Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/1/323830343a366665383a3a2f33322d3432203d3e20323730363932.roa
File:                     323830343a366665383a3a2f33322d3432203d3e20323730363932.roa (raw, json)
Hash identifier:          y0jzU+R6pX2Jj45ppkM0SGoA9Tv4F/HydRKGysDiSgc=
Subject key identifier:   73:80:AF:CD:9F:04:01:AF:DD:D8:90:2A:F7:9B:29:E9:E2:82:99:49
Certificate issuer:       /CN=8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1
Certificate serial:       6A8AC907FEC347B888474BCD93480B802C3E3F5D
Authority key identifier: 8A:C8:15:9F:16:1F:4A:BF:A0:3D:76:B8:A0:41:A3:2A:FC:F2:D5:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/1/323830343a366665383a3a2f33322d3432203d3e20323730363932.roa
Signing time:             Fri 17 Nov 2023 18:15:00 +0000
ROA not before:           Fri 17 Nov 2023 18:10:00 +0000
ROA not after:            Fri 15 Nov 2024 18:15:00 +0000
asID:                     270692
IP address blocks:        2804:6fe8::/32 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:8a:c9:07:fe:c3:47:b8:88:47:4b:cd:93:48:0b:80:2c:3e:3f:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1
        Validity
            Not Before: Nov 17 18:10:00 2023 GMT
            Not After : Nov 15 18:15:00 2024 GMT
        Subject: CN=7380AFCD9F0401AFDDD8902AF79B29E9E2829949
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:c5:37:6a:5d:1d:94:f8:ee:34:1e:36:1d:3d:
                    2c:a5:ce:2e:5f:9c:6a:e0:70:dd:37:c8:b8:6a:2d:
                    d0:99:53:67:7c:c1:b3:70:94:18:a5:03:a4:02:47:
                    4b:2c:4b:84:c8:a9:79:94:e6:e4:21:07:48:4b:5b:
                    41:45:f1:96:8a:d9:17:9e:e9:b7:ca:37:ec:af:b8:
                    6f:97:b8:e5:4e:ae:c2:57:7f:0c:d4:b5:fe:3d:57:
                    1b:a3:62:3e:a8:ca:f3:54:43:03:2f:05:87:59:f0:
                    71:0e:a8:ac:ec:81:90:21:7f:41:4b:9e:20:69:08:
                    5c:aa:c7:78:74:2d:db:01:a1:ad:fc:3d:d0:e7:3e:
                    b3:c6:2a:b1:37:2b:16:a3:c8:3d:70:2d:4d:b4:f5:
                    b8:14:18:7b:51:e4:69:23:a1:e1:e8:ee:e3:7f:7d:
                    18:9c:11:67:06:8b:e0:88:ed:b9:17:56:55:93:7c:
                    8e:9e:35:0e:dd:0c:cc:9a:a5:60:ef:eb:87:09:51:
                    06:f0:bf:55:e9:4f:1c:ed:3a:d5:80:9a:33:68:3e:
                    28:68:29:f9:cd:9d:0c:f6:2f:fe:48:dd:a2:aa:98:
                    7c:1a:91:7c:80:87:14:25:a2:ab:46:e5:e4:0e:98:
                    3a:4e:cd:9e:3c:90:03:2e:8a:7a:e1:5c:0b:c6:c9:
                    91:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:80:AF:CD:9F:04:01:AF:DD:D8:90:2A:F7:9B:29:E9:E2:82:99:49
            X509v3 Authority Key Identifier:
                keyid:8A:C8:15:9F:16:1F:4A:BF:A0:3D:76:B8:A0:41:A3:2A:FC:F2:D5:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/1/8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AC8159F161F4ABFA03D76B8A041A32AFCF2D5F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/1/323830343a366665383a3a2f33322d3432203d3e20323730363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:5e:d7:aa:ea:0d:4a:bb:7a:c0:6b:c0:cd:aa:7f:32:96:21:
         c0:4e:db:09:96:f0:e3:52:b8:db:4e:55:a0:5e:cf:84:6d:66:
         60:02:8a:0b:ea:b9:43:5e:53:57:d9:71:e1:c3:bd:c8:ff:90:
         4e:85:9c:6c:76:d7:a4:07:82:78:9f:bb:91:4c:15:f3:c6:4a:
         f1:83:5e:07:92:a9:80:9d:e3:5f:c1:6a:48:3e:3f:71:43:6c:
         1f:9d:0e:f5:27:59:5e:9f:3e:38:fb:85:cf:6b:06:29:cb:5d:
         c2:a6:4d:f9:9b:20:4f:15:db:ad:c6:b7:70:54:4c:38:d2:da:
         59:db:11:50:6a:83:d4:e1:af:b8:24:e0:d0:ee:3a:6d:96:7f:
         ca:fc:88:d6:00:75:d6:03:67:d6:14:0f:e9:4b:39:fa:e6:10:
         25:37:78:de:a7:4b:b4:08:77:76:e4:1d:0a:52:c5:16:65:bc:
         82:d0:4e:82:c3:b7:1f:41:d0:ef:fe:2e:ba:c3:7b:1c:b3:f6:
         e9:cd:6e:84:02:9b:bb:ad:93:77:fb:4a:7c:8d:b6:ba:a7:42:
         73:30:7c:c4:1b:47:2e:cf:a3:6f:a3:4b:db:8d:40:b1:49:3f:
         b7:65:47:7c:af:43:93:1e:19:f9:c6:c7:c9:bc:57:82:d5:c3:
         d4:c6:5e:54
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org