Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/323830343a323063343a3a2f33322d3438203d3e20323634353133.roa
File:                     323830343a323063343a3a2f33322d3438203d3e20323634353133.roa (raw, json)
Hash identifier:          jzjVbKFgjcU7tybiFNviFqlt8D0JBHVv9RZ84hlQZ/I=
Subject key identifier:   EA:2D:B2:5F:F0:67:1B:57:E6:8A:98:4B:18:3E:DC:51:49:34:8C:FD
Certificate issuer:       /CN=A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51
Certificate serial:       6FBF8C875C78ECB46F9BCA8EEA7D0EB516D43AB6
Authority key identifier: A8:D8:1D:D1:C8:C0:92:5B:5E:7A:42:70:09:F2:D1:D5:3C:41:EC:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/323830343a323063343a3a2f33322d3438203d3e20323634353133.roa
Signing time:             Fri 16 Feb 2024 20:48:12 +0000
ROA not before:           Fri 16 Feb 2024 20:43:12 +0000
ROA not after:            Fri 14 Feb 2025 20:48:12 +0000
asID:                     264513
IP address blocks:        2804:20c4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:bf:8c:87:5c:78:ec:b4:6f:9b:ca:8e:ea:7d:0e:b5:16:d4:3a:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51
        Validity
            Not Before: Feb 16 20:43:12 2024 GMT
            Not After : Feb 14 20:48:12 2025 GMT
        Subject: CN=EA2DB25FF0671B57E68A984B183EDC5149348CFD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:8a:df:ff:e7:6f:d9:ee:15:23:c2:18:a6:c7:
                    5e:8b:e7:60:f5:ec:ef:2e:66:26:9f:7b:a1:ab:b9:
                    c3:80:eb:a8:f1:a7:5c:e6:bf:0c:7e:97:f6:c8:72:
                    5f:6f:66:c8:41:e5:20:b6:dd:f3:35:fc:25:ad:df:
                    ff:cc:f0:95:88:0f:98:fd:0c:28:10:82:c6:a7:0a:
                    a5:b5:68:85:c7:b0:86:ee:4e:68:2b:50:8d:46:db:
                    8f:92:f8:e7:8e:e8:63:74:8a:84:ba:bf:00:6b:23:
                    9f:b8:d6:ef:51:87:51:47:64:3b:15:c6:6d:0b:bf:
                    44:5d:e5:7b:60:69:0f:f6:92:20:91:e0:7f:b5:38:
                    30:27:90:b0:51:0b:13:a6:d8:ec:bd:a4:34:5b:4d:
                    07:60:6d:7f:77:52:d2:ee:25:6d:d2:ff:18:66:8e:
                    37:1e:bb:14:39:c1:7b:bc:e4:5c:25:65:22:0b:37:
                    62:df:73:52:55:4f:44:c2:73:fd:86:44:27:54:12:
                    58:67:60:ab:68:b6:81:c8:dc:d4:09:b9:9a:c5:9f:
                    3a:c2:13:30:61:20:bd:7f:0c:2b:68:20:8a:cf:b0:
                    53:42:1d:ab:82:da:bc:50:95:d4:64:2a:14:c8:ba:
                    7d:13:73:70:c4:86:14:f3:95:f2:4b:58:73:31:11:
                    47:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2D:B2:5F:F0:67:1B:57:E6:8A:98:4B:18:3E:DC:51:49:34:8C:FD
            X509v3 Authority Key Identifier:
                keyid:A8:D8:1D:D1:C8:C0:92:5B:5E:7A:42:70:09:F2:D1:D5:3C:41:EC:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8D81DD1C8C0925B5E7A427009F2D1D53C41EC51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C9xXLnJYNVjKSLFmkKdkAXWUZuwdS33UhKs7Ar9Ei9tE/0/323830343a323063343a3a2f33322d3438203d3e20323634353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ac:6c:3c:3c:2d:60:1a:19:09:25:01:81:8b:40:98:2a:40:da:
         bd:3b:b1:7c:bd:78:45:c4:c7:47:b6:95:d1:30:b6:d5:8f:37:
         23:01:b4:05:ff:dd:09:51:ee:10:1a:fa:88:04:71:28:70:5e:
         4b:77:d1:d2:45:d2:39:be:a1:53:63:29:f1:ea:ce:12:7c:8b:
         a8:87:26:3b:3b:8d:64:8b:d0:68:f9:38:0d:aa:4f:76:76:f1:
         fb:9e:d7:fd:31:21:2b:8c:aa:9a:fe:18:d7:b7:e1:dc:2a:55:
         81:99:39:ad:c3:54:40:5d:78:1a:86:3b:d2:81:4c:3d:cb:b4:
         88:3f:de:1f:6c:c1:c2:3d:9d:ab:d7:c2:75:40:9d:4e:30:f0:
         a0:83:86:15:0d:ea:ae:ec:42:78:e1:d8:80:90:19:e8:ca:2e:
         8b:f0:64:1c:6e:5e:cb:6d:ea:ad:ed:54:6d:dd:f8:8a:27:0c:
         17:4c:7c:8e:7b:9a:ad:72:23:37:18:28:5f:af:95:8c:6b:b0:
         c7:8d:18:04:68:f1:26:9b:c8:47:0e:d2:29:75:1d:23:9d:43:
         a5:e6:82:96:cc:7d:88:43:ac:c0:dd:96:e8:81:2b:b5:99:7b:
         d8:08:3c:8a:55:85:97:5c:01:3a:18:b0:b4:0d:f3:be:84:e0:
         15:30:b9:68
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org