Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3a2f33322d3438203d3e20323633303733.roa
File:                     323830343a3935343a3a2f33322d3438203d3e20323633303733.roa (raw, json)
Hash identifier:          8sO+wrjzawD64+Vjx/LCYhaQDO/2JB87WUq8z+bZ0sE=
Subject key identifier:   8B:9D:1F:F8:88:C5:93:C0:92:C3:D8:F4:1C:03:37:42:E5:CB:0B:F6
Certificate issuer:       /CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
Certificate serial:       2EC1F06FAB9F046CCB6E4B5481EF317B8DBBDCF9
Authority key identifier: AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3a2f33322d3438203d3e20323633303733.roa
Signing time:             Sat 23 Apr 2022 13:56:16 +0000
ROA not before:           Sat 23 Apr 2022 13:51:16 +0000
ROA not after:            Sat 22 Apr 2023 13:56:16 +0000
asID:                     263073
IP address blocks:        2804:954::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:c1:f0:6f:ab:9f:04:6c:cb:6e:4b:54:81:ef:31:7b:8d:bb:dc:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AD86B2A3E3ADB80A9FD084644564B388C98D93E9
        Validity
            Not Before: Apr 23 13:51:16 2022 GMT
            Not After : Apr 22 13:56:16 2023 GMT
        Subject: CN=8B9D1FF888C593C092C3D8F41C033742E5CB0BF6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:41:c2:d5:61:2f:ea:17:af:a3:1e:e3:e4:38:
                    67:53:0f:d2:df:d5:00:b6:34:50:78:ca:c6:94:35:
                    c1:a7:83:0b:2f:f0:70:fc:70:72:87:ef:08:ac:06:
                    4e:85:97:07:e0:77:b9:38:d7:11:5c:7c:9b:44:82:
                    9f:20:2c:62:5b:b2:d7:2c:5c:31:ae:81:c6:09:ed:
                    49:6f:1f:b0:94:ea:4b:ea:15:3a:67:ac:56:01:96:
                    45:1e:00:8c:82:70:df:00:05:46:15:41:16:09:7c:
                    92:d2:ef:bc:bf:6d:ee:1c:1f:6e:9e:3d:32:89:7f:
                    dd:9c:40:51:c3:d3:1b:07:d9:d3:e2:d2:1e:62:10:
                    fc:b8:11:62:7b:ad:cf:18:3f:bf:53:c2:25:8b:a5:
                    65:c4:de:e5:42:04:ef:5b:a9:13:9c:f6:86:b9:c0:
                    ec:68:04:6c:5f:f6:34:66:0b:41:27:17:4d:e9:f5:
                    44:ba:4a:59:d4:de:e4:b0:85:7c:23:34:c4:80:e1:
                    88:89:f6:94:d4:6e:7e:c6:5f:eb:30:88:8f:ee:55:
                    7d:28:ec:78:48:1e:10:d1:04:f5:9e:e0:00:e4:63:
                    12:40:45:88:8d:de:d8:0a:4d:56:15:6f:3b:ea:f9:
                    c1:79:9f:2c:e6:69:cc:ca:a8:e5:de:23:54:d1:3f:
                    6e:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:9D:1F:F8:88:C5:93:C0:92:C3:D8:F4:1C:03:37:42:E5:CB:0B:F6
            X509v3 Authority Key Identifier:
                keyid:AD:86:B2:A3:E3:AD:B8:0A:9F:D0:84:64:45:64:B3:88:C9:8D:93:E9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AD86B2A3E3ADB80A9FD084644564B388C98D93E9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Fb85s5eXYNkfcgVaWq95JukTy6c6o3qtnhUniNsfAbkm/0/323830343a3935343a3a2f33322d3438203d3e20323633303733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:954::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:7c:d7:5b:a2:15:df:49:d5:a6:71:35:b4:9d:45:bd:97:76:
         59:97:7e:b3:4a:38:6e:03:89:39:b5:7a:49:e3:22:f1:e2:53:
         fd:04:1b:ed:51:b5:3d:a7:e1:ee:5e:7a:ce:23:70:ff:dd:43:
         e3:95:6f:0b:b4:38:91:b2:70:e8:4f:26:7c:c7:c0:af:b4:d0:
         71:1d:4b:44:54:65:dd:35:e3:12:54:89:8f:57:7f:99:3a:ac:
         20:0e:47:70:fe:bf:f9:6d:af:95:48:37:02:bb:72:16:7f:40:
         cc:16:ed:4e:77:c6:07:18:53:fa:2d:53:b2:80:ee:f6:46:42:
         b9:27:67:6f:db:09:77:ac:5f:55:a1:33:5a:e5:85:25:0e:38:
         82:47:8c:d0:0e:3e:7a:68:28:f0:c5:f1:05:48:5c:c3:0e:2c:
         15:f6:c5:1b:09:b0:96:a0:bd:ab:1c:7c:3a:e1:0c:bd:be:01:
         9b:00:19:02:21:6e:52:c4:58:31:ca:c4:a2:6a:b1:97:30:ba:
         89:e3:f9:61:b2:cd:b5:90:af:b3:3d:de:79:8e:1f:32:2a:21:
         58:b2:c3:03:23:61:30:0f:d5:6a:df:90:e3:4a:74:d7:73:79:
         fe:64:03:ca:b2:60:d1:ad:b8:52:58:71:51:44:97:cd:ea:7f:
         01:0c:f8:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:07 2024 by rpki-client on console-ams.rpki-client.org