Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a3a2f33332d3333203d3e20323637333633.roa
File:                     323830343a346335303a3a2f33332d3333203d3e20323637333633.roa (raw, json)
Hash identifier:          y1TkPIuuW88tQGhxP4WwyRwmogqAWCShitQ+msQmgfw=
Subject key identifier:   F4:A8:41:DC:C9:2A:29:84:76:35:33:56:31:2D:65:18:81:19:DD:B2
Certificate issuer:       /CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Certificate serial:       7FB7B38638FF411ADE75BB2592911638C3060981
Authority key identifier: 2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a3a2f33332d3333203d3e20323637333633.roa
Signing time:             Wed 20 Mar 2024 19:26:20 +0000
ROA not before:           Wed 20 Mar 2024 19:21:20 +0000
ROA not after:            Wed 19 Mar 2025 19:26:20 +0000
asID:                     267363
IP address blocks:        2804:4c50::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:b7:b3:86:38:ff:41:1a:de:75:bb:25:92:91:16:38:c3:06:09:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
        Validity
            Not Before: Mar 20 19:21:20 2024 GMT
            Not After : Mar 19 19:26:20 2025 GMT
        Subject: CN=F4A841DCC92A298476353356312D65188119DDB2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:c8:db:fe:13:3b:5f:19:1b:53:42:87:a0:63:
                    83:a4:42:c1:79:9f:4e:b1:1c:dc:7e:82:25:21:04:
                    c4:46:0c:5b:9e:4e:8b:07:cb:c1:6b:a7:98:1d:53:
                    23:9b:ba:e1:f5:36:11:80:5d:60:b9:f0:7b:2c:b7:
                    df:ee:ec:43:61:3f:84:13:67:f3:a6:04:17:e9:86:
                    d0:2e:ee:8a:44:3a:0f:9d:6b:41:06:9a:44:6c:5e:
                    22:14:97:51:e3:3d:1e:0d:c8:64:06:98:9b:2e:86:
                    bd:36:74:ac:48:d7:a5:c0:6f:28:00:6a:a6:f7:74:
                    04:1a:eb:cf:78:52:ee:fc:6c:a0:48:39:ee:35:92:
                    14:f3:6c:9d:b6:4a:11:76:68:82:d8:c5:ae:a1:5c:
                    89:ad:35:5a:08:ef:4d:1f:db:85:fc:f7:30:4b:5a:
                    d2:9d:e0:b6:48:44:11:d7:8e:12:de:f5:6b:d6:70:
                    66:45:96:28:9b:fb:f6:d3:2b:5c:d2:60:cb:af:54:
                    a5:6b:3a:33:fb:58:20:f4:cd:03:28:9d:cd:82:5b:
                    68:58:e7:bf:1a:6c:16:8e:a3:e0:41:c6:8a:40:c2:
                    4d:77:d1:99:f0:df:8a:4c:c4:60:a5:15:a3:14:2c:
                    ab:a5:94:a5:7c:e2:f0:ca:ff:23:7e:b6:e9:4e:50:
                    a5:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:A8:41:DC:C9:2A:29:84:76:35:33:56:31:2D:65:18:81:19:DD:B2
            X509v3 Authority Key Identifier:
                keyid:2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a3a2f33332d3333203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50::/33

    Signature Algorithm: sha256WithRSAEncryption
         b5:25:1e:67:17:b1:be:7f:e0:d4:a0:6d:db:79:2b:ab:b9:e5:
         57:37:d5:35:ef:c1:42:03:3d:2c:a4:b4:e2:42:c6:e2:01:67:
         b2:20:9d:b8:e8:55:d5:25:ee:f7:6e:52:ab:eb:07:ea:6d:12:
         52:02:14:db:82:5e:c2:7e:d8:69:ef:e0:ac:1b:c4:a6:f3:2e:
         4e:a3:44:57:4a:cb:00:29:28:b4:c5:15:ca:9d:7f:39:78:22:
         42:4f:1b:c8:a9:f9:7a:14:54:70:d7:95:56:76:02:3f:b5:2f:
         31:eb:56:ea:af:34:00:0c:b7:36:66:8d:e9:fe:2f:db:ec:d7:
         54:1b:2d:66:56:86:78:9c:e3:3b:20:81:fd:19:3a:ac:4a:34:
         5f:bf:d4:5d:dd:31:00:10:54:ca:51:04:20:8a:d5:bb:66:a3:
         80:ee:ed:48:70:e0:c6:7b:8c:22:65:7e:40:f8:88:4d:52:73:
         c6:cf:5a:5d:5d:2b:59:56:a1:dd:20:3a:f3:05:9e:93:65:1c:
         2b:8f:1c:0d:9a:b3:97:d6:b3:33:d3:76:5d:e5:77:5e:7c:7f:
         3a:ba:05:95:ef:ac:a2:a1:c2:9c:4f:48:0a:1c:44:60:97:b4:
         52:c5:a5:23:9f:5d:e3:e3:7f:ba:3f:4e:23:f3:a8:30:ec:3b:
         75:5a:ef:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org