Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a3a2f33342d3334203d3e20323637353735.roa
File:                     323830343a343338343a3a2f33342d3334203d3e20323637353735.roa (raw, json)
Hash identifier:          xJ6DPTlT8ZqQOf4+y9srPDGNBADOGtGSYfHgrVX2RZ4=
Subject key identifier:   C1:A2:80:75:B1:07:28:F7:CE:4A:0F:4D:B9:B7:2B:09:D2:CA:80:2B
Certificate issuer:       /CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Certificate serial:       300F3E99F3A16AA8E8953AC40A566F1BC975747C
Authority key identifier: 8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a3a2f33342d3334203d3e20323637353735.roa
Signing time:             Thu 11 Jan 2024 18:03:44 +0000
ROA not before:           Thu 11 Jan 2024 17:58:44 +0000
ROA not after:            Thu 09 Jan 2025 18:03:44 +0000
asID:                     267575
IP address blocks:        2804:4384::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:0f:3e:99:f3:a1:6a:a8:e8:95:3a:c4:0a:56:6f:1b:c9:75:74:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
        Validity
            Not Before: Jan 11 17:58:44 2024 GMT
            Not After : Jan  9 18:03:44 2025 GMT
        Subject: CN=C1A28075B10728F7CE4A0F4DB9B72B09D2CA802B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:43:f1:fe:bf:6e:44:a6:28:b7:f2:c5:09:93:
                    2d:69:e7:48:30:e3:96:81:f3:f9:15:9a:9f:4e:3b:
                    b8:9c:b7:ab:d0:59:53:97:63:52:84:c0:c1:14:a5:
                    54:1c:df:c2:a5:d5:94:b3:eb:77:45:0f:cc:02:34:
                    af:95:e2:d3:7f:60:84:c8:45:d0:6f:17:56:84:44:
                    b5:e9:f8:0a:08:00:ec:52:7d:39:ef:e0:c3:e7:da:
                    0d:6d:fc:31:54:05:af:5d:0b:06:48:f2:8d:06:06:
                    9a:9a:82:a7:4e:1d:f9:3f:4f:12:a2:9b:f4:5a:07:
                    8c:36:e2:04:21:5c:9a:bd:f8:43:c4:69:1e:7a:54:
                    c6:e2:55:04:81:b3:27:8d:78:28:1f:24:e5:fe:a8:
                    0b:be:d8:ad:56:ba:6e:99:83:e9:30:cb:64:91:3f:
                    77:e6:16:f6:58:9d:7a:f7:34:8a:50:fe:39:0b:d2:
                    65:2c:74:31:65:4e:e7:27:47:30:c7:11:42:20:a8:
                    18:00:52:60:67:a5:b2:49:c6:1e:1a:2c:be:ac:7c:
                    6e:b5:19:bc:ad:3c:46:26:fa:50:e8:6f:5f:d8:6e:
                    d3:0b:9f:96:3f:2f:cd:25:56:81:b6:81:47:7c:0d:
                    67:b4:47:54:38:9f:ea:38:f7:f2:f0:df:ae:88:3f:
                    7f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C1:A2:80:75:B1:07:28:F7:CE:4A:0F:4D:B9:B7:2B:09:D2:CA:80:2B
            X509v3 Authority Key Identifier:
                keyid:8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a3a2f33342d3334203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4384::/34

    Signature Algorithm: sha256WithRSAEncryption
         92:89:d7:46:3e:fd:2e:d1:6c:b4:51:6a:7b:4c:02:a0:77:3e:
         c3:b3:6f:2f:e9:68:c6:6a:17:48:3d:e0:27:c0:7b:f6:b7:9a:
         14:70:3e:a3:97:19:30:31:a2:67:8a:7a:f3:45:3e:d9:1c:15:
         ee:2c:c8:4c:c8:f7:15:36:4b:53:47:32:da:57:89:56:4b:2e:
         c1:e1:1d:5c:d9:27:5b:ef:85:69:ee:d4:dc:4f:e7:a0:ff:17:
         8d:1c:d4:09:32:8b:e2:6e:59:fc:22:01:e7:7d:e5:23:df:c9:
         15:7d:7d:e0:f8:56:f2:3f:52:de:4a:5d:5f:53:a7:d0:f6:86:
         65:5b:f7:87:6b:88:9b:51:63:d5:88:e0:63:e0:90:f6:56:d4:
         e2:d8:38:51:79:2b:fc:3c:2e:97:41:cf:cc:ec:0e:84:ec:aa:
         78:0b:ab:b8:8b:bd:01:f6:21:a3:4c:47:f6:da:69:35:53:0f:
         67:21:31:18:8b:0e:24:a7:2d:c9:00:94:43:af:70:a9:87:43:
         a0:d8:90:99:2f:67:c1:95:d1:74:3b:7f:47:19:09:de:bf:9c:
         91:c6:1a:ed:a5:db:2d:bf:67:a9:4f:af:b6:6e:fa:00:62:fd:
         fa:fa:cb:78:1b:9a:b2:f7:aa:e1:28:01:d8:cc:1b:0f:a6:d8:
         3b:3e:dc:d3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org