Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/0/323830343a386233383a3a2f33322d3438203d3e20323733373139.roa
File:                     323830343a386233383a3a2f33322d3438203d3e20323733373139.roa (raw, json)
Hash identifier:          THlqY8C33ZWgX5L8ZYXv19Och+5UuEGxCNbvIPF8jlc=
Subject key identifier:   B6:A2:28:A2:83:00:56:CC:3B:39:33:9F:0B:8C:13:AF:62:24:AD:33
Certificate issuer:       /CN=8F92DB2FFF9DCF14E801F131CE4363CFCE485FB3
Certificate serial:       5A028DA10C9070322C48825934305ABD053F0656
Authority key identifier: 8F:92:DB:2F:FF:9D:CF:14:E8:01:F1:31:CE:43:63:CF:CE:48:5F:B3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F92DB2FFF9DCF14E801F131CE4363CFCE485FB3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/0/323830343a386233383a3a2f33322d3438203d3e20323733373139.roa
Signing time:             Thu 22 Jun 2023 22:36:50 +0000
ROA not before:           Thu 22 Jun 2023 22:31:50 +0000
ROA not after:            Thu 20 Jun 2024 22:36:50 +0000
asID:                     273719
IP address blocks:        2804:8b38::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:02:8d:a1:0c:90:70:32:2c:48:82:59:34:30:5a:bd:05:3f:06:56
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F92DB2FFF9DCF14E801F131CE4363CFCE485FB3
        Validity
            Not Before: Jun 22 22:31:50 2023 GMT
            Not After : Jun 20 22:36:50 2024 GMT
        Subject: CN=B6A228A2830056CC3B39339F0B8C13AF6224AD33
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:75:97:9a:c5:7f:60:de:6f:d5:93:0b:58:e7:
                    b1:85:a5:85:14:ee:22:5d:96:b8:94:12:b7:14:04:
                    d7:b7:7b:48:76:e8:e9:76:be:3f:e6:e3:fc:c9:02:
                    23:4f:05:4b:8f:00:bb:90:75:87:3a:61:43:6c:2e:
                    76:be:4a:f5:19:91:0d:4c:3a:54:28:38:74:98:32:
                    a5:7a:cb:c7:2f:8e:cc:04:d6:fd:e9:80:e8:4f:21:
                    48:ab:2c:41:ab:0c:ad:57:61:1c:17:9e:0e:ae:de:
                    ba:6e:8c:c9:53:fe:37:e4:ab:90:77:4e:f4:4a:0d:
                    ab:3a:6d:83:ce:d1:c5:2d:39:4f:7a:d0:94:9b:64:
                    7f:6c:c7:c6:59:e1:2c:93:da:e2:e0:14:62:39:6c:
                    3a:cf:ac:f8:49:9c:17:53:28:70:b8:a9:bd:c4:59:
                    02:01:71:b2:44:76:be:82:db:66:15:60:60:ad:b2:
                    9f:bf:8d:fa:be:1e:ce:a9:8f:b9:ec:d8:d3:8d:58:
                    12:3e:8f:b7:f1:ab:ab:1a:b1:19:07:c5:b5:7c:a1:
                    72:3b:c4:8c:9d:78:dc:72:85:23:ee:c0:15:8e:b2:
                    16:05:6a:f2:73:bc:41:32:e1:d1:23:6a:d5:95:b6:
                    b1:03:03:e6:38:5d:f2:f4:59:44:49:6c:83:a2:83:
                    a2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:A2:28:A2:83:00:56:CC:3B:39:33:9F:0B:8C:13:AF:62:24:AD:33
            X509v3 Authority Key Identifier:
                keyid:8F:92:DB:2F:FF:9D:CF:14:E8:01:F1:31:CE:43:63:CF:CE:48:5F:B3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/0/8F92DB2FFF9DCF14E801F131CE4363CFCE485FB3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F92DB2FFF9DCF14E801F131CE4363CFCE485FB3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8AtbAA38STB9ZaCMtRpEypFNqPqbCKC1y9WYcpxfjenc/0/323830343a386233383a3a2f33322d3438203d3e20323733373139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b38::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:1e:9f:c6:54:90:81:f6:e5:03:7f:9a:54:39:5f:fa:4d:b3:
         45:87:29:6a:18:de:f1:1b:0c:1a:95:04:35:77:28:25:ca:e2:
         a3:aa:06:a7:9f:de:b8:62:2b:da:4f:ac:15:bc:33:3d:d4:f2:
         97:bc:b2:72:59:ee:01:79:dc:c6:c9:21:91:bb:7c:78:83:65:
         2e:87:80:81:af:6b:e3:25:55:cd:15:4c:f5:75:a8:c5:08:c2:
         75:46:e5:a5:18:de:f1:6e:08:f2:82:21:c7:43:1d:37:37:99:
         22:9b:83:a7:74:df:38:38:ba:64:f3:b8:db:9a:4b:94:e2:58:
         7d:35:c0:39:9c:ed:fa:6c:9e:f2:a4:af:d6:c6:6f:9c:05:79:
         80:52:18:36:df:54:4f:ff:70:6f:db:b7:23:a9:7d:20:c3:3c:
         c8:93:64:b4:60:f7:9e:a8:4e:32:a3:88:93:73:34:25:d1:c4:
         73:7d:3f:d4:9a:37:9b:15:6c:ab:e1:4a:4a:10:f0:8e:c3:a1:
         75:88:2d:8d:b4:e5:e4:58:b0:a5:cf:42:74:95:67:fd:80:7e:
         15:0d:1d:ea:ab:5d:63:af:cb:1b:c6:33:93:e8:28:cc:15:ee:
         77:aa:f1:d4:54:0f:ff:c3:1e:ef:98:19:cf:99:01:26:f9:47:
         6a:9d:25:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org