Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/323830343a323062633a3a2f33322d313238203d3e20323634353131.roa
File:                     323830343a323062633a3a2f33322d313238203d3e20323634353131.roa (raw, json)
Hash identifier:          ld1E1SQLZTSXmlbDSw8YsxeNLKf7o9I7imyq0d4hBAY=
Subject key identifier:   0D:2F:07:BB:9D:43:1C:D2:08:A3:AA:19:E1:D9:27:5C:4E:92:14:5E
Certificate issuer:       /CN=890B378FA4B1BD7EED9F2745089E0F1EACEAA240
Certificate serial:       27AD3DB931ED4883BA96D622945EC1B8F99E4329
Authority key identifier: 89:0B:37:8F:A4:B1:BD:7E:ED:9F:27:45:08:9E:0F:1E:AC:EA:A2:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/323830343a323062633a3a2f33322d313238203d3e20323634353131.roa
Signing time:             Tue 23 Jan 2024 18:31:48 +0000
ROA not before:           Tue 23 Jan 2024 18:26:48 +0000
ROA not after:            Tue 21 Jan 2025 18:31:48 +0000
asID:                     264511
IP address blocks:        2804:20bc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:ad:3d:b9:31:ed:48:83:ba:96:d6:22:94:5e:c1:b8:f9:9e:43:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=890B378FA4B1BD7EED9F2745089E0F1EACEAA240
        Validity
            Not Before: Jan 23 18:26:48 2024 GMT
            Not After : Jan 21 18:31:48 2025 GMT
        Subject: CN=0D2F07BB9D431CD208A3AA19E1D9275C4E92145E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:1b:6f:2b:9b:a6:40:ca:37:e9:8d:9a:09:98:
                    e1:6b:0a:ee:13:d8:fc:90:7f:34:68:e5:33:7d:87:
                    28:6d:88:0c:24:21:82:7c:9a:67:e4:6a:cb:7d:a5:
                    60:40:0a:f8:4d:7b:5b:5f:7f:09:61:10:c7:88:b6:
                    f2:d4:e7:f7:9d:61:28:47:65:b2:29:7e:ae:27:62:
                    3d:e4:98:34:71:23:39:33:bc:d9:4d:83:52:c8:df:
                    66:21:b2:6e:53:df:a9:c6:6d:4d:a0:97:41:b1:e6:
                    08:01:1f:6d:a6:47:56:6d:cd:32:57:29:65:4b:0c:
                    9a:f4:6a:50:5b:d9:d2:b5:87:0a:f7:a6:89:a3:08:
                    55:ad:f9:27:4f:ed:1f:33:30:f6:fb:57:7c:62:0c:
                    fa:f1:c7:05:6e:9d:ca:73:ef:d2:b6:4f:7e:fa:b3:
                    75:39:aa:53:66:30:39:5b:33:0c:df:29:66:87:16:
                    e9:6c:e4:24:d6:b1:08:bd:2b:64:86:70:8d:1f:98:
                    fd:98:0f:d9:2d:c0:61:ab:66:91:93:f6:82:41:a4:
                    2c:82:cd:ab:03:44:ca:63:87:38:5b:fe:a1:49:0f:
                    8e:e4:86:11:df:6a:80:72:27:d0:16:39:67:71:8c:
                    14:3a:b1:59:c6:e5:fb:fc:4d:07:0f:f3:d4:f1:2e:
                    96:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:2F:07:BB:9D:43:1C:D2:08:A3:AA:19:E1:D9:27:5C:4E:92:14:5E
            X509v3 Authority Key Identifier:
                keyid:89:0B:37:8F:A4:B1:BD:7E:ED:9F:27:45:08:9E:0F:1E:AC:EA:A2:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/890B378FA4B1BD7EED9F2745089E0F1EACEAA240.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/0/323830343a323062633a3a2f33322d313238203d3e20323634353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:b0:fb:73:2f:1a:57:ab:9b:41:22:31:b5:e8:e6:5a:ab:20:
         bb:6b:7e:75:28:15:75:2a:05:e8:3e:3a:74:1c:37:5b:fb:6e:
         e1:ff:2d:df:df:29:c6:ff:6c:72:fe:ed:c5:2f:c9:20:05:61:
         94:ac:6b:42:81:03:0e:4e:19:bd:5f:7c:48:e0:f8:57:f3:0b:
         8f:b2:82:76:e4:58:d9:93:64:f4:36:dc:6f:71:87:35:95:34:
         da:18:ce:63:f9:4f:cc:4b:dd:b6:2e:9d:0c:fe:24:c3:26:42:
         22:3d:ef:9f:8b:91:38:ea:ff:2c:64:09:ca:e2:31:e2:bc:2e:
         ab:dc:b9:64:1a:1a:85:b8:96:22:d9:60:2e:2f:19:59:db:77:
         99:77:a8:a2:32:18:5e:61:a6:db:59:25:37:bf:7a:ed:d9:4b:
         2e:44:28:20:f4:72:72:03:09:7b:e5:87:5a:eb:92:ec:65:ae:
         4b:a7:1b:f2:19:77:6f:59:ff:69:20:53:bb:d6:30:af:eb:b7:
         80:b9:dd:82:64:48:9a:10:74:58:f9:68:44:5d:b0:f5:30:b6:
         29:ba:4b:02:d2:56:cb:a3:5d:5b:66:e6:3c:37:bb:34:6f:eb:
         d6:3f:9e:d0:3b:b6:7b:88:8c:4b:18:27:83:b2:6c:0b:78:2b:
         70:97:46:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:05 2024 by rpki-client on console-fra.rpki-client.org