Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a383030303a3a2f33332d3333203d3e20323637353735.roa
File:                     323830343a343338343a383030303a3a2f33332d3333203d3e20323637353735.roa (raw, json)
Hash identifier:          V6vdov13qxwX+yDsk7APl5kofxBLXjd1ebpnBHLqDsU=
Subject key identifier:   C0:96:D9:BA:97:3D:7F:BC:6C:C6:68:57:73:EF:C8:60:97:37:E5:59
Certificate issuer:       /CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Certificate serial:       58BC23A9CEE385C94D2A12829F5EC9462415ADDF
Authority key identifier: 8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a383030303a3a2f33332d3333203d3e20323637353735.roa
Signing time:             Thu 11 Jan 2024 18:03:44 +0000
ROA not before:           Thu 11 Jan 2024 17:58:44 +0000
ROA not after:            Thu 09 Jan 2025 18:03:44 +0000
asID:                     267575
IP address blocks:        2804:4384:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:bc:23:a9:ce:e3:85:c9:4d:2a:12:82:9f:5e:c9:46:24:15:ad:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
        Validity
            Not Before: Jan 11 17:58:44 2024 GMT
            Not After : Jan  9 18:03:44 2025 GMT
        Subject: CN=C096D9BA973D7FBC6CC6685773EFC8609737E559
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:cf:c3:6b:29:cc:d2:48:1f:ed:1d:4e:69:a9:
                    e6:14:ae:b3:e4:20:1a:fd:45:50:a6:20:8b:b8:1c:
                    f9:45:ba:24:c1:04:46:ac:b7:f4:b4:fb:15:38:5c:
                    9a:89:04:f5:e8:0b:7f:e3:d8:d0:6d:a8:4b:f2:20:
                    d1:bd:e6:c1:03:bb:54:02:a6:39:87:68:0f:ce:85:
                    83:05:c1:bf:37:02:57:46:12:26:ee:96:d4:a0:ab:
                    1b:1f:42:a2:d8:9d:fa:3e:75:59:cb:04:d8:db:88:
                    c6:4d:1d:0d:6e:94:7d:b9:b1:4a:d6:38:17:0d:1b:
                    f6:e4:ae:12:43:7b:9a:67:cf:6a:ce:7b:30:64:6a:
                    6d:6d:d0:63:c0:75:92:1b:d5:6a:95:87:16:69:bb:
                    60:c7:c4:68:e1:25:96:3d:af:85:6e:04:7f:ef:90:
                    fb:c9:23:41:da:02:71:29:15:d2:93:68:0f:b5:02:
                    a5:9d:ca:ab:e1:05:84:ec:f5:df:9c:d7:8e:84:10:
                    30:11:e8:8c:72:83:16:6b:6b:05:88:9d:99:c2:b0:
                    51:75:a5:24:9a:4d:3a:11:cc:08:6e:72:70:e4:d9:
                    c0:1d:c1:e7:77:b2:3c:05:4b:93:78:de:6d:74:f5:
                    3e:f6:cf:20:9f:4d:ce:e0:e1:63:5d:79:5b:7a:6a:
                    8b:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:96:D9:BA:97:3D:7F:BC:6C:C6:68:57:73:EF:C8:60:97:37:E5:59
            X509v3 Authority Key Identifier:
                keyid:8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a383030303a3a2f33332d3333203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4384:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         06:98:9a:20:58:d5:67:c5:e7:59:bb:7e:2d:4b:c9:63:26:f6:
         62:d2:49:93:52:ca:2f:25:f8:16:74:74:c2:38:da:56:ab:1d:
         85:b4:3d:7e:68:c3:3a:74:b1:d6:16:59:8a:0c:47:35:30:d4:
         57:94:91:82:90:d8:f2:90:a8:e0:ea:70:f8:2f:68:a6:71:2f:
         fd:c1:84:53:81:d0:33:97:11:f4:b9:78:56:02:7b:f6:91:2b:
         82:20:8b:83:8a:fa:63:ac:36:1e:8c:02:15:7b:1c:2d:b7:1c:
         01:96:36:c4:b4:29:fd:b5:21:0c:01:45:c2:58:91:58:8e:41:
         7b:d2:b1:6f:9c:69:02:e5:3e:6b:5c:85:c3:1e:66:e3:6d:9a:
         de:28:f3:9e:16:65:cb:0a:fc:d3:a1:0f:9a:b3:d8:13:23:c2:
         84:8b:36:23:f7:ed:40:ed:eb:b4:42:28:6e:42:55:b4:7e:e4:
         a0:1e:0f:48:9b:45:21:4a:e3:e0:81:3e:ee:83:fb:f8:25:f7:
         44:93:4f:a2:17:ce:57:92:bb:7d:da:19:37:34:c9:46:14:98:
         ab:d0:7d:a6:a2:90:55:3d:10:af:ad:3c:da:8a:80:de:69:9a:
         f6:e0:d7:04:14:17:9d:23:b4:bd:0f:78:4d:ab:eb:b6:3f:d0:
         b6:34:dc:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org