Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa
File:                     323830343a323133633a3a2f33322d3332203d3e20323634353434.roa (raw, json)
Hash identifier:          qxGDIm2mFjD+/MquqDueOLn1SaFOKdi4FbowaYrYJxw=
Subject key identifier:   46:60:80:4F:A4:6E:94:94:FB:FB:08:FF:DC:68:91:CD:39:CB:2E:C8
Certificate issuer:       /CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
Certificate serial:       28EEF91686A1A3F6F62D2FE8F96B74611AF4F830
Authority key identifier: 8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa
Signing time:             Tue 18 Apr 2023 23:42:03 +0000
ROA not before:           Tue 18 Apr 2023 23:37:03 +0000
ROA not after:            Tue 16 Apr 2024 23:42:03 +0000
asID:                     264544
IP address blocks:        2804:213c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:ee:f9:16:86:a1:a3:f6:f6:2d:2f:e8:f9:6b:74:61:1a:f4:f8:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2
        Validity
            Not Before: Apr 18 23:37:03 2023 GMT
            Not After : Apr 16 23:42:03 2024 GMT
        Subject: CN=4660804FA46E9494FBFB08FFDC6891CD39CB2EC8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:de:70:d4:f7:61:ae:01:fc:a9:c4:4c:45:1c:
                    e3:1d:39:38:1f:a6:7a:03:07:2a:e5:10:ec:eb:72:
                    3d:1b:40:86:4a:1f:39:bc:0d:08:aa:cf:c4:14:c8:
                    4a:bb:b4:45:d7:0b:7e:60:a6:48:28:ed:d8:e7:c8:
                    52:23:e2:77:0e:87:b6:63:e4:7f:9b:a6:de:82:fc:
                    3c:9c:cd:f6:8f:ed:23:46:e6:97:8d:a5:da:80:6f:
                    a2:a2:81:fd:21:b9:56:b5:e7:57:0d:78:5d:0e:22:
                    be:ce:6d:01:2b:58:31:9a:39:97:74:fa:6c:7f:f6:
                    ad:78:79:14:ec:3b:c2:30:f3:ad:40:65:66:ac:f1:
                    4c:ee:66:0e:14:31:71:e3:79:1a:3e:fa:70:3a:8e:
                    0b:7d:e4:98:59:34:9f:26:55:98:6b:a0:e8:49:7d:
                    b0:a0:67:11:d2:cb:02:79:9b:69:02:be:4a:47:ef:
                    08:67:a1:62:ea:59:22:19:c9:50:65:02:43:b4:2b:
                    88:25:b7:9f:0c:3e:e6:f1:ad:ea:1d:b8:24:03:db:
                    65:36:d4:2e:89:94:3b:59:35:87:86:81:0f:ed:ad:
                    51:a5:06:0e:42:4f:77:f3:e7:a1:74:e3:0d:3c:34:
                    2e:a9:f3:eb:07:63:a6:32:c1:57:73:89:84:e2:b2:
                    a4:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:60:80:4F:A4:6E:94:94:FB:FB:08:FF:DC:68:91:CD:39:CB:2E:C8
            X509v3 Authority Key Identifier:
                keyid:8F:BA:83:61:34:31:13:7A:FC:0E:EC:6F:AC:92:B6:DD:0A:F7:48:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FBA83613431137AFC0EEC6FAC92B6DD0AF748A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CaqgYLB7Kng23VV1ru9tJUfR77PvvnLMBrC6wXiUzX9b/0/323830343a323133633a3a2f33322d3332203d3e20323634353434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:213c::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:5a:25:5f:23:8e:dd:ac:a1:13:7c:33:32:6e:f8:f3:ac:48:
         ea:d8:b5:d7:a9:54:d5:c9:62:48:91:02:33:91:4f:32:7b:fb:
         1a:b6:34:2a:93:d1:f0:4f:a0:36:5f:a0:36:01:12:98:91:01:
         41:39:7d:8b:44:9f:1f:27:53:d5:fe:14:aa:a3:25:24:7d:fe:
         8f:7a:ce:7d:07:0f:79:26:19:8c:61:2c:93:75:e8:7a:29:30:
         86:28:29:0e:34:ff:dc:25:13:64:6a:fb:3d:93:13:07:81:6d:
         b9:08:9f:dc:25:91:80:85:20:8b:0f:5d:d2:3d:a9:fb:1d:15:
         1c:75:25:8e:61:57:cd:25:77:ea:f5:61:62:38:3c:3a:d6:88:
         4b:9f:ff:0e:88:f1:60:45:8c:8d:46:64:dc:e1:b0:b0:cb:4b:
         8c:9c:4f:01:66:45:76:82:a6:ec:1c:45:00:e4:12:9b:1f:0c:
         ba:22:5b:14:b6:fe:9e:fa:62:d6:89:e5:32:9a:c5:eb:4a:33:
         b6:31:d2:5b:60:08:23:30:e6:0d:e8:f3:8d:4d:7b:a2:0a:9b:
         2b:14:b9:54:0e:c7:8f:e4:5f:8e:ad:cc:86:e8:b0:61:6b:0b:
         48:f1:14:e8:58:7d:8e:a5:9e:c6:37:8b:96:93:2c:63:9c:c4:
         50:b2:1d:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org