Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/323830343a353964383a613130303a3a2f34302d3430203d3e20323638373239.roa
File:                     323830343a353964383a613130303a3a2f34302d3430203d3e20323638373239.roa (raw, json)
Hash identifier:          r2tjs3URuTNN15aOQiuAeGgMZRMemNVPP/+Z8Pl8gQk=
Subject key identifier:   9C:C5:F6:F0:0A:33:63:5B:B3:D2:0D:00:10:EF:00:0D:A0:C2:7E:CE
Certificate issuer:       /CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
Certificate serial:       478D0E8203358F6971A28E1B35997A0FC4B733C5
Authority key identifier: 8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/323830343a353964383a613130303a3a2f34302d3430203d3e20323638373239.roa
Signing time:             Tue 26 Dec 2023 16:59:17 +0000
ROA not before:           Tue 26 Dec 2023 16:54:17 +0000
ROA not after:            Tue 24 Dec 2024 16:59:17 +0000
asID:                     268729
IP address blocks:        2804:59d8:a100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:8d:0e:82:03:35:8f:69:71:a2:8e:1b:35:99:7a:0f:c4:b7:33:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1
        Validity
            Not Before: Dec 26 16:54:17 2023 GMT
            Not After : Dec 24 16:59:17 2024 GMT
        Subject: CN=9CC5F6F00A33635BB3D20D0010EF000DA0C27ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8b:68:ae:83:84:f2:5f:19:03:3b:e6:0e:b0:ee:
                    ec:84:4d:46:38:43:c6:b0:94:10:c2:d9:4b:17:a7:
                    42:f9:eb:cb:fc:78:55:97:23:7f:a1:dd:47:b5:7c:
                    17:07:e6:a8:b6:31:a0:0d:ff:0a:bb:fd:19:7f:08:
                    ff:4a:04:1d:8a:a6:a5:19:c9:1d:87:9e:4b:f7:98:
                    89:71:63:07:c2:8c:fa:24:c1:06:b1:c6:ea:06:b9:
                    d5:8c:a1:4c:cc:4b:58:21:46:96:a5:74:bd:3a:a0:
                    65:1b:5e:63:7e:6d:fd:e1:f7:8a:f0:0e:52:3e:41:
                    8f:ea:00:c1:ee:43:b3:14:f4:1a:5b:ed:36:68:09:
                    61:55:9e:17:b5:40:7a:6b:3c:d5:81:01:41:c6:54:
                    63:93:ec:1c:90:f0:7d:39:69:2f:ba:f8:e4:14:85:
                    e7:86:41:c8:fd:f2:82:66:4f:30:ef:b2:b9:3d:36:
                    7e:ea:0f:77:58:65:c9:45:5b:4d:37:c6:d6:47:fc:
                    b8:0b:59:e2:3e:6a:f8:38:85:46:22:1c:54:8c:2d:
                    48:25:0d:3f:68:d7:2b:e3:29:04:3a:ba:ae:bd:08:
                    e2:b6:04:17:2c:d8:24:30:5e:50:a5:f9:c1:6b:57:
                    a5:eb:4a:45:61:0c:53:a6:cd:b8:a7:47:5b:3c:40:
                    92:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:C5:F6:F0:0A:33:63:5B:B3:D2:0D:00:10:EF:00:0D:A0:C2:7E:CE
            X509v3 Authority Key Identifier:
                keyid:8E:DE:9E:8F:BF:73:C6:D8:FE:C3:F7:D8:2D:EF:1E:1B:2B:04:AE:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8EDE9E8FBF73C6D8FEC3F7D82DEF1E1B2B04AED1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FSgsb9NwP2BvgLd8a1YU9BvsnThUKsP2acJ4eNYw6ay/0/323830343a353964383a613130303a3a2f34302d3430203d3e20323638373239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:59d8:a100::/40

    Signature Algorithm: sha256WithRSAEncryption
         87:d7:9a:11:64:96:9b:e2:fc:49:66:45:96:be:a1:9b:24:17:
         f6:ee:21:26:9f:6c:c3:d8:d6:53:ea:60:69:de:68:03:1c:62:
         cd:83:f7:04:01:4f:fe:a1:95:f1:8e:4d:65:e2:86:12:93:58:
         7e:c6:8b:0c:89:be:98:fa:b2:87:04:bd:8d:b7:11:33:ea:ce:
         25:dc:fa:4d:5c:bb:21:f1:5b:67:b9:34:2a:fd:8b:d1:88:63:
         03:35:a2:22:79:86:52:cf:5c:b5:f4:05:b3:e1:7a:40:2c:95:
         e5:2f:08:3f:e5:82:6c:11:c4:4f:49:f6:53:f7:ef:07:5f:8c:
         89:36:73:0a:0d:9e:30:ec:78:1d:08:56:eb:c1:0f:b7:65:46:
         f7:3f:28:34:f8:2a:3c:f8:ce:ec:a2:3a:69:71:93:06:94:6b:
         8f:a2:b7:95:26:63:2e:ec:48:8a:4d:71:d6:6f:88:be:bf:b8:
         1c:cd:8d:b8:e8:93:2d:0d:ab:63:4e:ad:2b:8b:e8:7b:dd:3b:
         3b:ee:45:75:ed:d8:78:8e:50:cd:92:40:22:07:02:85:71:90:
         7a:21:a9:9d:a3:42:f1:1c:97:02:60:84:09:d7:4a:b0:ba:f6:
         0a:33:50:0f:7a:1f:c7:5e:03:61:bf:e4:27:e0:1c:1a:e7:04:
         60:df:b9:72
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org