Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a3a2f33362d3336203d3e20323632373938.roa
File:                     323830343a3234303a3a2f33362d3336203d3e20323632373938.roa (raw, json)
Hash identifier:          VXRTmcGGVNoBhhHycJp09tp2MhGVZJvNN5fXTc6UXwg=
Subject key identifier:   0F:54:CF:30:72:A6:0B:FD:3A:12:10:EC:64:EE:73:14:3C:87:7E:F1
Certificate issuer:       /CN=8BE12B31F7A73C05B53BE208097D713296FAC527
Certificate serial:       28A4E411BE17F1CDF03DB5F8A3552C4BC6588F8C
Authority key identifier: 8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a3a2f33362d3336203d3e20323632373938.roa
Signing time:             Tue 16 May 2023 12:26:38 +0000
ROA not before:           Tue 16 May 2023 12:21:38 +0000
ROA not after:            Tue 14 May 2024 12:26:38 +0000
asID:                     262798
IP address blocks:        2804:240::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:a4:e4:11:be:17:f1:cd:f0:3d:b5:f8:a3:55:2c:4b:c6:58:8f:8c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BE12B31F7A73C05B53BE208097D713296FAC527
        Validity
            Not Before: May 16 12:21:38 2023 GMT
            Not After : May 14 12:26:38 2024 GMT
        Subject: CN=0F54CF3072A60BFD3A1210EC64EE73143C877EF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:80:2b:d4:b9:a3:cf:3a:f1:bc:30:0c:8f:af:
                    92:5a:eb:9a:16:56:76:f3:4e:81:25:5a:96:f3:73:
                    75:19:a2:71:91:84:40:6e:40:7c:04:6b:b7:f6:3c:
                    c0:20:b7:54:88:8b:d8:27:69:eb:c4:5e:d6:9b:47:
                    ac:8e:9f:d8:fb:5c:69:bf:9e:f5:b3:11:27:be:44:
                    fe:a4:69:b7:9c:72:d8:48:38:5d:df:ad:1e:3a:26:
                    3d:31:a1:f0:8a:41:44:2c:d0:58:33:78:7d:8d:ec:
                    71:5c:db:92:45:9a:16:00:16:0f:8c:81:d9:31:0e:
                    31:47:84:ee:d8:79:79:66:38:48:b7:ed:1d:fb:6a:
                    70:7c:ee:81:70:c8:f1:69:26:65:2c:e5:cd:ae:eb:
                    d3:8b:5f:b9:37:26:e4:f5:a1:ec:4d:ec:09:e6:50:
                    97:af:45:6e:af:05:36:d8:36:96:e6:4e:64:96:02:
                    4c:51:cd:be:8d:9f:c9:c4:88:fd:b5:28:48:02:ea:
                    3d:41:6e:21:c6:5c:18:5e:0e:40:14:cc:f5:c3:32:
                    dd:c4:d7:2c:1e:94:51:fb:aa:00:ea:b9:d7:f4:0a:
                    0b:3d:41:e7:73:d4:b9:08:ca:ff:53:b0:c0:9c:da:
                    ca:d6:ed:c4:01:d7:71:7e:52:7c:7e:0c:ca:82:63:
                    47:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:54:CF:30:72:A6:0B:FD:3A:12:10:EC:64:EE:73:14:3C:87:7E:F1
            X509v3 Authority Key Identifier:
                keyid:8B:E1:2B:31:F7:A7:3C:05:B5:3B:E2:08:09:7D:71:32:96:FA:C5:27

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/8BE12B31F7A73C05B53BE208097D713296FAC527.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8BE12B31F7A73C05B53BE208097D713296FAC527.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9RETsumitTzJnTFwcMDvBaGMYtbL4T2HXT2gjmmWeo8m/0/323830343a3234303a3a2f33362d3336203d3e20323632373938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:240::/36

    Signature Algorithm: sha256WithRSAEncryption
         85:4c:85:2f:c6:4b:64:fc:a6:91:c7:59:12:3b:9d:55:05:cd:
         25:00:38:27:d0:52:ca:ff:09:78:81:b6:b7:cf:25:15:62:d3:
         75:90:80:84:fe:d8:25:3e:a7:4e:57:89:26:45:7c:b6:5f:89:
         ce:07:16:ad:5a:a3:dd:eb:ab:c3:64:89:d4:5b:03:e2:75:42:
         9d:e9:ea:07:fe:09:86:15:1c:7e:3a:3b:b7:9a:bb:78:0b:db:
         3b:36:f6:8b:a6:82:10:e4:af:6a:8d:b9:9c:de:2a:30:b8:11:
         02:71:0a:b3:0b:6d:89:26:88:49:2b:49:cd:89:74:5d:e0:5f:
         41:1c:37:26:20:a6:2d:39:27:a4:95:7a:6b:83:69:54:18:1c:
         2b:65:62:33:fd:84:c2:eb:92:11:aa:7d:2e:17:39:b9:d2:d3:
         0e:2e:be:66:fe:89:62:03:3e:aa:ce:c0:d4:ec:4b:92:28:40:
         6d:80:a9:c1:34:fb:b4:1d:ea:c1:cd:ec:11:88:18:b5:33:b7:
         c9:f6:f6:c7:31:f8:fe:31:88:cc:74:05:ea:9f:5f:99:73:19:
         8a:b6:97:af:8e:00:0e:91:d3:51:91:03:00:8e:c3:36:53:f8:
         d3:78:0c:7c:76:78:be:ea:a6:72:3d:87:64:58:a7:a1:78:e4:
         b0:55:f4:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org