Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/0/323830343a333635303a3a2f33322d3438203d3e20323636333431.roa
File:                     323830343a333635303a3a2f33322d3438203d3e20323636333431.roa (raw, json)
Hash identifier:          Dkj2Uxs1YT+ttr0RBWJu+r/tveW4oXLQ4u5bxttGZI4=
Subject key identifier:   4C:4E:18:26:E4:05:07:30:87:26:15:95:6C:99:40:AA:58:5E:90:50
Certificate issuer:       /CN=B86264159D6FD0487114AE36C925C9ED5133FF47
Certificate serial:       1E2CDE3C5D026EA382642EED9E0D1A0D1FF28D1E
Authority key identifier: B8:62:64:15:9D:6F:D0:48:71:14:AE:36:C9:25:C9:ED:51:33:FF:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B86264159D6FD0487114AE36C925C9ED5133FF47.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/0/323830343a333635303a3a2f33322d3438203d3e20323636333431.roa
Signing time:             Fri 08 Dec 2023 20:01:21 +0000
ROA not before:           Fri 08 Dec 2023 19:56:21 +0000
ROA not after:            Fri 06 Dec 2024 20:01:21 +0000
asID:                     266341
IP address blocks:        2804:3650::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:2c:de:3c:5d:02:6e:a3:82:64:2e:ed:9e:0d:1a:0d:1f:f2:8d:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B86264159D6FD0487114AE36C925C9ED5133FF47
        Validity
            Not Before: Dec  8 19:56:21 2023 GMT
            Not After : Dec  6 20:01:21 2024 GMT
        Subject: CN=4C4E1826E4050730872615956C9940AA585E9050
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:fb:2c:32:bc:9a:eb:69:67:bb:0e:28:e1:b8:
                    6c:c9:52:de:66:05:1a:5c:92:30:f4:1e:90:8d:85:
                    4f:08:7a:b7:6f:6f:ad:c5:07:13:b5:75:4f:c2:4a:
                    63:00:df:3a:7f:69:61:39:7b:14:29:ae:c0:a7:11:
                    9c:a0:fc:30:a6:d3:19:68:57:0f:01:86:74:46:95:
                    a5:d5:41:f9:87:a1:eb:70:78:3f:a6:42:fb:06:f5:
                    50:bb:df:04:9f:24:80:b3:ed:2f:89:bf:3f:21:f0:
                    fc:4a:b5:ef:4d:5c:82:75:49:7f:f1:ba:75:fc:2f:
                    d2:9e:44:6b:bf:78:d6:e0:a4:dc:9b:7b:98:3a:b3:
                    3d:e0:0a:71:1d:5d:71:b2:5f:da:76:29:ca:a6:f1:
                    b4:db:3d:30:f1:e3:06:71:0e:f6:2b:2d:aa:70:aa:
                    38:3a:75:f3:54:0b:b5:3e:25:4d:02:99:da:e9:9b:
                    f0:57:b9:ee:73:16:b3:a0:dd:cb:79:3a:de:a8:bf:
                    3e:91:8b:df:c6:5e:5c:63:3c:2e:77:73:e9:1d:df:
                    9b:9a:65:9d:f6:14:0d:95:ea:95:5e:ef:85:dc:a1:
                    88:c1:49:a8:ed:8e:1a:87:03:c5:31:18:2a:85:69:
                    5f:12:f8:4b:ce:27:1b:06:0e:e0:1b:aa:fe:7f:c2:
                    e2:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:4E:18:26:E4:05:07:30:87:26:15:95:6C:99:40:AA:58:5E:90:50
            X509v3 Authority Key Identifier:
                keyid:B8:62:64:15:9D:6F:D0:48:71:14:AE:36:C9:25:C9:ED:51:33:FF:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/0/B86264159D6FD0487114AE36C925C9ED5133FF47.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B86264159D6FD0487114AE36C925C9ED5133FF47.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AjCjbJzdxxiT632Ho8g7eVZ3ZxtQRPD4iqfXokqMrooh/0/323830343a333635303a3a2f33322d3438203d3e20323636333431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3650::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:a2:a3:12:64:ae:4a:37:83:96:8e:ec:a8:12:b1:e9:af:03:
         0a:90:6d:40:00:47:d8:92:8f:10:0b:a4:99:1d:c5:b3:41:f7:
         52:c0:73:eb:b3:ce:8f:4c:04:35:ac:be:5c:34:90:af:ef:d2:
         87:fe:3c:fb:5e:30:a5:5f:14:e6:75:f4:6e:6a:7d:44:72:1b:
         5b:74:a0:7a:8b:41:f4:ad:68:27:a8:2f:3c:e9:fd:2f:60:a6:
         d3:d5:05:12:47:e1:2a:16:2e:25:3b:11:44:29:b2:42:d0:8e:
         bb:a7:16:05:11:bf:ee:3a:46:2d:74:4f:ce:36:ca:59:63:21:
         cb:e7:9e:7f:e3:2e:35:7e:b5:e8:36:67:e1:e1:02:75:98:2b:
         74:8e:8e:a5:7e:1a:81:0e:57:51:d9:89:29:b1:30:fb:24:50:
         00:b0:c3:1f:d5:f3:23:02:0c:39:7a:52:08:59:c1:11:b8:a9:
         a6:04:97:e6:c9:9a:49:a8:14:54:09:2a:60:a4:58:f0:27:89:
         21:38:ff:a4:f8:f9:da:cb:b3:63:30:cb:8f:fc:c1:cb:2a:36:
         63:83:d4:7c:01:9c:c2:66:71:f0:c3:a7:9f:e0:a9:f1:41:c0:
         45:85:af:05:95:4d:4b:52:29:88:d5:52:cf:57:f9:03:a5:ef:
         56:42:fa:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org