Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/323830343a3236633a3a2f33322d3438203d3e20323632383133.roa
File:                     323830343a3236633a3a2f33322d3438203d3e20323632383133.roa (raw, json)
Hash identifier:          knSu7Zhh2yI5B7RmwWSJkZx7FFvyqnk3VUFlkUZDR0M=
Subject key identifier:   2B:B5:F2:A7:28:04:80:6F:27:3B:AB:C7:14:77:4D:1F:61:BE:0C:D7
Certificate issuer:       /CN=57BD1EC8BC001A3303F83653135622A639BE6663
Certificate serial:       24E9741152911625176830AFBF4ECCEAF9F52BC7
Authority key identifier: 57:BD:1E:C8:BC:00:1A:33:03:F8:36:53:13:56:22:A6:39:BE:66:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BD1EC8BC001A3303F83653135622A639BE6663.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/323830343a3236633a3a2f33322d3438203d3e20323632383133.roa
Signing time:             Wed 23 Aug 2023 16:41:57 +0000
ROA not before:           Wed 23 Aug 2023 16:36:57 +0000
ROA not after:            Fri 23 Aug 2024 16:41:57 +0000
asID:                     262813
IP address blocks:        2804:26c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:e9:74:11:52:91:16:25:17:68:30:af:bf:4e:cc:ea:f9:f5:2b:c7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57BD1EC8BC001A3303F83653135622A639BE6663
        Validity
            Not Before: Aug 23 16:36:57 2023 GMT
            Not After : Aug 23 16:41:57 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:bd:1d:d7:60:f1:f0:c4:91:01:2c:b0:0f:73:
                    06:ed:ed:71:8a:ee:90:76:b4:ed:79:bf:ab:76:35:
                    a7:41:30:d0:9e:30:b1:4f:7d:22:c7:d1:e8:c2:14:
                    01:5d:66:75:c5:e8:c8:37:17:61:73:a6:63:b8:2e:
                    1a:61:10:59:cd:cf:45:63:e3:20:13:f1:91:c6:c7:
                    72:0b:c3:fa:bf:07:63:19:ee:85:b4:00:0a:4f:7c:
                    9a:63:3d:39:9f:72:ff:24:67:90:da:78:77:6a:c2:
                    bf:73:39:04:4c:1a:09:24:50:4f:db:67:8a:10:44:
                    21:4d:e8:57:43:a3:f7:c4:8e:d1:ea:bb:31:0e:2b:
                    c0:e1:16:58:8c:fe:17:5d:a3:12:22:c6:74:c3:49:
                    92:cc:58:d5:be:db:af:d5:8d:53:c4:27:a4:d2:c8:
                    f5:0c:6b:b6:bb:c1:ca:8b:3d:04:fb:74:b6:19:10:
                    98:2a:b4:ad:a7:6e:b5:d3:50:37:70:35:20:63:99:
                    22:3c:ee:89:dd:dc:cc:9e:d0:39:74:6c:85:0e:70:
                    b5:58:f0:82:8d:7c:38:0f:a0:49:56:55:b3:1f:f5:
                    0e:17:96:a4:fd:73:07:a8:bc:6a:00:53:49:4e:ce:
                    71:75:7e:79:f5:bd:dc:5e:cb:88:da:98:ed:aa:5e:
                    87:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:B5:F2:A7:28:04:80:6F:27:3B:AB:C7:14:77:4D:1F:61:BE:0C:D7
            X509v3 Authority Key Identifier:
                keyid:57:BD:1E:C8:BC:00:1A:33:03:F8:36:53:13:56:22:A6:39:BE:66:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/57BD1EC8BC001A3303F83653135622A639BE6663.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57BD1EC8BC001A3303F83653135622A639BE6663.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8Q3fJHvLLj61aM8RaBtzBvEDoCT2vnRF9eKEoQ9cA7UK/0/323830343a3236633a3a2f33322d3438203d3e20323632383133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26c::/32

    Signature Algorithm: sha256WithRSAEncryption
         12:82:de:48:7f:6a:37:97:0d:14:86:88:7a:fc:4d:9a:b1:97:
         1c:41:8c:14:d7:c3:ab:b6:14:68:83:76:9e:c7:d2:c7:11:d3:
         2e:df:75:b7:fd:d1:ed:d5:5f:1b:9c:e2:e0:99:b4:09:5c:5f:
         2b:db:ba:09:c0:42:cd:33:f8:5c:ad:8e:14:bb:42:ff:94:99:
         a7:73:8c:59:93:2c:53:68:da:48:82:5c:53:1a:d9:af:f8:61:
         3f:96:9f:3e:dd:82:48:e6:eb:aa:bf:7f:49:ec:78:8c:63:4f:
         16:34:5e:1e:9f:fe:ac:0a:bc:31:a6:1c:6f:72:e8:72:d8:0d:
         98:93:b3:1b:13:30:39:7b:97:bc:9f:86:2d:93:58:72:84:e5:
         01:6b:51:ba:0a:ac:80:4a:3a:35:7d:f6:f1:51:ab:d2:b2:a1:
         71:ec:09:83:04:7d:a2:8e:ad:24:a3:0a:ce:29:cb:ef:57:e1:
         5e:cc:24:3c:47:c9:56:84:11:8e:c2:c4:50:83:b0:19:60:0d:
         a3:19:1b:af:71:32:77:5d:2c:f8:97:42:fe:87:da:ab:13:a0:
         d2:ea:be:cd:fb:ce:02:8b:4a:9c:93:26:b0:d3:95:04:82:b6:
         76:a0:cc:e9:8e:bf:42:b9:e1:3d:92:07:06:f7:e6:2e:6d:88:
         b4:85:9d:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org