Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/323830343a3532303a3a2f33322d3332203d3e20323632343936.roa
File:                     323830343a3532303a3a2f33322d3332203d3e20323632343936.roa (raw, json)
Hash identifier:          vzRD3AVEna0QrjIdgBy+zqtaAjSVVkr5ydJXrZqn7v8=
Subject key identifier:   50:F6:53:B4:56:1F:1F:E1:15:8D:CD:CD:B6:70:C8:91:3D:BA:67:0D
Certificate issuer:       /CN=8F4A398C9662CBF5257471CEB03BBF2C61BC55E0
Certificate serial:       0B348E9DD797547F4E1A2E931AB3D65A362BBC75
Authority key identifier: 8F:4A:39:8C:96:62:CB:F5:25:74:71:CE:B0:3B:BF:2C:61:BC:55:E0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/323830343a3532303a3a2f33322d3332203d3e20323632343936.roa
Signing time:             Mon 26 Feb 2024 13:30:44 +0000
ROA not before:           Mon 26 Feb 2024 13:25:44 +0000
ROA not after:            Mon 24 Feb 2025 13:30:44 +0000
asID:                     262496
IP address blocks:        2804:520::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:34:8e:9d:d7:97:54:7f:4e:1a:2e:93:1a:b3:d6:5a:36:2b:bc:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F4A398C9662CBF5257471CEB03BBF2C61BC55E0
        Validity
            Not Before: Feb 26 13:25:44 2024 GMT
            Not After : Feb 24 13:30:44 2025 GMT
        Subject: CN=50F653B4561F1FE1158DCDCDB670C8913DBA670D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:b1:40:38:1e:d9:d7:ad:6d:f6:15:dd:0d:91:
                    02:5c:5e:20:67:d6:26:b9:ee:18:0c:a6:f0:9a:46:
                    4c:91:73:8b:79:4c:ea:ba:dd:7e:f0:74:4d:a4:da:
                    1d:ec:53:55:a6:b8:46:cb:3c:35:53:f0:bb:2b:67:
                    96:bc:ef:45:00:e8:e0:dd:d1:8d:92:52:a5:ba:70:
                    25:4c:7f:1f:4b:78:4c:09:73:7b:6b:68:65:07:c5:
                    89:46:8b:d2:0d:ed:9e:e2:de:75:2f:a8:5f:14:12:
                    5c:4a:e2:55:eb:8b:fc:d9:8f:13:b8:24:96:32:3e:
                    11:b1:29:cd:70:5e:3c:68:2c:9f:cd:13:64:89:77:
                    70:65:f6:49:dd:79:5f:64:81:89:a5:af:03:b1:03:
                    ce:6c:a2:a0:7c:06:9b:f2:ce:25:61:6c:9e:73:90:
                    df:e7:64:45:84:94:13:07:39:c4:bc:50:0d:79:52:
                    a6:46:14:4b:81:2a:7c:94:e9:f3:dc:f8:d4:36:fe:
                    7f:be:7e:05:5f:cc:4a:fb:fe:b0:48:91:ea:ec:58:
                    a5:53:05:df:71:ec:2a:40:1f:87:f3:bb:fd:8c:f0:
                    a2:a5:3c:d9:00:30:ac:52:cf:e6:e1:e9:80:d0:88:
                    8a:24:90:7c:55:20:b2:08:bc:cc:a4:ff:16:3b:dc:
                    7d:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:F6:53:B4:56:1F:1F:E1:15:8D:CD:CD:B6:70:C8:91:3D:BA:67:0D
            X509v3 Authority Key Identifier:
                keyid:8F:4A:39:8C:96:62:CB:F5:25:74:71:CE:B0:3B:BF:2C:61:BC:55:E0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F4A398C9662CBF5257471CEB03BBF2C61BC55E0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A5bvp7mVkp4pamoJ8dgNfBXoMTDkaALb69TKzqJYD3Y8/0/323830343a3532303a3a2f33322d3332203d3e20323632343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:520::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:5b:78:6a:7a:9c:8e:15:e9:1d:81:9b:61:2e:b1:0d:3e:5c:
         ae:34:e7:9c:cf:f7:9e:2c:ec:d7:63:b1:fa:1b:5f:30:88:50:
         49:ba:66:e2:f1:e5:4d:e4:89:db:d7:86:86:25:ca:95:33:cb:
         e2:ef:fc:8e:f7:be:44:7d:94:cd:86:8c:13:54:09:62:89:71:
         d2:66:67:78:19:dd:04:7d:e4:a6:dd:74:db:10:9d:2b:dc:d8:
         6d:17:e8:e4:f8:06:66:de:be:28:e5:d5:cb:1d:76:ba:98:f6:
         45:81:df:ab:f7:ab:00:61:88:40:91:27:a2:5c:7f:68:4e:b5:
         48:bd:18:ab:22:95:35:68:38:16:ef:97:d1:03:b9:e7:dc:7e:
         57:50:e6:ab:e3:96:ce:5d:28:d0:c3:d5:7b:80:d5:95:ac:d6:
         af:3d:c8:2a:89:51:7e:a0:44:82:27:2e:3e:d8:20:81:4b:57:
         c8:5f:d6:e3:08:ce:b4:df:ff:fb:e7:e7:62:f2:38:30:8f:66:
         b0:4b:0c:96:53:95:22:dc:91:c7:be:47:c6:fc:fb:cc:62:b5:
         a6:69:5a:20:51:2c:ef:04:da:88:9f:6b:28:82:40:d3:43:b6:
         a4:4c:ad:19:29:3f:6d:85:ca:ca:ce:f1:a3:b8:33:83:74:11:
         5f:dc:0d:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org