eb:56:7c:15:bc:b5:1f:95:9d:f2:b8:9d:77:62:ce:d6:60:
         c4:19:3b:b0:2f:5b:16:e7:e9:5f:48:12:f0:1c:5a:ae:53:01:
         c5:77:d3:0c:6d:f1:51:8b:d8:2c:1e:3e:0a:d1:94:af:e1:8d:
         40:3f:57:13:c1:7a:dd:ff:44:9a:07:b4:c1:c3:88:e1:d9:95:
         87:2a:b1:94:37:2f:f8:bf:02:10:67:69:ba:6b:18:71:db:ef:
         58:2d:86:3f:a7:a4:03:71:73:a1:c9:0f:77:07:3e:5b:3b:af:
         92:ec:e8:85:dd:e6:03:2e:12:f1:77:a8:1a:e7:4b:8f:e7:05:
         c2:55:a2:69:d2:90:b5:2e:8c:c4:7a:e9:12:b0:b3:4e:38:c5:
         8d:2d:b5:fa:37:87:88:92:7f:9a:7b:05:20:57:06:b6:fc:4d:
         b1:98:90:0b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org