Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/0/323830343a363763343a3a2f33322d313238203d3e20323639363439.roa
File:                     323830343a363763343a3a2f33322d313238203d3e20323639363439.roa (raw, json)
Hash identifier:          OOnz4DKQ91dOqiURFMwYb4XmvvmOm4QkkJ4hKI3k4gM=
Subject key identifier:   28:1D:DA:00:A4:01:24:6F:16:3B:7C:CB:83:6D:29:71:45:82:FC:99
Certificate issuer:       /CN=8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072
Certificate serial:       5D97CCD30BA980E18835C46E2719E518FDEEE00C
Authority key identifier: 8D:86:DE:FA:AD:82:E3:F5:FE:08:D6:8C:CC:6E:A2:0E:CF:88:40:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/0/323830343a363763343a3a2f33322d313238203d3e20323639363439.roa
Signing time:             Fri 03 Nov 2023 01:03:31 +0000
ROA not before:           Fri 03 Nov 2023 00:58:31 +0000
ROA not after:            Fri 01 Nov 2024 01:03:31 +0000
asID:                     269649
IP address blocks:        2804:67c4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:97:cc:d3:0b:a9:80:e1:88:35:c4:6e:27:19:e5:18:fd:ee:e0:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072
        Validity
            Not Before: Nov  3 00:58:31 2023 GMT
            Not After : Nov  1 01:03:31 2024 GMT
        Subject: CN=281DDA00A401246F163B7CCB836D29714582FC99
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:9b:80:1f:58:39:79:1b:64:dc:91:ab:10:74:
                    bb:f1:c5:7f:23:f5:22:37:e0:67:61:cc:36:a7:79:
                    47:34:3d:d0:c1:2a:28:ea:c0:57:33:37:d2:4e:c1:
                    c3:64:67:26:f5:14:5e:7a:97:9c:b3:91:23:a6:eb:
                    4d:01:7e:ac:b9:d3:e6:80:53:9e:be:76:00:14:49:
                    ab:06:b0:70:09:79:66:82:e3:dc:1e:d7:99:df:5a:
                    60:dc:20:74:29:94:5b:c7:1e:02:73:95:b2:99:aa:
                    88:5c:33:a5:7d:c8:09:79:bd:c4:08:ec:7c:83:cc:
                    b8:f0:8b:5e:99:32:65:de:fd:a9:20:61:1b:71:dc:
                    36:38:16:be:70:ff:64:75:13:90:34:f4:ab:03:e0:
                    73:2f:81:8d:10:e5:c1:7f:83:23:a6:14:57:1d:4d:
                    9f:eb:a4:51:17:dd:37:ae:94:ca:c6:0d:56:17:99:
                    d3:a8:87:43:b4:c5:f5:59:bb:ca:de:49:56:88:53:
                    02:85:f7:96:e9:82:c5:46:4f:9e:98:ae:63:19:09:
                    3e:3b:53:6c:95:91:fc:92:93:9d:6e:44:e0:cb:aa:
                    9d:b2:f2:dc:74:91:b6:12:ed:1a:5f:93:40:c6:74:
                    30:bf:4a:88:21:73:af:0e:ce:e2:eb:9b:94:0f:a7:
                    b4:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                28:1D:DA:00:A4:01:24:6F:16:3B:7C:CB:83:6D:29:71:45:82:FC:99
            X509v3 Authority Key Identifier:
                keyid:8D:86:DE:FA:AD:82:E3:F5:FE:08:D6:8C:CC:6E:A2:0E:CF:88:40:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/0/8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D86DEFAAD82E3F5FE08D68CCC6EA20ECF884072.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EBpeZLqvUdZ8WUcQMzRiyAtCv4SZKPL5VtVTLvZFiCcN/0/323830343a363763343a3a2f33322d313238203d3e20323639363439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:e6:5d:79:68:fb:aa:07:34:53:3d:d1:38:af:cc:25:fc:5e:
         4c:a6:1d:81:11:4b:69:5d:d9:3e:e9:8e:e4:ba:60:24:41:51:
         6d:79:ed:53:f9:93:a5:2c:7e:b0:a4:b0:2e:94:e3:fe:50:5d:
         2f:b5:4c:97:e2:1b:09:ee:07:da:83:85:d3:7e:0d:30:ea:9b:
         af:12:51:90:db:0b:fd:bb:d8:d9:b1:7b:8a:f0:3e:cf:f5:16:
         9f:45:73:44:47:d6:e0:ed:24:a6:17:68:3a:f4:dc:de:b5:cc:
         42:18:ce:00:4e:3a:3d:1e:f9:1f:af:5d:23:31:8b:9f:ff:a9:
         1d:29:81:41:23:5e:47:8a:88:8f:6b:53:2f:b3:9c:9c:54:53:
         60:6c:82:5b:2f:86:5c:f5:bd:80:07:c7:98:7e:e7:c1:15:56:
         fc:b8:66:d6:74:5b:7c:80:e4:c2:68:3b:5c:81:1a:28:26:14:
         e8:90:bf:49:cb:a3:2a:b2:46:01:95:8c:e3:81:e5:e2:55:97:
         3e:e0:7e:d9:32:c6:54:09:d1:fb:ce:0c:11:6c:79:74:ca:8b:
         9c:17:64:f2:f3:31:e1:1d:ad:34:6b:77:22:1f:50:1d:ad:e5:
         7d:b2:67:9e:7d:4f:ee:07:db:b0:4b:96:39:48:57:b6:d8:94:
         7c:54:62:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:44 2024 by rpki-client on console-ams.rpki-client.org