Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f33332d3333203d3e20323731313137.roa
File:                     323830343a373638343a383030303a3a2f33332d3333203d3e20323731313137.roa (raw, json)
Hash identifier:          25D0lhVkwtOhARqiDyjJ5bS/Da+2ldvIq6M/4KI33l4=
Subject key identifier:   FE:AE:FF:15:6A:07:08:AD:E8:21:A4:88:63:04:8E:F8:AC:DA:09:6D
Certificate issuer:       /CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
Certificate serial:       39700403C07F9E17E3EC1B4AAD3F48049C904991
Authority key identifier: F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f33332d3333203d3e20323731313137.roa
Signing time:             Mon 21 Aug 2023 22:51:53 +0000
ROA not before:           Mon 21 Aug 2023 22:46:53 +0000
ROA not after:            Mon 19 Aug 2024 22:51:53 +0000
asID:                     271117
IP address blocks:        2804:7684:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:70:04:03:c0:7f:9e:17:e3:ec:1b:4a:ad:3f:48:04:9c:90:49:91
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F258F908E3F269EAFA13925A5B40D5EF0921C9CC
        Validity
            Not Before: Aug 21 22:46:53 2023 GMT
            Not After : Aug 19 22:51:53 2024 GMT
        Subject: CN=FEAEFF156A0708ADE821A48863048EF8ACDA096D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:69:b1:42:41:1b:5b:06:a5:2b:51:0a:f5:8c:
                    af:8d:22:15:ca:ff:08:e3:c6:93:63:5f:2b:6b:3e:
                    4c:6d:ea:57:37:98:73:57:6f:de:81:fd:4d:bc:75:
                    13:e1:ec:17:00:e4:17:32:80:34:9a:10:70:96:d6:
                    68:37:ac:98:b0:f4:ce:be:af:2d:6d:67:08:89:00:
                    22:ff:3b:45:70:79:ad:9a:a9:f3:cf:77:cf:53:26:
                    5d:48:14:fd:64:30:39:7c:93:97:9f:b8:03:d3:72:
                    32:83:6c:d4:b7:bd:be:84:d0:28:27:e9:db:e8:44:
                    39:58:e2:62:6e:82:92:77:c5:4c:71:90:c9:d5:43:
                    f1:bb:03:bf:80:f2:31:35:ac:0c:55:0a:08:a4:71:
                    81:00:07:94:7a:0b:51:69:e2:05:92:b6:a3:01:b6:
                    5e:3a:26:32:97:c5:a1:9f:d6:a0:47:e8:da:81:20:
                    8e:d5:54:cb:b0:d2:74:ee:b9:4b:c1:29:38:c6:55:
                    63:0c:a6:60:c9:d5:ba:59:47:71:f8:c7:4b:e5:b7:
                    59:96:e5:1f:43:f0:f6:9f:33:1c:7f:43:de:90:05:
                    ac:d0:49:3d:37:9b:6a:97:64:06:e3:c6:2d:f1:4e:
                    9b:e7:be:0d:1f:85:ef:86:ff:b8:44:8c:a1:67:8a:
                    1b:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:AE:FF:15:6A:07:08:AD:E8:21:A4:88:63:04:8E:F8:AC:DA:09:6D
            X509v3 Authority Key Identifier:
                keyid:F2:58:F9:08:E3:F2:69:EA:FA:13:92:5A:5B:40:D5:EF:09:21:C9:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F258F908E3F269EAFA13925A5B40D5EF0921C9CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AHfbjT1qfeT8Psh5q2zFh1y3yvFSXQbmZUbbrrZnoZB4/0/323830343a373638343a383030303a3a2f33332d3333203d3e20323731313137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7684:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         68:8c:74:05:f5:f0:fd:28:dc:2f:93:a3:9b:5a:ee:c1:b2:8d:
         ba:ab:b2:48:08:61:cf:e3:49:a3:ae:5a:a4:be:54:49:ce:20:
         e5:09:a3:46:b9:30:c3:6b:a7:ed:4e:b3:7e:30:6e:e0:a6:8a:
         35:2b:52:14:89:dc:dc:25:72:87:62:f1:dd:97:0b:2d:e2:d4:
         27:12:60:bc:70:d7:74:d5:7b:f3:4c:73:30:f2:e8:a8:08:b4:
         af:c9:30:d6:2b:f7:75:af:08:66:fe:32:8a:f2:85:54:ab:43:
         c8:ba:d8:a9:f3:34:8e:83:31:1a:11:14:47:13:a3:a0:62:14:
         f4:f3:19:a5:c7:ac:32:52:3f:6f:9d:63:7f:3a:74:fd:66:7c:
         0c:30:ab:b3:7b:d7:ca:5f:53:ec:ff:82:11:45:40:81:72:0d:
         1e:c8:cb:d3:5d:e5:63:2e:6b:21:26:b9:60:70:eb:62:a2:ee:
         82:7a:dc:d5:b3:34:db:3f:ca:7c:01:07:c2:28:85:14:1c:43:
         b7:c2:4f:f1:9a:fe:90:6c:e8:f1:42:22:86:3a:b7:ec:55:c5:
         17:6b:5c:90:8b:8b:7f:b7:3f:65:6e:ae:e3:ed:d3:82:ad:2b:
         fa:9b:d6:7c:72:bf:68:41:08:46:c9:fe:6f:fe:bd:9f:df:c2:
         7c:8a:10:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org