Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a3a2f33332d3333203d3e20323639313139.roa
File:                     323830343a356662383a3a2f33332d3333203d3e20323639313139.roa (raw, json)
Hash identifier:          RmXfd4A/HQAuaF6+fgo4xtK6J6yU3T6E3b66kQXjODI=
Subject key identifier:   E9:9E:3A:E9:DB:F4:19:D2:D1:9A:B8:BF:B1:C0:D8:61:70:88:CC:09
Certificate issuer:       /CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
Certificate serial:       71F508926E48EBD8BFC3AFFA7B06744B1744CBA2
Authority key identifier: 93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a3a2f33332d3333203d3e20323639313139.roa
Signing time:             Sun 21 May 2023 20:58:24 +0000
ROA not before:           Sun 21 May 2023 20:53:24 +0000
ROA not after:            Tue 21 May 2024 20:58:24 +0000
asID:                     269119
IP address blocks:        2804:5fb8::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:f5:08:92:6e:48:eb:d8:bf:c3:af:fa:7b:06:74:4b:17:44:cb:a2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8
        Validity
            Not Before: May 21 20:53:24 2023 GMT
            Not After : May 21 20:58:24 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:18:8d:0f:99:f0:2b:a4:78:8f:b7:d0:54:83:
                    db:c8:fb:2b:0b:0f:dc:49:9f:7f:27:92:e5:53:0c:
                    af:5b:15:d0:ce:f0:3a:0b:50:a2:2c:56:9b:50:72:
                    b5:0f:b3:1c:df:31:2b:c3:b9:6b:3f:31:0f:01:bb:
                    8e:d8:1b:8a:fc:dc:88:f3:34:51:c6:4b:bc:07:c3:
                    1d:d7:0a:90:9a:41:49:59:5b:87:7c:7b:29:50:4b:
                    b6:49:e7:3c:c4:8e:6d:07:5a:00:cc:21:0b:dd:87:
                    77:f8:56:0a:52:f5:6b:ae:15:53:1f:d6:e1:7a:4d:
                    cc:27:a4:a7:4e:03:69:d5:9e:9a:4c:64:85:af:ba:
                    59:e4:5c:5f:27:d2:cf:48:be:fc:e0:96:7d:8f:68:
                    f4:25:74:7f:3a:e2:33:72:7b:19:e7:64:3d:a2:e9:
                    d5:db:34:6b:9a:6e:ba:ab:60:bb:07:1b:de:6c:8b:
                    62:da:fd:b5:01:73:be:02:5b:71:0e:c6:2f:38:27:
                    78:67:2c:d9:b2:d8:1b:26:8c:1b:35:ed:8f:d6:fd:
                    f1:da:4e:96:cd:74:97:49:39:88:29:59:cb:e1:99:
                    47:d3:f3:fa:cc:33:77:62:f9:d1:60:df:33:ab:62:
                    3f:be:23:fb:3d:f8:ff:01:66:42:d4:05:6a:be:09:
                    43:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E9:9E:3A:E9:DB:F4:19:D2:D1:9A:B8:BF:B1:C0:D8:61:70:88:CC:09
            X509v3 Authority Key Identifier:
                keyid:93:EB:58:C1:1D:A4:DA:24:D1:CE:35:8F:CF:7D:C9:E5:FF:89:1C:E8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/93EB58C11DA4DA24D1CE358FCF7DC9E5FF891CE8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kgtiefyaB7o3dEFUmRSv3Li7XLHhjkqR4bWRfMUrxAE/0/323830343a356662383a3a2f33332d3333203d3e20323639313139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fb8::/33

    Signature Algorithm: sha256WithRSAEncryption
         8f:25:a2:b3:cd:91:72:47:c5:4b:8b:3c:51:7f:8d:2b:af:d3:
         fe:5b:1e:8d:06:f4:b1:d1:54:02:19:fe:ed:dd:fa:26:b3:2f:
         b6:ce:5f:65:8a:4e:08:51:95:60:7c:a9:1f:87:d8:1a:91:47:
         98:39:d3:e7:2b:88:3a:1d:5f:39:8a:0d:2e:a2:1f:93:89:6d:
         fa:e1:22:39:aa:de:25:c4:b3:e3:41:0a:e2:de:6d:90:a4:5e:
         3f:35:63:8c:31:c2:68:0c:78:81:c5:13:81:3b:80:1e:d5:f0:
         af:2f:fe:d7:59:42:e8:63:37:46:66:a7:cb:c2:00:09:b2:76:
         42:53:cd:1c:3b:94:d3:44:f6:3f:f4:b7:44:8c:16:11:93:12:
         d4:7d:0d:ce:e1:78:ab:56:02:26:b3:af:dd:b2:09:f6:5c:72:
         6d:8b:a5:24:5d:b0:f8:b1:1b:50:93:a5:e2:80:d4:f2:39:9b:
         5b:29:e8:df:8e:16:fa:ac:17:69:73:90:ca:0b:1b:4b:32:ac:
         18:fb:0b:a3:54:a7:0d:32:2a:78:65:13:49:bb:4c:eb:97:4a:
         ed:8d:75:82:a1:ec:3b:f1:52:30:06:06:74:8b:83:58:72:54:
         85:47:18:f0:a7:8c:45:2c:ce:c0:90:6e:91:c1:eb:ef:88:97:
         4d:59:a8:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org