Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a383030303a3a2f33332d3333203d3e20323633333630.roa
File:                     323830343a313466303a383030303a3a2f33332d3333203d3e20323633333630.roa (raw, json)
Hash identifier:          aHi6wz9a8+9UMIjjczr4j51aq0vzPnJ57q6U/+byHJk=
Subject key identifier:   2C:27:B5:73:83:00:34:6A:F1:0B:3A:D4:10:CB:1F:0D:A4:A7:28:F0
Certificate issuer:       /CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
Certificate serial:       6D31CCC9F09D3D7A045FAFF6DFF28A60F22A877B
Authority key identifier: 67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a383030303a3a2f33332d3333203d3e20323633333630.roa
Signing time:             Mon 18 Dec 2023 14:49:11 +0000
ROA not before:           Mon 18 Dec 2023 14:44:11 +0000
ROA not after:            Mon 16 Dec 2024 14:49:11 +0000
asID:                     263360
IP address blocks:        2804:14f0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6d:31:cc:c9:f0:9d:3d:7a:04:5f:af:f6:df:f2:8a:60:f2:2a:87:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=679534B939B34FA7D85CBB2A06E0610EC372ADC7
        Validity
            Not Before: Dec 18 14:44:11 2023 GMT
            Not After : Dec 16 14:49:11 2024 GMT
        Subject: CN=2C27B5738300346AF10B3AD410CB1F0DA4A728F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:20:58:59:88:94:f5:0e:c1:94:16:e5:a3:3b:
                    8c:d9:51:24:49:af:f5:2a:ed:a9:5f:84:f3:00:4b:
                    86:df:c4:2b:01:89:00:36:0f:41:cd:05:29:c1:b3:
                    ec:fc:cf:a7:36:79:6d:af:ff:89:8c:e4:2b:31:f4:
                    1a:03:1c:34:f6:10:64:37:4c:af:d2:f2:a1:2b:c4:
                    11:83:04:0c:d8:02:cd:2d:d9:ca:20:bf:1c:13:ef:
                    a3:c9:ab:3b:e2:8f:1a:c1:af:c1:a2:5b:96:58:dd:
                    82:ee:0a:94:3f:25:99:f9:03:5c:43:5b:81:6d:84:
                    a4:b3:2d:70:e1:72:8c:93:0b:0a:12:bf:b9:83:94:
                    d3:12:7f:8d:3c:76:1b:ce:b2:50:55:9b:14:fd:80:
                    cf:2e:1d:6f:4c:fd:f3:c9:71:4d:80:74:2d:3f:22:
                    ae:6a:6e:7e:18:14:ad:4f:ec:da:a3:88:72:22:35:
                    6c:05:3f:87:77:53:c3:98:56:12:27:ae:46:c4:fa:
                    79:32:44:42:57:34:7d:42:54:99:a0:d7:b6:fd:5d:
                    d3:b0:78:f3:a6:c0:9d:d6:76:7e:b9:b6:21:d1:0f:
                    2f:93:90:8b:d1:f7:e1:73:b8:b0:97:e5:a9:86:03:
                    f2:ce:51:a1:9a:b2:ba:16:7d:34:c1:6a:5a:57:50:
                    39:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:27:B5:73:83:00:34:6A:F1:0B:3A:D4:10:CB:1F:0D:A4:A7:28:F0
            X509v3 Authority Key Identifier:
                keyid:67:95:34:B9:39:B3:4F:A7:D8:5C:BB:2A:06:E0:61:0E:C3:72:AD:C7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/679534B939B34FA7D85CBB2A06E0610EC372ADC7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a383030303a3a2f33332d3333203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14f0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         48:a6:34:37:91:b5:cb:f2:d2:68:ef:ed:7b:43:e3:2c:83:40:
         da:99:29:58:57:6a:6a:0f:1e:20:a2:ae:29:e2:20:fb:73:76:
         2d:5b:34:d4:aa:26:0f:9f:00:22:d9:e9:0b:03:fe:bd:03:65:
         05:69:b3:06:f7:3a:e8:19:e2:e1:57:c1:7e:81:8f:7b:85:ff:
         8b:ee:bf:4e:7c:99:de:96:4a:76:5c:d2:e7:09:9e:ff:08:0b:
         8c:4d:01:78:17:1c:60:15:90:35:b3:bf:69:d2:35:69:ed:9e:
         83:ad:f1:a8:15:07:4c:d3:6e:43:fe:a4:6a:f5:fb:30:91:42:
         a7:94:43:7b:39:84:e8:69:40:d6:58:72:d3:15:f6:80:90:56:
         dd:3b:21:cd:38:56:47:9c:9d:1e:d2:cf:c4:08:46:14:c6:9d:
         da:1e:e7:e4:e6:c8:62:da:12:ee:93:07:62:30:3b:0c:4f:06:
         f3:24:e2:5a:29:b7:a8:9b:fd:98:d1:61:e0:da:02:c7:29:47:
         8b:c7:59:90:77:72:6b:18:9b:23:ed:e6:e0:ba:8c:e7:b6:5f:
         11:21:f9:22:cb:dd:db:07:70:a5:92:14:ae:d1:65:e2:94:86:
         89:7c:28:29:64:ac:fc:97:ee:89:11:4e:1f:7e:84:e0:eb:be:
         36:27:fc:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org