Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/1/323830343a323062633a3a2f33322d313238203d3e20323634353131.roa
File:                     323830343a323062633a3a2f33322d313238203d3e20323634353131.roa (raw, json)
Hash identifier:          dNBs3dIBqqC0XZdyMmOT2r+kmBKmQOnrg2ng1F3Bjnk=
Subject key identifier:   51:5C:1D:02:55:C2:E4:CF:1F:8D:0E:02:22:C3:A2:EA:C8:4C:4F:3B
Certificate issuer:       /CN=8BA2AF2D0D52ED0975B013A8619531175EA4B275
Certificate serial:       55BFAAA2DE0553FC3A61552A4A1BBDA547573F41
Authority key identifier: 8B:A2:AF:2D:0D:52:ED:09:75:B0:13:A8:61:95:31:17:5E:A4:B2:75
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA2AF2D0D52ED0975B013A8619531175EA4B275.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/1/323830343a323062633a3a2f33322d313238203d3e20323634353131.roa
Signing time:             Wed 03 Apr 2024 23:22:07 +0000
ROA not before:           Wed 03 Apr 2024 23:17:07 +0000
ROA not after:            Wed 02 Apr 2025 23:22:07 +0000
asID:                     264511
IP address blocks:        2804:20bc::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:bf:aa:a2:de:05:53:fc:3a:61:55:2a:4a:1b:bd:a5:47:57:3f:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8BA2AF2D0D52ED0975B013A8619531175EA4B275
        Validity
            Not Before: Apr  3 23:17:07 2024 GMT
            Not After : Apr  2 23:22:07 2025 GMT
        Subject: CN=515C1D0255C2E4CF1F8D0E0222C3A2EAC84C4F3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:31:4d:2f:0d:3e:58:4a:da:b9:03:bc:64:2d:
                    68:0f:f6:f8:ac:c9:8e:ac:c7:a1:ab:da:bd:3f:bc:
                    2b:c9:fc:9d:3a:1a:ad:f9:dc:a9:77:7b:d5:66:c2:
                    ab:3a:59:a6:7c:9e:ee:3b:71:31:b6:81:06:18:96:
                    e6:2b:e7:72:a2:1a:2a:bb:97:ad:c4:bd:0e:5e:b2:
                    f0:a0:83:8d:ad:76:c7:ad:74:7f:8f:b0:99:88:a7:
                    73:99:3c:e2:90:34:b0:54:e2:dd:ed:04:08:7a:2c:
                    70:77:ca:5d:74:2a:a1:62:59:b9:2f:1c:67:73:61:
                    50:56:3c:50:cc:0d:a8:69:78:0e:59:a0:5c:79:fb:
                    52:84:6d:fd:87:71:e4:b2:73:c6:d9:6f:7f:ca:25:
                    19:c3:d1:e1:de:95:08:fc:65:7d:68:aa:d7:19:4e:
                    ca:76:95:7e:3f:3d:ca:9e:04:c8:71:83:d3:d5:d5:
                    9e:35:4a:31:e5:f7:e1:bb:ec:36:75:0f:0b:2c:11:
                    73:4c:76:14:52:2b:dd:f2:cf:0f:b4:8a:c6:aa:62:
                    93:ff:cd:35:6f:e5:9e:6e:40:09:ab:90:54:e4:cf:
                    92:f6:bf:07:89:0d:9e:c1:b1:b0:31:9d:0a:04:33:
                    ad:3a:bf:4b:20:a3:a6:2d:86:43:99:ad:5f:cb:2c:
                    bd:d3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:5C:1D:02:55:C2:E4:CF:1F:8D:0E:02:22:C3:A2:EA:C8:4C:4F:3B
            X509v3 Authority Key Identifier:
                keyid:8B:A2:AF:2D:0D:52:ED:09:75:B0:13:A8:61:95:31:17:5E:A4:B2:75

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/1/8BA2AF2D0D52ED0975B013A8619531175EA4B275.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8BA2AF2D0D52ED0975B013A8619531175EA4B275.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/FiHNp9xFjTegr3KUkBJwBSXPf95i8Hd18vuZam71A2e6/1/323830343a323062633a3a2f33322d313238203d3e20323634353131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:ef:db:d2:df:11:11:c0:94:51:54:a9:3c:da:43:22:df:b3:
         9f:66:7e:42:5e:20:90:f3:54:cf:b1:9d:42:f4:e4:53:92:0a:
         c2:00:dd:49:50:a1:46:d2:00:9c:65:3f:4b:b2:51:82:35:1a:
         d3:bf:d1:85:77:2d:1f:a6:0d:e4:5c:53:bd:44:4e:4a:a0:b3:
         62:1c:e9:00:14:a6:c5:b7:43:aa:24:38:fc:60:21:f6:78:26:
         50:5d:19:93:da:28:6e:45:00:b7:42:4d:34:30:14:3c:e9:93:
         89:56:da:ca:64:1c:0f:fb:86:ae:0d:9f:26:3f:e5:35:7c:4a:
         d4:2f:cb:2d:b3:8e:6b:7a:30:43:d2:61:2b:8d:38:8c:db:c9:
         9f:9b:4e:ec:09:50:8e:65:99:50:0c:25:31:c9:0e:f3:3b:40:
         8b:d3:c5:18:ce:b9:0b:16:13:53:6e:2f:a8:21:59:c4:ff:18:
         94:e4:93:5e:89:d7:c4:66:79:8d:e2:14:e9:05:b6:49:da:ed:
         93:5d:be:a1:76:c5:f7:3b:45:d2:df:89:4c:f7:aa:0c:b5:47:
         a9:bc:23:fa:4a:31:31:59:64:a3:7f:d8:d7:b8:e7:ff:86:73:
         e9:46:cc:a3:a5:de:ac:bf:d7:73:56:65:32:54:67:76:6a:3b:
         d0:5d:2f:64
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:47 2024 by rpki-client on console-fra.rpki-client.org