Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/323830343a363536383a3a2f33322d3438203d3e20323639343838.roa
File:                     323830343a363536383a3a2f33322d3438203d3e20323639343838.roa (raw, json)
Hash identifier:          fTA4Q64d5vNXC/YGnBsfJxvNhLdFubum6IzMNu3NBwQ=
Subject key identifier:   F2:1C:A7:20:4D:1F:20:CB:BF:E2:71:EF:D4:50:C0:64:7F:6A:A8:45
Certificate issuer:       /CN=B14780C65B69F08DED776EDAAFC62ACF928404DB
Certificate serial:       1D3D0F14D74D9D598E5245CE146D1A707871A188
Authority key identifier: B1:47:80:C6:5B:69:F0:8D:ED:77:6E:DA:AF:C6:2A:CF:92:84:04:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B14780C65B69F08DED776EDAAFC62ACF928404DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/323830343a363536383a3a2f33322d3438203d3e20323639343838.roa
Signing time:             Thu 31 Aug 2023 19:48:00 +0000
ROA not before:           Thu 31 Aug 2023 19:43:00 +0000
ROA not after:            Thu 29 Aug 2024 19:48:00 +0000
asID:                     269488
IP address blocks:        2804:6568::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:3d:0f:14:d7:4d:9d:59:8e:52:45:ce:14:6d:1a:70:78:71:a1:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B14780C65B69F08DED776EDAAFC62ACF928404DB
        Validity
            Not Before: Aug 31 19:43:00 2023 GMT
            Not After : Aug 29 19:48:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:10:be:a1:5e:86:97:0b:40:ff:66:2a:fc:
                    74:22:1a:2a:59:6c:2b:50:5a:be:32:a5:4b:aa:50:
                    67:a1:10:70:71:f6:1b:9f:a1:26:eb:b7:5e:25:a8:
                    52:bb:28:92:40:b3:6e:e6:02:b5:6a:ec:0e:b9:65:
                    22:06:fb:62:c0:da:55:38:b4:8b:a5:0a:a6:c1:45:
                    f3:8e:56:46:3b:f0:d9:e0:be:69:55:1b:ed:2f:5b:
                    80:1b:d1:1b:1f:81:93:37:57:a5:67:38:02:c4:b3:
                    da:c9:a0:55:98:6d:85:c0:22:f0:43:17:04:99:e2:
                    bc:a6:63:62:d9:dd:fb:d3:1c:8d:76:ef:2c:f6:72:
                    43:e1:5f:70:08:18:dd:9e:6e:b1:2f:42:d0:79:1e:
                    8c:06:b9:fa:4b:ad:1b:0a:6e:b5:81:3a:73:f6:0d:
                    e3:f0:68:a5:b3:7d:43:9e:34:e9:c9:7b:19:bc:4c:
                    ff:58:d7:4c:a0:1b:0b:ea:12:51:4b:6d:00:07:46:
                    8a:a5:b8:b3:a5:6a:1d:ea:bf:5a:b6:15:14:a3:22:
                    4b:8e:82:ed:a8:c5:f9:2a:bd:b6:d7:85:d6:7b:85:
                    a4:18:55:88:f6:97:0c:86:3b:62:b8:76:69:ca:17:
                    06:b1:39:20:bd:e2:7f:e9:f9:cb:8f:51:d6:ec:4e:
                    88:71
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1C:A7:20:4D:1F:20:CB:BF:E2:71:EF:D4:50:C0:64:7F:6A:A8:45
            X509v3 Authority Key Identifier:
                keyid:B1:47:80:C6:5B:69:F0:8D:ED:77:6E:DA:AF:C6:2A:CF:92:84:04:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/B14780C65B69F08DED776EDAAFC62ACF928404DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B14780C65B69F08DED776EDAAFC62ACF928404DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8eLNTegL9WXzmWhqiPU9vNNVypr4mEatFiGGAzwcaoqx/0/323830343a363536383a3a2f33322d3438203d3e20323639343838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6568::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:8b:93:60:5a:8f:e1:bf:28:00:0d:14:a8:45:b2:b4:9a:13:
         c9:65:ea:97:30:32:a2:26:87:31:a2:2c:ef:5a:7c:99:3b:a4:
         18:74:48:95:de:42:89:70:fc:26:de:c5:c4:45:04:91:15:7c:
         b5:0f:22:2a:56:85:ce:c4:42:42:db:e5:6c:15:aa:51:41:a8:
         11:00:c8:dc:e8:5c:59:12:ca:88:90:2f:ca:2e:0b:d1:2e:29:
         46:8f:a8:e4:f6:ce:5f:2f:0a:3c:63:36:97:d1:86:90:39:c9:
         10:d8:2b:23:ab:a0:02:42:19:ba:90:bf:2b:38:6e:b3:76:6a:
         11:3f:82:c1:52:5f:cd:7a:51:3d:0e:fd:d2:18:3a:e7:b0:56:
         f8:1a:d3:fb:6c:40:75:46:de:6e:95:d5:fd:3d:da:93:be:0b:
         54:93:cd:e8:51:db:80:85:5f:9c:e7:e2:f7:0c:92:07:b6:f5:
         99:58:9c:fd:26:fa:2c:91:e8:49:cf:73:f5:1d:08:6a:ee:bd:
         09:53:90:6a:99:c7:b6:b1:bf:0b:7f:a6:9e:4c:30:30:7c:97:
         19:b5:b3:be:65:8f:8e:9c:b7:48:65:c8:ba:0a:bd:05:18:9a:
         f9:fc:3d:b8:ab:c9:06:49:45:f9:99:ce:17:c8:38:a6:d2:9d:
         f3:d9:e6:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org