Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/323830343a376536633a3a2f33322d313238203d3e20323731363233.roa
File:                     323830343a376536633a3a2f33322d313238203d3e20323731363233.roa (raw, json)
Hash identifier:          A9MzDptkCRnbCLxXjUu3xSlJIV8JNzZlWzJfCqIBefE=
Subject key identifier:   A8:CD:09:0E:27:62:E1:B5:48:AF:B8:A0:ED:C1:12:E9:41:F7:87:D8
Certificate issuer:       /CN=8C5E36B81EEC513AEFC77A52B60D451BC4B02974
Certificate serial:       70F977D79A9C4C7B9E25A246841A4B40731A9E8D
Authority key identifier: 8C:5E:36:B8:1E:EC:51:3A:EF:C7:7A:52:B6:0D:45:1B:C4:B0:29:74
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/323830343a376536633a3a2f33322d313238203d3e20323731363233.roa
Signing time:             Mon 06 Nov 2023 23:55:45 +0000
ROA not before:           Mon 06 Nov 2023 23:50:45 +0000
ROA not after:            Mon 04 Nov 2024 23:55:45 +0000
asID:                     271623
IP address blocks:        2804:7e6c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:f9:77:d7:9a:9c:4c:7b:9e:25:a2:46:84:1a:4b:40:73:1a:9e:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C5E36B81EEC513AEFC77A52B60D451BC4B02974
        Validity
            Not Before: Nov  6 23:50:45 2023 GMT
            Not After : Nov  4 23:55:45 2024 GMT
        Subject: CN=A8CD090E2762E1B548AFB8A0EDC112E941F787D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:b1:bb:16:4a:55:62:dc:58:1b:d8:99:f1:94:
                    c5:b1:06:c5:b4:68:a6:a6:19:37:1b:d4:5e:03:13:
                    bb:cc:5b:48:61:36:99:99:0e:64:f5:79:ba:d6:0d:
                    28:14:55:c3:b1:83:3f:9c:36:05:fe:b9:6f:0f:65:
                    25:6e:c0:5a:b2:23:d0:a6:fd:9b:65:d5:a7:02:86:
                    82:df:fa:8b:4b:78:83:18:ba:bd:77:e4:fd:1d:21:
                    dc:35:7a:4a:1e:26:44:f2:3f:8d:04:56:cf:76:af:
                    38:03:c9:ab:ac:4b:b3:c3:a8:cc:f7:0c:ef:09:e8:
                    13:e4:5f:4f:27:b0:d2:38:6f:f8:aa:44:6f:2e:c0:
                    90:d6:c0:87:a5:3f:7d:59:85:47:9d:1a:32:b2:55:
                    d0:66:f3:72:ad:d5:14:b3:1b:30:28:99:52:5f:0a:
                    b0:85:f5:0e:be:7b:3c:49:d9:e6:d2:4a:f8:26:20:
                    06:d5:e6:32:8e:2a:c5:5f:f4:84:0b:ae:dd:59:68:
                    ca:e8:a3:e0:92:6b:58:88:76:1f:af:42:11:fb:7d:
                    3d:1c:75:ea:37:ef:92:27:e5:ad:42:47:24:ef:20:
                    e8:29:73:d6:5e:8a:b6:2d:c3:86:12:9f:d7:e4:32:
                    34:46:68:59:4b:d7:88:88:f3:cc:aa:7a:5f:2d:40:
                    d2:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:CD:09:0E:27:62:E1:B5:48:AF:B8:A0:ED:C1:12:E9:41:F7:87:D8
            X509v3 Authority Key Identifier:
                keyid:8C:5E:36:B8:1E:EC:51:3A:EF:C7:7A:52:B6:0D:45:1B:C4:B0:29:74

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C5E36B81EEC513AEFC77A52B60D451BC4B02974.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/mADX47AEDxo5SW5HySQ5yvgmkV8T74jqkz2XtE1eMj8/0/323830343a376536633a3a2f33322d313238203d3e20323731363233.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e6c::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:bb:32:7a:c0:3e:1e:78:65:94:e5:82:e0:0d:a8:99:b8:9b:
         94:fd:41:a7:cc:9d:d1:ac:39:0f:5c:28:6a:77:54:ac:e9:4f:
         45:1a:4e:a7:de:09:f5:9f:d4:8e:36:92:b0:ee:b2:2d:03:88:
         7c:bb:d3:a0:0a:e9:1b:2d:df:2f:e3:15:9a:99:b9:21:c3:a6:
         ec:ba:91:ce:53:52:e1:a6:54:ae:63:24:58:a1:31:56:63:65:
         71:14:2b:71:8d:15:69:ff:0b:50:ca:8f:5c:4b:1b:11:04:81:
         44:39:d8:b5:de:5e:74:53:0f:2a:16:08:72:c4:2f:cd:14:e8:
         50:2e:82:b6:1d:64:c5:ff:c0:91:93:c0:2f:1b:ac:c1:a7:42:
         94:d5:68:05:3d:1c:fa:33:df:de:26:ad:0a:1f:6e:8c:36:4f:
         f6:5f:ca:7d:c0:73:50:ca:3d:e2:74:ed:6f:91:9f:a3:7b:b1:
         d6:c9:e7:3f:18:6e:23:3c:4c:fe:6c:fa:b5:ef:e3:c1:41:aa:
         6f:7b:55:d2:e5:8f:d8:75:c2:94:5d:95:2e:12:fa:c8:5e:bc:
         8a:e1:44:52:8a:77:4c:39:a9:08:73:26:db:d2:d2:da:95:24:
         61:4f:86:3c:0a:33:88:d0:95:57:cd:5c:d6:a2:ec:02:3b:14:
         a5:23:c3:d7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:08 2024 by rpki-client on console-fra.rpki-client.org