Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a633030303a3a2f33342d3334203d3e20323633333630.roa
File:                     323830343a313466303a633030303a3a2f33342d3334203d3e20323633333630.roa (raw, json)
Hash identifier:          OYv14QzVFVjYmcgt5/gNIcMj8Wgb58MoxWRbHZiFG84=
Subject key identifier:   8A:30:A8:FA:07:F3:68:B1:5B:54:EC:22:B8:AD:CE:41:8B:1D:BA:2C
Certificate issuer:       /CN=87F4FF5C216ACF5746BF34B54ADE14105191CA0E
Certificate serial:       6176F222AC4141E29E90CEF973895E14807333DC
Authority key identifier: 87:F4:FF:5C:21:6A:CF:57:46:BF:34:B5:4A:DE:14:10:51:91:CA:0E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87F4FF5C216ACF5746BF34B54ADE14105191CA0E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a633030303a3a2f33342d3334203d3e20323633333630.roa
Signing time:             Tue 06 Jun 2023 19:10:40 +0000
ROA not before:           Tue 06 Jun 2023 19:05:40 +0000
ROA not after:            Tue 04 Jun 2024 19:10:40 +0000
asID:                     263360
IP address blocks:        2804:14f0:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:76:f2:22:ac:41:41:e2:9e:90:ce:f9:73:89:5e:14:80:73:33:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=87F4FF5C216ACF5746BF34B54ADE14105191CA0E
        Validity
            Not Before: Jun  6 19:05:40 2023 GMT
            Not After : Jun  4 19:10:40 2024 GMT
        Subject: CN=8A30A8FA07F368B15B54EC22B8ADCE418B1DBA2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e8:ad:d7:53:a0:b3:61:6b:27:cf:0a:ac:50:
                    b0:11:bb:6a:52:9c:26:b0:78:29:8e:c5:a5:a9:b5:
                    8d:b8:82:71:3e:67:75:8f:e8:0b:37:2d:33:66:5e:
                    7c:b8:d8:62:96:14:3e:8b:da:f8:f9:ca:cd:b2:dc:
                    bc:04:14:46:53:48:4f:64:e8:df:fb:d3:05:d1:23:
                    72:bc:ee:95:d3:35:5d:f7:08:e2:c1:18:70:9c:80:
                    bd:9f:00:19:cd:93:80:ef:1a:d5:5f:20:98:9a:55:
                    12:3f:9e:42:c8:65:3a:f3:f8:63:1e:ee:83:bd:16:
                    58:3b:40:b1:80:cf:bd:9f:0a:ab:c8:ff:90:7a:d1:
                    56:9a:10:30:ef:0f:5c:fb:d1:97:bf:cb:61:d3:05:
                    a9:84:42:a7:40:ad:11:d3:f7:ec:2a:56:f2:16:e2:
                    8d:f5:22:7f:44:cf:32:a7:a3:7a:ac:a9:ba:1d:2b:
                    43:15:7a:b5:39:a2:a4:c6:ae:76:94:bd:5c:a5:4a:
                    6d:b5:b5:7f:24:77:d7:dc:8c:79:bf:38:10:bf:85:
                    33:df:c1:e8:2f:78:b8:8d:11:c2:1a:c4:59:2b:e2:
                    53:72:f5:47:cb:1a:2f:d5:76:c8:8e:a1:45:fe:1f:
                    bb:cb:88:22:4e:40:8f:01:5c:ad:5e:22:dd:a4:af:
                    42:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:30:A8:FA:07:F3:68:B1:5B:54:EC:22:B8:AD:CE:41:8B:1D:BA:2C
            X509v3 Authority Key Identifier:
                keyid:87:F4:FF:5C:21:6A:CF:57:46:BF:34:B5:4A:DE:14:10:51:91:CA:0E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/87F4FF5C216ACF5746BF34B54ADE14105191CA0E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/87F4FF5C216ACF5746BF34B54ADE14105191CA0E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8pJ3ozxZHgTtWtXMJYEFh95fF7tzp1SDGui2KaDMhfEy/0/323830343a313466303a633030303a3a2f33342d3334203d3e20323633333630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14f0:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         cc:ae:4d:28:32:8c:fa:44:13:be:fd:ba:01:95:5d:0e:fb:ce:
         2e:4a:4b:be:95:94:6c:21:9f:7b:9c:ee:cb:7c:7a:ea:4c:44:
         7e:57:2c:6a:7b:9d:48:f6:e1:b0:04:db:4c:5f:4c:dd:b3:0e:
         f0:6c:d0:ac:46:ef:8a:0f:50:fd:3a:5e:08:88:b6:ef:f2:e8:
         d9:a6:42:f9:2e:f7:9d:d1:10:74:70:98:46:14:bc:9c:ef:32:
         c1:a4:93:89:09:cd:eb:86:13:56:55:aa:3e:86:73:ca:f1:8f:
         1b:47:61:e5:50:cb:da:91:73:7f:25:e1:a9:ae:bb:07:92:f9:
         bf:ed:65:fd:73:a6:8c:fd:48:3a:30:90:03:c2:54:5a:7c:34:
         83:98:bc:17:9b:76:85:46:54:84:80:c8:03:80:99:fd:37:88:
         7d:f9:e7:ec:89:5d:c8:00:57:6d:5b:26:25:05:08:36:90:3c:
         8f:82:d0:b7:d1:fd:a8:9e:e9:f0:1c:1f:ae:70:0c:62:e0:c3:
         b6:b7:57:a4:33:5d:e5:04:c8:e5:39:a2:fa:66:d0:0a:c1:ca:
         93:67:a2:64:dc:2d:db:55:e6:74:61:7f:b6:cb:95:c4:8d:00:
         8e:73:09:d1:a2:0c:ab:ac:cd:f9:1f:96:00:a8:7a:c0:f3:9d:
         8e:1c:85:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org