Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/323830343a323539343a383030303a3a2f33332d3333203d3e20323634323839.roa
File:                     323830343a323539343a383030303a3a2f33332d3333203d3e20323634323839.roa (raw, json)
Hash identifier:          Ibpk3XkTCc48VTd8BlFIH99s7pemlyE9g4wJF9H7WLg=
Subject key identifier:   86:61:28:BC:6C:47:BA:BB:1F:9D:8B:F8:62:36:BD:99:CC:00:9D:FC
Certificate issuer:       /CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
Certificate serial:       370F1850A944FF4C2745F6DD48BC030567B6383B
Authority key identifier: 61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/323830343a323539343a383030303a3a2f33332d3333203d3e20323634323839.roa
Signing time:             Wed 12 Jul 2023 13:24:45 +0000
ROA not before:           Wed 12 Jul 2023 13:19:45 +0000
ROA not after:            Wed 10 Jul 2024 13:24:45 +0000
asID:                     264289
IP address blocks:        2804:2594:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:0f:18:50:a9:44:ff:4c:27:45:f6:dd:48:bc:03:05:67:b6:38:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6109951AFD715B86D6C7629D83B6CEFF072BCF82
        Validity
            Not Before: Jul 12 13:19:45 2023 GMT
            Not After : Jul 10 13:24:45 2024 GMT
        Subject: CN=866128BC6C47BABB1F9D8BF86236BD99CC009DFC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:51:64:ba:79:18:5f:2c:96:47:6c:26:f6:8a:
                    aa:b2:6e:a9:41:8f:a7:43:f5:ec:da:31:9a:31:bc:
                    33:c4:c7:c3:a2:26:53:4d:30:36:e7:30:cf:8c:0b:
                    ce:00:70:d5:49:a3:03:01:7c:f0:52:40:5c:c6:94:
                    75:73:f0:65:43:bc:32:59:51:99:a8:16:3d:66:b9:
                    9f:cf:7b:12:fc:38:e9:7a:5c:e7:c2:e4:b9:ed:99:
                    f3:fe:04:80:04:19:de:ce:8c:e8:04:73:31:3e:95:
                    b1:42:bd:4c:26:f8:ce:00:be:62:2d:49:78:5e:ee:
                    09:d7:ce:ea:3e:7b:5e:1d:45:b4:df:3a:13:00:4d:
                    81:71:27:fd:2f:8b:06:30:8b:1c:bc:4c:81:fd:25:
                    d2:38:5b:98:4b:c9:28:bd:e0:81:1a:9d:49:9c:3d:
                    25:80:aa:34:f5:38:c8:20:7f:d5:d9:09:af:54:c5:
                    51:6c:7f:cf:c7:29:4a:fc:00:ab:76:b4:83:f6:de:
                    6a:13:67:8b:9e:67:2e:74:65:bf:b8:99:14:c5:5b:
                    af:10:b4:b4:50:68:ee:ed:4a:fd:c7:20:fd:4b:56:
                    7b:a1:d6:f7:59:1b:0e:3c:a8:1a:91:cf:5d:ae:54:
                    df:d5:ae:62:53:db:b8:18:b4:9e:aa:4c:32:64:37:
                    fe:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:61:28:BC:6C:47:BA:BB:1F:9D:8B:F8:62:36:BD:99:CC:00:9D:FC
            X509v3 Authority Key Identifier:
                keyid:61:09:95:1A:FD:71:5B:86:D6:C7:62:9D:83:B6:CE:FF:07:2B:CF:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6109951AFD715B86D6C7629D83B6CEFF072BCF82.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8H6R2K2ApBbbxC3n7GzfBVuF8cbz9EzRaDJcJC86XSDk/0/323830343a323539343a383030303a3a2f33332d3333203d3e20323634323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2594:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         54:65:a6:e4:42:03:93:98:1b:e8:a8:24:02:db:8c:f9:78:89:
         09:8a:24:f2:a1:c5:7d:ed:5f:ee:06:49:ab:e8:89:09:df:78:
         12:5c:65:76:12:4a:79:8b:79:a8:c3:79:53:7d:92:2b:0f:e7:
         a3:a9:5e:19:4c:fb:8f:3f:da:0b:65:51:bb:dc:db:c4:3b:67:
         05:78:6e:0a:66:6d:a2:21:02:85:c1:b8:11:14:4f:63:63:64:
         d5:c1:03:4c:0f:d8:e3:a9:a3:dc:ae:fa:30:1c:77:90:da:71:
         80:e6:ef:1e:a9:1f:20:33:03:9c:3f:b8:dd:94:67:ff:ee:5b:
         1a:a0:80:17:b4:96:a4:bb:74:ce:f1:f6:29:cd:3a:90:aa:8b:
         ec:2f:d9:a1:18:35:d2:ba:27:f7:22:f8:6d:28:c4:6d:53:e0:
         76:e6:cd:d9:bc:1f:21:35:41:03:6d:52:1a:a1:a2:dd:e8:6d:
         0e:96:3d:34:74:8a:4a:07:60:80:48:dc:e3:53:55:83:4b:f8:
         7e:38:39:a6:5a:a4:16:6e:6f:7e:fe:4e:5d:cd:6e:b1:68:e3:
         4d:89:5f:bc:67:95:5e:0a:23:83:f4:d8:d0:48:ef:ab:dd:5e:
         86:50:ad:c3:a0:73:4b:43:4a:57:38:40:27:7f:c8:a3:9d:c7:
         09:2e:93:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org