Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/323830343a326534343a663130303a3a2f34302d3430203d3e20323635333335.roa
File:                     323830343a326534343a663130303a3a2f34302d3430203d3e20323635333335.roa (raw, json)
Hash identifier:          iqTBAQtPiAGj+sBhszgm5DZnAvtYb9PBi08GJ/Q0Yf4=
Subject key identifier:   89:3A:04:93:A4:93:70:F4:C2:B2:C2:C4:68:55:6C:C9:34:97:39:CC
Certificate issuer:       /CN=F263F2205304C2F06E9E9C8B6E4D4475AC4358A5
Certificate serial:       12B7B48C2B5D6446D99207571AA35F8927F634F8
Authority key identifier: F2:63:F2:20:53:04:C2:F0:6E:9E:9C:8B:6E:4D:44:75:AC:43:58:A5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/323830343a326534343a663130303a3a2f34302d3430203d3e20323635333335.roa
Signing time:             Wed 20 Dec 2023 19:15:51 +0000
ROA not before:           Wed 20 Dec 2023 19:10:51 +0000
ROA not after:            Wed 18 Dec 2024 19:15:51 +0000
asID:                     265335
IP address blocks:        2804:2e44:f100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:b7:b4:8c:2b:5d:64:46:d9:92:07:57:1a:a3:5f:89:27:f6:34:f8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F263F2205304C2F06E9E9C8B6E4D4475AC4358A5
        Validity
            Not Before: Dec 20 19:10:51 2023 GMT
            Not After : Dec 18 19:15:51 2024 GMT
        Subject: CN=893A0493A49370F4C2B2C2C468556CC9349739CC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:1a:20:fd:fa:bc:d5:b2:18:28:82:1c:a4:67:
                    df:2c:08:95:c2:70:f9:49:c4:cb:89:43:b8:f9:2a:
                    1c:e6:8e:0d:17:ed:b0:51:d2:7e:16:da:83:4a:69:
                    94:78:22:c7:24:bc:d4:78:97:3d:10:35:4a:42:be:
                    ab:43:ab:2a:db:82:4f:14:b9:1a:43:63:98:7e:b0:
                    f5:5c:29:fb:e2:df:97:8d:b6:8b:f8:2c:e3:76:63:
                    dc:66:67:c0:d1:88:22:fa:62:3b:7b:dc:bf:4f:de:
                    c1:c5:6c:fd:9e:12:bc:79:c4:05:46:ee:9a:f6:16:
                    cb:9e:ce:c5:2f:1a:3f:dc:60:29:5c:34:e2:cd:35:
                    2c:1b:b1:33:97:44:50:ce:bd:34:7a:4b:1a:09:15:
                    47:d1:2b:e4:a4:74:a9:9a:a0:cb:77:0c:d3:d7:2f:
                    94:c0:4c:b4:98:98:72:c0:25:09:fa:a8:52:c3:5e:
                    6b:7c:79:e9:32:12:df:91:ed:07:6b:fa:10:39:8a:
                    09:0f:50:5a:da:50:e7:93:56:fa:01:ca:cf:bf:ec:
                    97:81:40:ff:1e:34:0c:09:e8:1a:96:7c:a5:a0:8d:
                    b4:6c:c0:ac:1d:2c:4e:c2:30:c2:07:b8:99:da:03:
                    33:fd:58:9b:01:88:c0:ca:03:2c:a6:27:df:43:26:
                    3b:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:3A:04:93:A4:93:70:F4:C2:B2:C2:C4:68:55:6C:C9:34:97:39:CC
            X509v3 Authority Key Identifier:
                keyid:F2:63:F2:20:53:04:C2:F0:6E:9E:9C:8B:6E:4D:44:75:AC:43:58:A5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F263F2205304C2F06E9E9C8B6E4D4475AC4358A5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8VPP87FJtYifpDZzK8ndZNXCRbu2u8mLZV7eJriAf1hm/0/323830343a326534343a663130303a3a2f34302d3430203d3e20323635333335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e44:f100::/40

    Signature Algorithm: sha256WithRSAEncryption
         3d:a6:d0:91:6d:24:1f:87:5e:b8:89:7a:0c:2b:e8:1e:f7:c8:
         be:9f:2a:57:c8:cb:ab:67:0d:28:1e:4e:d5:22:f0:f4:a3:8e:
         e1:3c:ad:58:c1:9f:12:e7:58:c2:35:61:ff:fd:47:35:6b:3a:
         5b:ab:4e:d8:5e:23:bc:a3:61:97:9c:8c:5a:72:70:ea:33:c5:
         26:2d:2b:0c:4e:b3:65:95:bd:ba:f9:2a:84:df:18:c9:3c:ad:
         f1:20:68:f1:f6:86:d7:eb:6d:ca:d9:53:28:33:a2:2b:f2:07:
         04:0c:32:8f:73:49:5c:c4:bb:b8:37:42:e0:f5:12:14:ad:67:
         31:09:d5:84:66:fa:65:12:6b:ef:22:12:79:e9:5d:05:5a:2d:
         34:e8:fa:7c:cd:1f:b9:cc:96:93:30:d4:64:8d:3a:7c:7e:84:
         40:12:e2:ba:b7:97:f4:c1:fc:9e:37:de:dd:58:13:a0:68:db:
         c6:43:0d:f2:60:1c:f6:91:09:81:a4:a8:c7:2e:b4:ef:f5:7c:
         63:aa:7a:da:f1:9e:ba:93:ea:3c:7e:0d:23:25:29:ab:3c:f4:
         b6:49:29:3d:a1:c9:66:fb:b5:e6:6d:c5:8f:be:34:25:be:c9:
         0e:e3:18:c5:a6:d7:60:ea:76:ce:01:5e:61:37:2a:c0:27:42:
         92:17:4a:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:02 2024 by rpki-client on console-ams.rpki-client.org