Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/323830343a333561383a3a2f33322d3334203d3e20323636323939.roa
File:                     323830343a333561383a3a2f33322d3334203d3e20323636323939.roa (raw, json)
Hash identifier:          TDrRtsrK6IT38/qKOidBh72oJtyObtxpo2unuMBlFLU=
Subject key identifier:   F7:24:49:E3:F3:48:D2:11:21:9C:0D:CA:E1:E9:F7:84:30:53:F4:E4
Certificate issuer:       /CN=8FCB2AC563D94B1155742D01E76CE7D839E49E25
Certificate serial:       57204EEA85725E64F8D0F7AC091D6EFA1471D66E
Authority key identifier: 8F:CB:2A:C5:63:D9:4B:11:55:74:2D:01:E7:6C:E7:D8:39:E4:9E:25
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FCB2AC563D94B1155742D01E76CE7D839E49E25.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/323830343a333561383a3a2f33322d3334203d3e20323636323939.roa
Signing time:             Tue 13 Sep 2022 19:04:45 +0000
ROA not before:           Tue 13 Sep 2022 18:59:45 +0000
ROA not after:            Tue 12 Sep 2023 19:04:45 +0000
asID:                     266299
IP address blocks:        2804:35a8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:20:4e:ea:85:72:5e:64:f8:d0:f7:ac:09:1d:6e:fa:14:71:d6:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FCB2AC563D94B1155742D01E76CE7D839E49E25
        Validity
            Not Before: Sep 13 18:59:45 2022 GMT
            Not After : Sep 12 19:04:45 2023 GMT
        Subject: CN=F72449E3F348D211219C0DCAE1E9F7843053F4E4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:e2:53:87:66:38:30:d3:2e:c3:ac:ef:db:ff:
                    a7:da:45:7d:16:77:53:1c:c5:6b:b8:73:36:f5:c1:
                    15:65:67:2e:8f:e5:02:52:00:5c:5a:97:ed:dd:09:
                    fb:9b:bb:e4:91:36:32:7a:0e:32:b4:6a:fe:5d:0d:
                    06:73:29:f0:16:dd:c4:73:95:af:78:83:59:a9:74:
                    55:87:02:1b:88:0d:7f:e2:57:6d:50:47:d1:32:b3:
                    83:fc:c8:7b:cd:c7:49:2c:48:5e:7d:eb:70:bf:d2:
                    ba:ee:b2:a0:d2:f6:33:1c:ae:a5:cb:87:4b:39:45:
                    64:fd:55:c9:53:10:28:23:81:17:1d:db:2d:07:51:
                    0a:9b:d0:a1:c7:6f:31:4a:ff:63:bb:ae:8f:65:9f:
                    12:24:ba:88:10:53:98:9e:84:fb:54:e8:3c:7e:06:
                    8e:1c:04:4e:15:73:4b:b2:ba:e9:40:0f:06:48:ba:
                    f9:f2:74:9a:da:f5:c8:4e:60:63:f9:03:1f:7a:01:
                    66:9a:d0:e7:02:c8:9d:82:9e:94:da:d9:b5:cd:d3:
                    b0:0d:46:ff:2d:54:54:d1:28:e8:93:bc:23:f6:06:
                    33:9d:c5:8f:ab:5f:6c:98:b0:81:66:a3:bf:e4:d0:
                    11:3c:d5:ea:06:ac:e1:25:49:bf:c8:b2:58:cd:5a:
                    87:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:24:49:E3:F3:48:D2:11:21:9C:0D:CA:E1:E9:F7:84:30:53:F4:E4
            X509v3 Authority Key Identifier:
                keyid:8F:CB:2A:C5:63:D9:4B:11:55:74:2D:01:E7:6C:E7:D8:39:E4:9E:25

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/8FCB2AC563D94B1155742D01E76CE7D839E49E25.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FCB2AC563D94B1155742D01E76CE7D839E49E25.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ECmjB8QyVTfQd9BXBSwnMkrXhr4PuyDndXJhypvLoKiM/0/323830343a333561383a3a2f33322d3334203d3e20323636323939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:35a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         c7:34:c5:fc:92:ec:11:29:51:38:7c:42:a6:c9:37:fc:5d:5d:
         36:5d:30:12:10:1c:26:7c:49:d4:50:0b:c8:a8:2b:4f:f3:ab:
         a5:41:ed:5d:7f:d7:97:a8:73:cc:08:9a:98:9d:7d:32:d4:0d:
         5f:2e:4b:09:02:28:52:02:63:7c:b6:b7:34:c6:f1:07:a0:69:
         42:ad:53:54:65:fb:c7:e6:58:d1:1a:e9:a1:15:d5:d8:df:4b:
         96:88:4f:da:83:06:a3:8b:8e:f0:d2:cf:a7:71:e6:38:72:59:
         83:e4:00:05:0d:c7:35:d4:8e:d4:51:a7:bd:8e:3f:e1:0c:df:
         c6:b1:ed:27:f8:a9:eb:b3:41:d0:fa:83:cf:a7:18:55:e8:3b:
         0e:69:c7:90:2a:64:6b:50:d3:ba:41:6e:a1:0d:9e:58:a9:9d:
         35:70:60:84:3b:9b:39:e4:93:ca:9f:b3:93:b5:c7:2c:29:ee:
         2e:6c:09:c5:8c:bb:09:82:6f:67:a3:73:cc:d1:cb:36:07:d6:
         20:ae:b5:cb:a5:d3:b9:06:3e:d6:83:99:4c:be:15:9f:ef:1f:
         97:80:0e:f9:97:2b:e0:8b:ea:a9:65:11:ef:b9:8e:e9:13:8d:
         fa:69:3f:bc:11:dd:7b:d7:03:76:71:91:e9:4d:d8:0e:54:bf:
         f9:9f:09:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org