Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa
File:                     323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa (raw, json)
Hash identifier:          jI4H5G+KUi+QgtZfOUxNVLDHKc15GRnHCMdojBeKDZM=
Subject key identifier:   72:27:64:A8:F6:DC:FD:59:15:02:73:1D:25:01:25:1C:9D:1D:DB:CD
Certificate issuer:       /CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
Certificate serial:       1F0BB1C4F8A3FF2C44ED2802574132071010E760
Authority key identifier: 7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa
Signing time:             Wed 20 Mar 2024 18:37:08 +0000
ROA not before:           Wed 20 Mar 2024 18:32:08 +0000
ROA not after:            Wed 19 Mar 2025 18:37:08 +0000
asID:                     269647
IP address blocks:        2804:67bc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:0b:b1:c4:f8:a3:ff:2c:44:ed:28:02:57:41:32:07:10:10:e7:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7FCBD7E5FBEE975815176805D0CC6EB75A36F40B
        Validity
            Not Before: Mar 20 18:32:08 2024 GMT
            Not After : Mar 19 18:37:08 2025 GMT
        Subject: CN=722764A8F6DCFD591502731D2501251C9D1DDBCD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:80:a5:da:75:af:d1:41:42:31:ae:0d:75:2f:
                    be:00:7e:cd:78:13:93:c3:7c:13:aa:62:ca:94:27:
                    67:2a:b4:97:27:c1:60:e9:5e:65:7e:00:60:39:07:
                    88:37:c2:81:a0:b1:9f:7d:12:e9:e1:7f:40:8e:16:
                    ea:3d:ee:c2:c3:d8:fc:ec:69:37:f0:d3:69:45:b0:
                    3e:72:2a:e7:40:7f:51:7e:82:31:36:32:aa:5c:98:
                    af:6e:4a:d0:73:17:6a:8a:08:e5:44:f1:05:c5:b4:
                    e7:fb:85:ef:56:9c:43:b4:17:ec:16:f9:63:c8:5b:
                    ae:15:83:9f:25:df:17:ca:33:c9:b4:13:87:7b:a7:
                    a0:c8:cd:fa:ab:37:75:67:85:72:39:1e:5f:bd:6a:
                    16:87:dd:fc:de:38:34:bc:bb:80:56:16:6d:9c:be:
                    6c:5d:23:06:f4:39:94:c8:bf:ad:28:73:d9:01:4e:
                    f3:67:35:b0:9b:6c:4f:69:a4:8a:09:62:dc:9e:59:
                    12:0d:f5:8e:6e:b2:fc:0a:b7:79:fe:ec:c2:ab:a8:
                    6c:ae:b3:de:a2:76:1a:cd:02:f9:c1:06:41:14:0f:
                    1f:30:f5:5a:23:61:52:c8:91:be:73:45:e6:f5:49:
                    60:d2:37:8b:a7:78:9e:06:dc:65:5c:c9:37:50:e5:
                    a5:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:27:64:A8:F6:DC:FD:59:15:02:73:1D:25:01:25:1C:9D:1D:DB:CD
            X509v3 Authority Key Identifier:
                keyid:7F:CB:D7:E5:FB:EE:97:58:15:17:68:05:D0:CC:6E:B7:5A:36:F4:0B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7FCBD7E5FBEE975815176805D0CC6EB75A36F40B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8TF8WXGHWePdzFM9A3ju8Teg5CRPs4LqUKcWzVaqpQL5/0/323830343a363762633a383030303a3a2f33332d3333203d3e20323639363437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67bc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5f:b7:42:b2:43:38:a9:bc:43:12:82:83:34:f9:d0:99:70:97:
         52:12:67:c0:a7:27:23:61:5f:d4:d5:3a:a2:9b:55:34:e5:ed:
         02:12:20:94:d5:e9:a8:9c:d3:b7:c3:dc:26:d4:ef:4f:dc:01:
         49:e1:40:7e:73:a9:7a:2c:b3:a1:4d:e3:63:6e:4b:9c:31:b8:
         a4:4f:54:ad:ba:70:bd:3f:2c:c1:8b:b2:d4:d6:c2:c8:c4:c3:
         a2:9f:1f:33:3f:09:90:36:8a:2d:7f:36:ef:b5:04:00:55:60:
         83:b8:77:bb:03:c4:e5:8e:91:ca:69:b8:23:1a:67:79:b2:6d:
         a5:5b:12:65:3c:1c:b0:a5:18:0e:a4:63:4b:6d:8a:b8:36:34:
         77:06:98:47:9e:49:1a:76:b0:b6:86:ad:87:72:97:3f:4d:24:
         5a:0e:ad:51:9a:9f:f6:29:d3:24:ed:82:71:e4:1d:05:0e:23:
         70:e8:e7:ed:18:b0:3a:e1:10:1d:fd:0a:18:2c:09:05:e4:31:
         4a:5a:ae:16:2d:3f:8a:4c:18:36:72:cd:dd:a9:3a:c1:cd:38:
         e7:6d:2a:cc:80:d2:da:25:55:1b:66:57:a0:fa:0c:72:b6:67:
         88:8f:c0:52:f5:df:88:57:b0:6e:ab:63:d7:66:f5:2e:ea:e3:
         77:33:1e:2f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:01 2024 by rpki-client on console-ams.rpki-client.org