Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a383030303a3a2f33332d3333203d3e20323730333035.roa
File:                     323830343a366130303a383030303a3a2f33332d3333203d3e20323730333035.roa (raw, json)
Hash identifier:          XrQkkY2VRe1KfXymzNBHFXYnx+pzFEkkhHILipGywiU=
Subject key identifier:   8B:C9:5F:49:52:1D:63:3B:98:44:20:7A:BE:31:EC:D4:CD:7B:4D:07
Certificate issuer:       /CN=4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4
Certificate serial:       7498C292686CBC68DFFD1FA6A91E7302E15F2874
Authority key identifier: 40:19:E6:8B:6D:EC:8A:AE:C6:D2:85:32:82:77:EF:68:AC:C6:C9:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a383030303a3a2f33332d3333203d3e20323730333035.roa
Signing time:             Tue 07 Mar 2023 13:10:31 +0000
ROA not before:           Tue 07 Mar 2023 13:05:31 +0000
ROA not after:            Tue 05 Mar 2024 13:10:31 +0000
asID:                     270305
IP address blocks:        2804:6a00:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:98:c2:92:68:6c:bc:68:df:fd:1f:a6:a9:1e:73:02:e1:5f:28:74
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4
        Validity
            Not Before: Mar  7 13:05:31 2023 GMT
            Not After : Mar  5 13:10:31 2024 GMT
        Subject: CN=8BC95F49521D633B9844207ABE31ECD4CD7B4D07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:d8:7f:1c:3c:8a:9b:b8:cd:00:c9:23:c6:fa:
                    6d:7f:c3:bc:69:ca:40:9e:f5:f9:cd:26:e8:f0:25:
                    34:5b:4f:d0:d1:3a:75:2b:45:9d:80:7a:46:79:bb:
                    0d:ca:1c:eb:20:d6:63:3c:0c:96:bc:da:c4:fb:38:
                    f2:fd:b8:57:67:01:cd:e4:0a:74:e2:5e:5e:21:72:
                    79:5c:f3:7f:bd:1a:da:d0:87:bc:8a:a6:f3:0f:cc:
                    ee:98:65:98:c3:39:b8:01:89:1f:9d:86:5b:9a:60:
                    18:2c:50:7c:05:b4:37:f7:3c:a3:5e:04:20:b3:09:
                    bd:50:4f:cd:4d:81:8d:67:bd:2e:b1:dd:ae:25:95:
                    e4:5a:31:f9:ed:d5:3d:49:48:9e:1a:83:07:5d:d6:
                    fd:8c:d6:06:af:ff:4a:f5:a8:51:0e:0a:a7:9d:44:
                    d9:d2:a5:17:be:a3:7e:5d:62:a9:6c:42:6b:bf:15:
                    ac:7b:61:45:1b:8c:42:39:a8:f7:d3:1a:20:27:4e:
                    60:17:55:2a:08:43:d6:de:a8:78:52:e3:f0:79:45:
                    4c:af:1a:4d:40:6c:56:72:ab:9c:cf:13:d3:a2:b6:
                    4e:70:c5:92:bc:83:51:10:6d:59:6e:c2:04:dc:e0:
                    7e:e4:37:2c:6a:76:95:00:f2:77:19:0e:c3:65:8d:
                    56:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:C9:5F:49:52:1D:63:3B:98:44:20:7A:BE:31:EC:D4:CD:7B:4D:07
            X509v3 Authority Key Identifier:
                keyid:40:19:E6:8B:6D:EC:8A:AE:C6:D2:85:32:82:77:EF:68:AC:C6:C9:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4019E68B6DEC8AAEC6D285328277EF68ACC6C9B4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/k8LvCeHKbGg9fWnnGb6vJtgi5EGtDWJG5MkVJdfM8kq/1/323830343a366130303a383030303a3a2f33332d3333203d3e20323730333035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a00:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         5a:56:23:68:26:a4:88:94:73:5e:3e:be:c9:14:60:63:cd:cd:
         50:f6:2a:ae:f9:5b:40:f7:58:3b:c2:42:f0:04:f6:20:ff:0f:
         b6:de:ec:27:21:bb:6b:f9:bc:69:4f:af:0d:02:84:eb:0a:93:
         02:05:a1:b7:b0:23:3d:86:70:61:18:c0:a8:9b:67:91:ca:c6:
         c5:f9:27:f1:bd:9f:61:48:2c:17:58:a7:49:16:47:4e:f9:8f:
         c9:14:b2:ab:6f:4b:a2:0d:04:77:14:70:a3:06:64:58:8b:5f:
         50:cc:c5:1b:42:02:83:9e:95:b9:49:89:71:a1:ec:e6:95:3e:
         eb:00:61:4c:e2:79:19:ac:9a:a4:5f:d4:6d:ab:ac:df:09:fa:
         5c:9e:03:f5:68:41:d7:2f:a0:70:6a:69:cc:73:1a:8c:40:25:
         fb:60:c2:88:f7:9a:6a:92:28:c6:47:86:54:0b:5c:01:4b:7c:
         4f:e2:d7:93:3d:88:3b:4c:15:c9:a4:86:6f:20:d4:02:72:e6:
         b9:10:63:c6:2e:3e:69:16:25:57:7f:52:9f:c9:6a:e5:4b:cf:
         e3:7d:ae:bf:a1:c5:0f:8e:b4:a7:1b:39:db:3f:3e:6d:b5:23:
         6a:33:a3:0d:b2:1c:39:ba:28:2e:11:83:f4:48:2c:96:ba:8c:
         12:cc:5e:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org