Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a313030303a3a2f34322d3432203d3e20323633303236.roa
File:                     323830343a6132383a313030303a3a2f34322d3432203d3e20323633303236.roa (raw, json)
Hash identifier:          biUHw3YonSDpNNUL2TdOlg5Nq/DEtKGAW/lPPOsyyR8=
Subject key identifier:   5F:8A:4E:B7:26:9D:85:17:DE:09:A8:BE:29:57:06:0D:B4:D5:37:81
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       33E6F9367349C95C11BF596CC52FE3E0A2A2EBDF
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a313030303a3a2f34322d3432203d3e20323633303236.roa
Signing time:             Tue 22 Aug 2023 16:27:17 +0000
ROA not before:           Tue 22 Aug 2023 16:22:17 +0000
ROA not after:            Tue 20 Aug 2024 16:27:17 +0000
asID:                     263026
IP address blocks:        2804:a28:1000::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:e6:f9:36:73:49:c9:5c:11:bf:59:6c:c5:2f:e3:e0:a2:a2:eb:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Aug 22 16:22:17 2023 GMT
            Not After : Aug 20 16:27:17 2024 GMT
        Subject: CN=5F8A4EB7269D8517DE09A8BE2957060DB4D53781
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:61:6a:f2:9b:c7:1c:eb:91:29:cd:27:f6:3c:
                    a9:bb:6e:f5:e0:de:3c:49:50:19:f9:d6:3e:6f:36:
                    29:90:06:9d:ac:9e:f8:06:15:ed:9a:ce:78:78:8d:
                    91:5a:d7:cc:ca:a7:4a:f4:d2:3c:80:01:c1:39:4c:
                    27:9d:91:5f:33:b2:e7:59:e8:e7:9e:3a:5e:ba:77:
                    50:23:15:82:d3:a8:cf:06:e3:39:5f:70:37:0f:e8:
                    4b:be:44:b9:33:66:03:49:51:e2:d8:30:1b:31:cb:
                    44:80:5f:33:1f:46:95:ff:80:9b:81:53:89:e3:de:
                    3b:d5:b6:eb:42:11:c4:99:ea:9b:e5:a3:d7:b4:e3:
                    69:05:e2:59:bc:25:10:bb:fa:3a:02:b6:29:c9:5d:
                    b5:d8:5a:88:8d:f9:89:ca:68:d1:32:f9:76:ca:f1:
                    1d:80:23:3d:36:79:20:00:57:98:24:fe:8b:cf:1b:
                    8b:1b:38:35:46:d9:bb:34:c5:10:6c:9e:f6:c2:cd:
                    6e:4a:07:0d:42:04:c0:85:14:66:37:25:f7:84:72:
                    0e:f3:11:42:74:1e:44:db:d3:a0:32:1a:35:7e:6b:
                    3f:5b:b2:1e:17:00:e1:ae:e2:61:dc:61:e3:14:87:
                    ec:1f:3e:9f:cd:28:c7:50:0f:ff:e6:52:87:2c:a4:
                    c8:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5F:8A:4E:B7:26:9D:85:17:DE:09:A8:BE:29:57:06:0D:B4:D5:37:81
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a313030303a3a2f34322d3432203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:1000::/42

    Signature Algorithm: sha256WithRSAEncryption
         89:72:ca:45:fb:a1:bc:a1:14:9a:ed:05:88:73:b6:fe:f4:dd:
         76:0a:b4:59:22:e8:52:02:84:32:2d:3a:dd:d0:a1:84:41:18:
         09:3f:8f:28:e4:db:17:22:ad:0e:5e:ca:87:61:b3:4b:ee:d9:
         af:12:18:2f:7e:a8:80:16:c0:9f:a8:47:a5:f5:20:9b:5e:af:
         ab:97:0b:e0:bf:bb:aa:e2:ee:c6:71:99:7d:b0:a9:70:df:4b:
         83:40:5d:9f:4c:45:8f:dc:a9:6d:aa:e6:cd:48:6d:33:7e:eb:
         6d:fa:cc:37:10:86:77:e1:30:6f:cd:e4:7b:d1:9c:80:7e:24:
         08:a9:48:64:cb:c8:6d:5b:9a:a2:e2:ee:82:d3:63:18:da:cd:
         d0:a1:76:42:99:0f:18:23:6f:a2:37:63:c8:b1:d0:45:d7:4d:
         3c:43:06:84:89:5a:fc:ca:78:f7:32:bf:02:38:61:4e:ff:a5:
         38:d1:09:6e:ee:df:2b:5a:53:e4:9f:6d:3c:98:0f:20:34:97:
         c4:6e:39:8f:20:7d:88:e9:34:a3:36:ec:56:5f:38:96:81:54:
         df:e3:17:b0:a9:30:7d:95:18:b4:8e:07:0a:fe:2c:f0:ba:cf:
         ac:72:7a:dc:19:b3:67:16:8e:2f:d3:3b:5b:d6:5f:00:c6:ac:
         82:a1:95:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org