Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a3a2f33322d3430203d3e20323632373938.roa
File:                     323830343a3234303a3a2f33322d3430203d3e20323632373938.roa (raw, json)
Hash identifier:          bdoDVio3mWjMnV17SNBERkI12K5CtPXz0uEPNxMn5+I=
Subject key identifier:   B2:21:5D:9A:46:4D:8A:66:34:A3:86:EE:C8:F1:09:0E:40:0E:08:46
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       6EDE73FCCFBD1CCFC3AE1582B7CC814A88628044
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a3a2f33322d3430203d3e20323632373938.roa
Signing time:             Wed 17 May 2023 14:10:20 +0000
ROA not before:           Wed 17 May 2023 14:05:20 +0000
ROA not after:            Wed 15 May 2024 14:10:20 +0000
asID:                     262798
IP address blocks:        2804:240::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:de:73:fc:cf:bd:1c:cf:c3:ae:15:82:b7:cc:81:4a:88:62:80:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: May 17 14:05:20 2023 GMT
            Not After : May 15 14:10:20 2024 GMT
        Subject: CN=B2215D9A464D8A6634A386EEC8F1090E400E0846
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:6e:64:2c:6c:b1:50:0d:1d:4d:a4:a6:4e:55:
                    94:15:15:9d:33:2d:8d:d9:f4:a9:3b:84:f8:0f:89:
                    b2:97:1f:5e:8f:3e:31:95:65:83:1b:4c:2c:bc:08:
                    4c:53:53:90:fd:1d:59:58:38:4b:d3:b9:fd:4a:6a:
                    a9:fd:3a:bc:d9:80:d2:37:b2:6d:8c:fa:92:c9:df:
                    7d:3e:37:33:ea:40:c2:93:99:f4:8d:8c:08:53:03:
                    d8:5a:4e:f4:fe:81:83:ae:b5:3b:3f:bb:e4:71:57:
                    a3:a5:61:47:22:68:5f:ae:a6:39:35:71:3a:a8:d0:
                    9b:2c:4b:e0:f7:0e:27:dc:9b:68:0f:2c:9c:c7:74:
                    0f:2b:59:a0:f4:03:03:f4:16:76:dc:e8:d4:0e:4a:
                    f7:25:58:c9:6f:63:92:39:ac:10:a2:91:fa:8d:bf:
                    89:c2:40:bc:9b:81:e0:c3:a8:9d:b7:29:44:4d:9a:
                    c0:51:18:10:12:3a:d7:be:cb:5d:d5:c0:28:d7:bb:
                    9b:0e:75:dc:dc:f6:78:2d:5c:5b:16:bf:54:6a:4f:
                    f2:1d:2f:27:5a:0a:33:44:8a:69:4d:58:fa:e7:3f:
                    2c:83:c2:a0:2b:92:4d:d7:90:12:27:75:03:6f:50:
                    18:12:ca:c7:00:cb:8e:a9:c5:9e:34:9d:f4:96:fc:
                    21:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:21:5D:9A:46:4D:8A:66:34:A3:86:EE:C8:F1:09:0E:40:0E:08:46
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a3a2f33322d3430203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240::/32

    Signature Algorithm: sha256WithRSAEncryption
         7b:80:3c:4f:9c:6b:e9:b9:b7:b1:57:0a:98:b0:75:4b:28:20:
         dd:1d:53:1e:49:a7:db:d1:6b:e9:b1:00:e0:26:70:ac:e0:84:
         a9:ff:d6:fa:7c:d0:13:47:54:de:a9:24:8e:12:b9:70:cc:f0:
         49:dc:b7:ce:f1:b0:5c:3b:21:4e:1c:4c:c5:c4:d1:44:10:c7:
         4e:d7:a8:ab:aa:5f:20:ce:44:a5:19:dc:7d:65:7a:84:e6:d0:
         db:f2:09:98:dd:a3:63:78:8e:25:70:b4:34:71:3c:53:75:ad:
         90:b6:1c:52:ab:63:79:a7:da:cd:fe:46:37:61:c3:f5:77:9e:
         31:f6:b5:82:ab:aa:6e:7a:e2:c9:67:34:51:56:04:b8:c4:7c:
         91:93:66:a6:7b:f4:2e:e5:8a:fb:fd:59:84:f7:36:12:ef:15:
         82:14:85:9b:e1:cd:9e:29:ae:8b:98:1e:f8:24:f2:1f:65:ea:
         d1:79:28:dc:a3:02:80:f4:bb:90:ca:b3:39:db:a7:64:64:68:
         a2:7b:b7:03:66:fe:18:1b:e1:65:c3:3b:2f:73:f8:da:fd:9d:
         a6:de:89:1b:43:75:0d:77:45:d9:a1:da:0d:cc:f9:03:2a:73:
         7b:c4:3d:91:3b:03:42:41:9b:50:2b:9c:f4:b7:c2:31:3f:5f:
         ee:5f:55:05
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org