Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/323830343a363662633a383030303a3a2f33332d3333203d3e20323639353739.roa
File:                     323830343a363662633a383030303a3a2f33332d3333203d3e20323639353739.roa (raw, json)
Hash identifier:          amB/XA+h5teC4GJ/M85K2pBjFoHp6xey9Weo5lSGdLM=
Subject key identifier:   EA:BB:FA:18:C8:E6:19:AB:15:76:12:62:47:3B:91:7A:A8:47:B2:8D
Certificate issuer:       /CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
Certificate serial:       693F3D1B85968A81E9DB1773FABACB11F865FAB8
Authority key identifier: 16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/323830343a363662633a383030303a3a2f33332d3333203d3e20323639353739.roa
Signing time:             Sat 26 Aug 2023 20:15:49 +0000
ROA not before:           Sat 26 Aug 2023 20:10:49 +0000
ROA not after:            Sat 24 Aug 2024 20:15:49 +0000
asID:                     269579
IP address blocks:        2804:66bc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:3f:3d:1b:85:96:8a:81:e9:db:17:73:fa:ba:cb:11:f8:65:fa:b8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=167F10BEB1FC319906571ABA7B9A3B442F748CB5
        Validity
            Not Before: Aug 26 20:10:49 2023 GMT
            Not After : Aug 24 20:15:49 2024 GMT
        Subject: CN=EABBFA18C8E619AB15761262473B917AA847B28D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:99:2c:49:e1:ac:5d:c4:60:79:ed:00:2e:0d:
                    5d:4f:ca:b6:9e:25:ba:57:df:07:66:5b:ad:8d:37:
                    96:7f:6a:23:45:c1:ee:fd:57:5d:27:9a:31:fa:c9:
                    98:15:85:85:ec:27:8e:e6:41:08:3b:1a:24:64:fc:
                    77:6f:39:93:a7:9f:32:28:27:1a:3a:45:8f:80:ce:
                    41:7d:93:a7:a8:a0:ef:c0:77:00:a8:d1:d4:47:8a:
                    a1:52:34:b7:04:5a:34:86:d1:57:72:e6:80:72:eb:
                    f6:61:fe:0d:b4:46:37:f8:14:88:ae:ce:6c:9b:66:
                    4c:34:e0:e5:3c:34:a6:73:80:3a:71:b7:0c:d7:d9:
                    61:73:13:f3:73:b0:55:bb:3c:34:9b:30:36:88:ab:
                    13:14:fa:ae:91:7e:3c:24:53:a9:f3:ae:8e:1f:10:
                    11:ef:ae:89:ff:77:28:73:4a:ad:5f:fc:7b:ed:dd:
                    00:e7:45:23:f6:0b:54:02:85:6b:0c:d8:94:8a:58:
                    70:13:c6:35:d9:37:07:44:c4:3f:48:1a:af:3a:7b:
                    20:0a:5c:78:dc:eb:cb:d0:59:66:0d:04:ac:6f:87:
                    b5:d4:63:12:3f:e0:df:06:87:b3:2e:88:28:aa:eb:
                    2a:ce:ee:20:c5:2f:e4:04:51:bd:76:f9:75:90:05:
                    1c:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:BB:FA:18:C8:E6:19:AB:15:76:12:62:47:3B:91:7A:A8:47:B2:8D
            X509v3 Authority Key Identifier:
                keyid:16:7F:10:BE:B1:FC:31:99:06:57:1A:BA:7B:9A:3B:44:2F:74:8C:B5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/167F10BEB1FC319906571ABA7B9A3B442F748CB5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FB58SbYhCxkqseMVzs9Aq6PpeRT4uL1AYk51xt4PsmEj/0/323830343a363662633a383030303a3a2f33332d3333203d3e20323639353739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66bc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         85:db:64:c5:53:b4:9f:33:d7:ac:d7:71:14:eb:e6:a9:91:3e:
         ae:00:b6:e8:4c:e9:df:3c:18:c5:db:9d:42:cc:b4:4b:0b:64:
         7e:b8:e5:93:bd:14:34:8c:7a:b9:df:8a:f0:e6:a1:34:06:82:
         5b:d0:60:38:67:41:ad:a5:89:60:a0:7b:0c:57:ea:fd:a7:ce:
         f8:a8:a1:b2:5c:19:98:af:cd:60:b8:d2:bd:45:aa:9f:d9:af:
         19:a5:2f:6a:4b:2d:19:c6:6d:43:37:be:9f:e7:28:93:2c:0e:
         7b:3f:30:28:7b:68:73:17:dd:cf:3f:97:ac:38:94:cd:48:db:
         e1:9d:02:2b:d6:8a:fe:52:79:71:d8:bb:e2:90:a7:15:e3:09:
         a9:c7:7f:62:78:07:6f:12:9a:28:8f:d3:d6:18:5c:93:57:ac:
         bd:6a:94:b6:bb:e9:c2:fb:e8:56:15:df:5e:51:08:5f:f4:80:
         6a:8a:75:03:51:ff:b6:3d:83:2f:ef:9e:ec:62:69:45:c8:7f:
         6f:6c:71:f2:68:ee:4d:00:c5:24:14:aa:e1:7c:a9:7b:75:3b:
         3b:f7:a0:3a:ec:fa:ef:65:1c:1e:bd:84:17:40:31:b2:2e:06:
         6d:2a:83:a0:50:21:33:49:35:de:b1:65:9b:dd:9a:01:93:69:
         b0:4a:15:3a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org