Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a633030303a3a2f33342d3334203d3e20323637333633.roa
File:                     323830343a346335303a633030303a3a2f33342d3334203d3e20323637333633.roa (raw, json)
Hash identifier:          aMmAlucja6YIZOka/ZqEtBumpiiRe38pIkN9yMjqne4=
Subject key identifier:   2D:57:7B:72:FE:0F:1F:65:58:BA:8B:75:BC:07:CB:8F:B3:2F:A7:97
Certificate issuer:       /CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
Certificate serial:       40D97F82E682E1CC7F4F824896E98341DE3A2A70
Authority key identifier: 2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a633030303a3a2f33342d3334203d3e20323637333633.roa
Signing time:             Wed 20 Mar 2024 19:26:19 +0000
ROA not before:           Wed 20 Mar 2024 19:21:19 +0000
ROA not after:            Wed 19 Mar 2025 19:26:19 +0000
asID:                     267363
IP address blocks:        2804:4c50:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:d9:7f:82:e6:82:e1:cc:7f:4f:82:48:96:e9:83:41:de:3a:2a:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2AC986C39C68AAADAAD9F87F750E123A8F5A265F
        Validity
            Not Before: Mar 20 19:21:19 2024 GMT
            Not After : Mar 19 19:26:19 2025 GMT
        Subject: CN=2D577B72FE0F1F6558BA8B75BC07CB8FB32FA797
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:2a:3e:ff:35:31:f7:8b:3f:90:55:f2:d4:98:
                    ab:ab:7e:53:d9:cc:09:89:46:ee:30:6f:4e:93:83:
                    ae:6d:9e:13:1c:1d:da:61:0b:74:e2:91:86:93:67:
                    56:dc:21:df:9c:82:e7:a1:29:c2:23:af:78:c0:d5:
                    25:18:55:ac:f7:1f:a8:2a:11:2d:27:1c:91:ea:5e:
                    5b:22:9c:7e:5c:ae:da:62:69:58:49:1f:28:47:ec:
                    d1:59:d2:52:14:82:e9:d6:27:0b:77:6b:d1:dc:13:
                    b4:05:6b:2a:f7:9f:ce:47:02:5f:dc:7c:66:7a:0c:
                    3e:ed:a4:37:fa:d9:0f:8e:8a:cc:dd:9b:a0:38:0b:
                    64:b2:39:90:04:a8:c1:27:09:07:60:d3:c4:36:0d:
                    4b:42:ec:7b:21:f4:33:1e:5d:33:08:e2:a2:57:f7:
                    f7:18:5c:41:dc:c5:e6:7b:58:9e:87:82:05:26:c1:
                    f4:54:d4:3c:f5:d4:b2:cb:21:4e:2b:46:08:6c:e2:
                    94:24:f6:58:7b:41:43:e1:e9:dd:b9:2b:a0:1f:78:
                    85:7c:1d:9e:41:cc:5f:13:2c:b5:e0:40:32:6e:dc:
                    33:6a:19:36:7c:2d:9d:4e:d7:a3:e4:46:f7:89:fc:
                    cf:e6:a2:d6:4c:70:2c:fd:3e:8d:f1:51:d8:56:c0:
                    7a:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2D:57:7B:72:FE:0F:1F:65:58:BA:8B:75:BC:07:CB:8F:B3:2F:A7:97
            X509v3 Authority Key Identifier:
                keyid:2A:C9:86:C3:9C:68:AA:AD:AA:D9:F8:7F:75:0E:12:3A:8F:5A:26:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2AC986C39C68AAADAAD9F87F750E123A8F5A265F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86E3YjHp4mq3thohga9eZj2FjYEAB1btzuUVo1Cepdaw/0/323830343a346335303a633030303a3a2f33342d3334203d3e20323637333633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c50:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         bc:81:e2:12:d0:6a:89:84:88:1f:c2:63:f6:4d:94:d4:95:ec:
         29:64:93:c4:4a:b5:c6:4b:81:df:0e:e5:34:4a:27:1d:5d:61:
         b0:3e:22:bf:e9:63:71:27:cf:9c:e7:bd:f8:28:bd:dc:2a:3e:
         b8:d7:97:b1:6f:73:af:07:a6:d0:54:fd:5b:28:d3:91:0f:74:
         da:52:1a:80:34:66:c8:46:b1:b5:68:49:d6:60:57:18:8f:e1:
         06:2f:cb:05:4d:29:35:00:16:26:bb:11:f8:65:80:85:47:26:
         c3:56:e3:63:6d:40:7e:5e:c8:c3:00:58:4f:c7:db:4f:88:c1:
         ae:67:7c:75:84:1c:05:c1:17:1b:a3:90:d2:65:bd:d9:b1:5c:
         bd:49:04:74:cc:d4:95:9b:5e:f3:30:3c:ea:c6:8c:86:21:3d:
         40:fb:f7:86:21:a8:81:4b:cc:0a:e6:eb:45:c7:50:be:9e:c0:
         51:cd:59:b4:f4:54:2c:91:ee:cb:f3:0e:51:b3:71:6a:97:66:
         7b:d5:a0:7d:3b:1d:4f:06:08:97:bc:77:b0:1a:0f:53:ee:6a:
         ed:2b:33:77:a1:f2:0f:83:31:ab:0b:e5:a1:66:d8:a3:ab:68:
         83:f7:5b:e4:0b:e9:13:ff:f9:db:dd:8f:88:28:80:aa:ee:e2:
         58:67:5d:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org