Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a313030303a3a2f34302d3430203d3e20323633303236.roa
File:                     323830343a6132383a313030303a3a2f34302d3430203d3e20323633303236.roa (raw, json)
Hash identifier:          wrF+ZFq0LqQV3/CCw+5S1s1xHD/Yac33QDWiRieY3fo=
Subject key identifier:   14:7C:14:70:9B:F2:B9:C7:95:3E:24:0A:85:08:E7:58:F5:63:A7:BF
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       18EC5E68C6E3C15D8E10C0C28F5C1160863F2A5A
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a313030303a3a2f34302d3430203d3e20323633303236.roa
Signing time:             Tue 22 Aug 2023 16:27:05 +0000
ROA not before:           Tue 22 Aug 2023 16:22:05 +0000
ROA not after:            Tue 20 Aug 2024 16:27:05 +0000
asID:                     263026
IP address blocks:        2804:a28:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ec:5e:68:c6:e3:c1:5d:8e:10:c0:c2:8f:5c:11:60:86:3f:2a:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Aug 22 16:22:05 2023 GMT
            Not After : Aug 20 16:27:05 2024 GMT
        Subject: CN=147C14709BF2B9C7953E240A8508E758F563A7BF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:5f:0e:a3:c0:88:da:93:9d:d2:5e:bb:5f:dd:
                    1f:0f:ba:34:94:00:f3:68:79:f8:59:0f:fd:0f:2d:
                    f2:6d:42:7e:09:c4:0f:6b:93:fe:bf:8e:ae:04:5b:
                    12:3e:03:30:c9:de:c2:73:d2:34:72:70:0b:dc:28:
                    09:a1:4d:7f:3e:4f:77:30:2a:5e:7e:4b:8a:18:4c:
                    8d:78:2f:fc:b5:14:94:15:30:44:f1:41:b9:fc:80:
                    4a:43:39:d7:db:e1:8f:a8:80:ee:af:10:d9:fe:48:
                    f5:d9:f1:2f:02:85:5e:1a:62:3a:0f:24:b8:87:ff:
                    bd:e8:cc:e4:e8:0e:54:1f:1f:b7:10:38:a6:dd:91:
                    52:ab:d3:f4:f6:f3:ff:6b:78:ba:e4:d9:9f:33:ba:
                    d8:df:7f:ea:7f:ca:19:46:3b:3b:a1:0d:b3:07:d0:
                    ec:fc:f6:6d:21:6b:a2:50:0c:c7:ce:10:0c:26:fe:
                    76:3b:50:31:31:53:33:2c:6c:2e:60:76:28:1c:91:
                    63:c3:bc:8c:66:dd:98:14:7d:92:e1:3a:90:a7:ec:
                    17:f8:3e:1e:34:0e:00:f4:23:6c:41:ea:b1:af:8f:
                    bf:32:3a:77:13:89:a1:db:f4:ed:bf:b7:5e:75:67:
                    58:1a:34:e4:ae:eb:06:f0:cf:b2:e2:a3:69:27:7d:
                    7a:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                14:7C:14:70:9B:F2:B9:C7:95:3E:24:0A:85:08:E7:58:F5:63:A7:BF
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a313030303a3a2f34302d3430203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:9f:fc:3c:b0:6a:0d:a7:91:5b:a9:8b:9a:fa:2d:64:e2:88:
         8c:79:04:f1:56:8e:96:35:ea:b5:13:31:5b:b6:31:1e:40:1b:
         c0:ab:e7:d3:48:71:71:13:8e:e0:f5:aa:2f:77:27:6c:20:11:
         9c:ec:04:f0:01:48:9f:38:7f:44:31:bb:43:32:fb:08:12:0d:
         f2:cd:0f:39:13:dd:80:7c:36:ed:50:f5:ba:65:78:0d:e0:a9:
         e4:34:9a:5a:07:3b:5a:bd:ac:a9:62:e4:c1:1f:2a:8b:d1:e0:
         e4:d9:cd:fc:5a:f9:49:c8:28:3f:9d:3d:06:a5:e8:62:8e:50:
         63:c1:a7:47:8f:79:c2:c3:ff:d0:7b:9d:6a:bb:d9:5c:9e:55:
         9d:cd:88:9d:cb:d5:3d:57:0b:f6:5a:0d:87:97:e9:a1:11:c5:
         03:0c:3d:b4:57:6b:c1:91:21:e5:bd:29:7e:de:92:fc:cc:f9:
         85:72:60:85:f3:80:5f:2f:7e:b3:57:86:c2:02:00:3d:7c:de:
         ad:90:9f:ad:71:98:b0:da:08:28:2f:52:66:27:ed:60:12:26:
         5d:a9:d7:ff:b7:4d:c0:b0:0d:ac:60:d8:4c:23:08:dd:8b:c2:
         26:f0:02:a1:9a:b2:62:f6:02:60:82:25:f9:fc:bc:b9:55:21:
         6d:64:c0:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org