Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/323830343a383a3a2f33302d3438203d3e203134383430.roa
File:                     323830343a383a3a2f33302d3438203d3e203134383430.roa (raw, json)
Hash identifier:          YqEIZuOkLKfABNkGZuA2/avcyRVULXCSljirEjvd6xk=
Subject key identifier:   70:EA:25:A2:BA:5B:70:04:92:50:5B:C0:65:EE:74:CF:BF:D6:35:EE
Certificate issuer:       /CN=E8134C8A69EE3FB2D502265D0E168A4AAB262B92
Certificate serial:       3F90AA8B11B3A6CF5E687A6A8BC95488394469A9
Authority key identifier: E8:13:4C:8A:69:EE:3F:B2:D5:02:26:5D:0E:16:8A:4A:AB:26:2B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/323830343a383a3a2f33302d3438203d3e203134383430.roa
Signing time:             Thu 03 Nov 2022 21:47:17 +0000
ROA not before:           Thu 03 Nov 2022 21:42:17 +0000
ROA not after:            Thu 02 Nov 2023 21:47:17 +0000
asID:                     14840
IP address blocks:        2804:8::/30 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:90:aa:8b:11:b3:a6:cf:5e:68:7a:6a:8b:c9:54:88:39:44:69:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E8134C8A69EE3FB2D502265D0E168A4AAB262B92
        Validity
            Not Before: Nov  3 21:42:17 2022 GMT
            Not After : Nov  2 21:47:17 2023 GMT
        Subject: CN=70EA25A2BA5B700492505BC065EE74CFBFD635EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:9a:11:3e:90:3f:1d:ea:da:7f:06:54:82:58:
                    71:56:e0:ae:a0:72:a6:0d:15:1e:99:16:93:c1:1c:
                    a8:d8:0e:f0:71:da:6e:2b:62:cc:ce:31:df:3e:83:
                    9e:9e:be:13:f7:09:51:06:54:c9:f6:81:25:4d:02:
                    e3:dc:8c:9f:23:54:78:1e:34:4e:df:87:f8:74:7f:
                    0b:4a:4b:62:eb:93:37:6e:a3:40:2f:d3:0d:1f:d9:
                    01:48:b2:57:43:d0:f2:95:a6:a4:9f:24:1f:d6:66:
                    4e:4c:2e:53:17:dc:4a:18:cf:dd:b4:1e:bd:43:41:
                    df:1e:2a:e3:09:85:6d:d0:08:d3:8a:70:2f:b4:28:
                    bb:77:e9:70:19:a8:96:53:f5:6c:f3:e9:4d:c2:97:
                    b7:54:a1:25:a7:96:d3:e7:ce:1b:fe:0f:61:95:0e:
                    b4:0e:69:23:2e:ed:0e:15:4f:20:2b:c4:23:d1:05:
                    0d:34:93:12:a1:d2:7c:7a:f7:41:7a:05:ae:9e:ee:
                    e6:b0:29:6f:fa:bb:cb:d8:ca:e6:a1:36:7f:01:71:
                    6d:95:1b:b8:60:54:13:1c:16:37:7d:02:3a:0b:c7:
                    a7:2c:ab:23:4b:6e:e9:89:04:70:f0:a7:cf:c8:7d:
                    ae:1a:54:c9:c3:9d:f9:ec:a2:ec:a7:90:35:ec:e3:
                    42:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:EA:25:A2:BA:5B:70:04:92:50:5B:C0:65:EE:74:CF:BF:D6:35:EE
            X509v3 Authority Key Identifier:
                keyid:E8:13:4C:8A:69:EE:3F:B2:D5:02:26:5D:0E:16:8A:4A:AB:26:2B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E8134C8A69EE3FB2D502265D0E168A4AAB262B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GjfAKQd5YBhYAMm3bNmcAPUwSMPsZqS6PyJF3mpAckrU/0/323830343a383a3a2f33302d3438203d3e203134383430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8::/30

    Signature Algorithm: sha256WithRSAEncryption
         73:88:d0:5d:c9:40:47:ef:95:22:44:bb:0f:17:2f:6d:ac:04:
         8b:8b:43:6c:0d:1a:95:2d:1a:68:52:b9:ed:0f:32:7f:b5:ea:
         d1:08:ec:5f:e5:35:ca:f1:b9:d6:19:a2:71:23:d9:f1:1e:c2:
         a3:34:37:12:d0:17:be:49:f2:5a:c6:86:3d:2d:bf:2e:fb:c0:
         f2:9c:c5:8a:f1:ff:e0:21:a6:4a:da:b4:db:72:fd:78:6b:58:
         2e:29:ae:97:57:d0:76:c2:b2:3a:30:35:89:6d:86:2d:31:fe:
         53:06:81:da:28:bc:f9:e0:7e:03:61:f5:49:45:6e:a4:7d:25:
         26:9c:a3:da:cc:82:84:42:32:11:6f:03:07:19:bc:77:d7:eb:
         f1:12:ca:b2:11:6d:76:5a:7a:b7:ed:c5:23:12:3a:1a:a8:66:
         d1:7e:17:55:db:aa:8d:4a:b5:bc:5e:a8:64:21:6b:32:81:05:
         79:7f:41:36:5c:15:17:41:f7:07:55:51:83:a1:df:5e:fb:6a:
         71:fa:af:b1:22:49:f4:2e:c5:ce:c1:28:81:66:42:a1:6e:eb:
         01:13:98:3f:47:4f:1c:3f:db:6f:c9:bf:d0:ab:e9:0a:88:2d:
         a9:32:df:10:3c:4e:eb:af:c6:44:c6:25:0b:12:e0:0e:58:93:
         30:c1:9a:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:32 2024 by rpki-client on console-ams.rpki-client.org