Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a3a2f33322d3431203d3e20323635333030.roa
File:                     323830343a326462633a3a2f33322d3431203d3e20323635333030.roa (raw, json)
Hash identifier:          VTPQr46xa2lllUt0zbZ6F8ilt7YfiJWib7+M5jXKQ/Y=
Subject key identifier:   08:17:32:BA:B0:6A:A8:6B:18:DC:B6:41:64:A2:FB:83:E8:6A:D7:16
Certificate issuer:       /CN=8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372
Certificate serial:       27A07A0EB8794988E272919F6B454ECC054BB33D
Authority key identifier: 8B:5A:0B:B8:12:E6:DF:7D:ED:B8:59:93:29:C2:B1:4B:B7:C0:03:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a3a2f33322d3431203d3e20323635333030.roa
Signing time:             Mon 24 Jul 2023 22:00:38 +0000
ROA not before:           Mon 24 Jul 2023 21:55:38 +0000
ROA not after:            Mon 22 Jul 2024 22:00:38 +0000
asID:                     265300
IP address blocks:        2804:2dbc::/32 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:a0:7a:0e:b8:79:49:88:e2:72:91:9f:6b:45:4e:cc:05:4b:b3:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372
        Validity
            Not Before: Jul 24 21:55:38 2023 GMT
            Not After : Jul 22 22:00:38 2024 GMT
        Subject: CN=081732BAB06AA86B18DCB64164A2FB83E86AD716
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:3d:64:2f:d3:00:50:2b:75:e1:5f:8a:d9:52:
                    fd:92:45:6c:95:5e:bb:19:94:9f:b1:88:3c:c1:df:
                    bf:2d:27:6c:a6:40:29:97:42:b1:bf:f5:fa:64:84:
                    39:0d:14:6f:f6:1c:84:d1:6a:36:26:e0:a5:ce:a7:
                    59:c8:d0:77:48:80:31:88:52:5f:51:0a:e8:f2:c5:
                    8c:35:d2:10:92:ef:95:fd:08:fa:08:27:1d:64:90:
                    59:f9:b7:41:f3:12:8f:e7:7e:ad:fa:b1:33:c6:b3:
                    4e:a2:1e:eb:35:b7:e3:c7:25:be:f3:89:20:2f:32:
                    9c:0e:26:fa:6f:2a:4e:c1:55:23:27:fc:f4:1e:ce:
                    11:ab:33:42:4d:ab:eb:f5:96:25:7f:3b:c4:30:27:
                    ef:47:5b:2f:55:a6:d2:9f:38:0c:8a:fa:36:d3:f7:
                    13:66:67:0f:2a:d0:1e:75:e7:0f:e8:97:ee:f5:ee:
                    cd:a4:d3:b6:54:05:89:2f:b2:ac:03:14:09:1a:5c:
                    58:87:26:cc:07:b5:d5:60:27:d4:9d:bd:d1:eb:95:
                    c2:48:23:ac:3a:b0:5c:10:c9:90:38:4a:f1:ee:b0:
                    31:f2:18:58:b3:48:90:05:a7:73:2a:c4:1f:22:3b:
                    bc:bb:53:7b:9a:f6:4a:2d:a4:89:64:a1:c8:96:a7:
                    c2:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:17:32:BA:B0:6A:A8:6B:18:DC:B6:41:64:A2:FB:83:E8:6A:D7:16
            X509v3 Authority Key Identifier:
                keyid:8B:5A:0B:B8:12:E6:DF:7D:ED:B8:59:93:29:C2:B1:4B:B7:C0:03:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8B5A0BB812E6DF7DEDB8599329C2B14BB7C00372.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C7d4bFfKuVzU8dxoCSqvsD3UBWkVaDwuurLqHfZWEDoc/1/323830343a326462633a3a2f33322d3431203d3e20323635333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2dbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:63:0f:cd:45:d5:fe:23:0b:ed:01:90:5a:88:71:e4:c8:6d:
         a1:83:7d:82:d7:10:4e:00:0e:52:0a:13:8c:28:ac:2d:6c:f5:
         02:b3:7f:a2:ad:39:f3:eb:9b:f3:fa:e2:41:65:19:15:29:91:
         b0:03:42:dc:a8:67:89:30:70:b3:82:20:2d:57:09:ac:ef:87:
         a9:2d:92:a8:d2:b1:96:19:a0:91:ca:ce:b5:8f:ca:29:3b:1d:
         53:21:c6:82:04:b0:28:77:d7:0e:be:b5:e1:43:00:83:af:0d:
         a1:de:88:c6:16:16:26:33:ca:e9:b6:f6:4b:cd:79:a2:71:ac:
         83:92:15:78:c1:48:a6:71:2c:36:c3:ea:c0:8e:0c:f7:da:8c:
         04:1b:4e:a3:89:f0:87:b5:5b:94:22:25:28:5e:e8:0d:d2:ba:
         31:70:4f:34:08:e4:5e:88:6a:84:b0:f4:42:95:79:ca:19:ca:
         2b:6e:d3:80:60:0b:d9:e8:96:cb:a0:54:ae:53:dd:b3:a3:d2:
         c1:4a:cb:e6:67:8d:b8:37:b3:c8:79:0d:ad:ca:6a:a9:4e:52:
         c9:6a:9e:8e:23:0c:2a:eb:e4:48:14:78:f2:67:53:0f:09:74:
         d0:f7:05:a9:5a:be:c2:38:fc:31:7d:b4:34:42:f1:02:7a:13:
         2d:3a:d3:d4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org