Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/323830343a363037633a3a2f33322d313238203d3e20323639313730.roa
File:                     323830343a363037633a3a2f33322d313238203d3e20323639313730.roa (raw, json)
Hash identifier:          KESXg6m2vegdO1MWDu3KsEXRVsC+UXhO+/GY0X8Uqd4=
Subject key identifier:   8A:E4:8A:7C:F1:BC:34:DB:91:1F:F5:82:9E:5C:53:59:B4:D8:DF:ED
Certificate issuer:       /CN=7173EB890308C11804E252B11AD1C7EC54A7DB2F
Certificate serial:       1615AAFFC8CDF4D4E9EA0B6B49F465DF39A4B635
Authority key identifier: 71:73:EB:89:03:08:C1:18:04:E2:52:B1:1A:D1:C7:EC:54:A7:DB:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7173EB890308C11804E252B11AD1C7EC54A7DB2F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/323830343a363037633a3a2f33322d313238203d3e20323639313730.roa
Signing time:             Wed 06 Mar 2024 18:30:04 +0000
ROA not before:           Wed 06 Mar 2024 18:25:04 +0000
ROA not after:            Wed 05 Mar 2025 18:30:04 +0000
asID:                     269170
IP address blocks:        2804:607c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:15:aa:ff:c8:cd:f4:d4:e9:ea:0b:6b:49:f4:65:df:39:a4:b6:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7173EB890308C11804E252B11AD1C7EC54A7DB2F
        Validity
            Not Before: Mar  6 18:25:04 2024 GMT
            Not After : Mar  5 18:30:04 2025 GMT
        Subject: CN=8AE48A7CF1BC34DB911FF5829E5C5359B4D8DFED
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:2a:07:73:b8:a8:19:6c:c7:e9:a7:5f:9b:6b:
                    e3:4e:e1:51:74:14:98:5f:98:79:7e:69:9d:23:55:
                    bc:75:c1:b5:c9:49:04:53:e1:28:de:51:58:69:3f:
                    f1:f7:ca:d1:05:c4:3e:88:ad:06:25:0a:90:0c:91:
                    60:4f:58:e1:aa:e2:94:c8:00:30:d6:62:ee:36:16:
                    44:5b:73:8f:c8:a8:15:73:ac:70:7c:15:91:4b:54:
                    54:38:4a:51:1c:62:3f:a7:55:ec:3c:f0:94:ff:e5:
                    b3:30:a4:fc:27:0c:30:e0:eb:af:b7:cf:0f:fc:15:
                    b1:19:6a:24:f2:ac:f5:38:87:60:96:a9:2c:92:49:
                    c2:64:ed:08:f0:72:a1:2f:a8:32:4d:11:ac:78:bc:
                    cf:4a:21:6d:06:3e:fe:13:17:f0:d2:7a:47:9d:fc:
                    77:2e:90:7f:70:b1:28:c8:b0:90:7f:06:57:90:f1:
                    9f:6a:e7:20:08:de:58:e7:c7:8b:42:87:c4:c1:8f:
                    d9:68:93:d7:13:d5:2a:a0:2c:0c:e4:3e:af:4d:7e:
                    ed:65:8f:1c:0c:4a:e5:e3:98:7e:f0:4c:c1:6a:67:
                    6e:70:69:47:4b:3b:9a:89:3c:1f:9a:b4:b7:40:db:
                    bf:04:90:dd:e3:e0:de:b5:8f:53:f1:0a:da:5d:13:
                    93:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:E4:8A:7C:F1:BC:34:DB:91:1F:F5:82:9E:5C:53:59:B4:D8:DF:ED
            X509v3 Authority Key Identifier:
                keyid:71:73:EB:89:03:08:C1:18:04:E2:52:B1:1A:D1:C7:EC:54:A7:DB:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/7173EB890308C11804E252B11AD1C7EC54A7DB2F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7173EB890308C11804E252B11AD1C7EC54A7DB2F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8XhSnbrroMDpNTfQS1uUzQCYMvpxZMrqCANzDJ4BgNjv/0/323830343a363037633a3a2f33322d313238203d3e20323639313730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:607c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:63:9b:ef:20:a1:1b:3e:31:d7:72:21:79:0f:65:f3:63:19:
         21:0e:59:95:53:79:23:e0:6f:c1:10:88:62:a0:63:ad:fe:86:
         ec:64:4e:a7:94:76:65:be:92:ec:c0:49:c2:86:2f:8f:d2:b3:
         bf:f5:db:c5:9d:fb:21:04:92:8b:8d:83:85:43:97:f7:25:70:
         7f:4e:3c:32:6b:8d:be:6c:39:66:9e:67:c6:e7:b1:62:04:7f:
         f3:d6:6e:d1:1f:80:35:83:de:0e:f6:b7:a9:eb:f5:2d:28:92:
         b8:6a:c4:16:bd:ae:f0:70:04:ea:b1:7d:93:35:0e:d3:39:62:
         4b:9c:04:5d:2a:a5:eb:10:1c:80:40:69:1e:8a:48:85:9f:7f:
         c8:27:aa:80:97:d6:82:fc:e9:94:f0:fd:81:5c:8e:76:f1:6a:
         00:c8:fa:ff:c3:00:a4:c5:2f:aa:aa:a0:ee:87:11:ea:41:48:
         d7:e0:a1:ef:6c:50:47:be:7e:8f:16:40:92:38:0d:b3:be:cb:
         51:9b:87:dc:f0:57:44:ec:30:9c:2c:09:e7:a6:97:78:d3:5d:
         3f:c7:41:92:27:e8:51:f8:77:73:19:b2:2f:fa:9a:a0:8b:9c:
         72:4a:d7:66:4e:e4:98:a7:12:ec:bb:a7:ef:f0:1b:69:c4:53:
         61:b0:85:7b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org