Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a333a3a2f34382d3438203d3e20323633303236.roa
File:                     323830343a6132383a333a3a2f34382d3438203d3e20323633303236.roa (raw, json)
Hash identifier:          zyUAN5fAgrdFSatzmRnyYa34uHsx+mXG/rv1/Th8Ifo=
Subject key identifier:   C7:FC:B7:42:BA:93:81:7A:8A:06:54:8E:BA:52:14:6D:78:D6:12:63
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       1AE930782D694161E11995FD8778A85387FEF016
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a333a3a2f34382d3438203d3e20323633303236.roa
Signing time:             Tue 22 Aug 2023 16:26:54 +0000
ROA not before:           Tue 22 Aug 2023 16:21:54 +0000
ROA not after:            Tue 20 Aug 2024 16:26:54 +0000
asID:                     263026
IP address blocks:        2804:a28:3::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:e9:30:78:2d:69:41:61:e1:19:95:fd:87:78:a8:53:87:fe:f0:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Aug 22 16:21:54 2023 GMT
            Not After : Aug 20 16:26:54 2024 GMT
        Subject: CN=C7FCB742BA93817A8A06548EBA52146D78D61263
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:5b:66:d4:16:7b:64:89:9c:27:01:87:47:fb:
                    a7:7c:ac:c7:b4:1d:bf:c4:25:95:ba:be:ea:f1:42:
                    a1:b8:0f:be:c5:c1:e6:2c:86:8c:ea:20:84:f6:94:
                    dc:3c:8d:1f:5c:2e:66:70:fc:41:37:70:c2:02:59:
                    19:48:54:7f:81:12:d4:3f:55:e9:7a:4f:44:e2:c3:
                    0d:47:6f:ee:c6:b5:40:7a:49:45:b7:bd:cd:22:74:
                    cb:d0:9c:e4:c5:c9:39:22:0f:5e:8d:c7:82:38:17:
                    25:70:28:69:b5:e0:4e:b3:fe:bb:92:74:c3:dd:9b:
                    1e:db:11:0e:db:fb:87:14:58:75:0a:a7:23:96:15:
                    1b:a7:e2:31:9e:98:49:6b:f9:23:05:67:27:27:aa:
                    13:1d:23:86:34:13:48:9e:f9:18:e1:54:00:0b:d9:
                    05:bf:dd:39:56:35:4a:d8:da:46:d3:46:c2:17:5e:
                    4e:8d:73:37:fb:39:0c:4e:09:33:91:54:2d:e1:7f:
                    cb:e1:fd:d9:92:3a:8d:62:4d:48:89:20:fc:8b:e8:
                    e0:71:4a:b5:5a:8d:d6:b2:b7:73:45:37:7d:2d:05:
                    94:42:5a:ce:34:f0:f8:b8:67:6d:5a:96:a3:27:14:
                    99:3b:1f:b3:e7:bb:70:9b:d6:78:ef:2c:43:a2:8f:
                    6d:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:FC:B7:42:BA:93:81:7A:8A:06:54:8E:BA:52:14:6D:78:D6:12:63
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a333a3a2f34382d3438203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:3::/48

    Signature Algorithm: sha256WithRSAEncryption
         1e:8e:c8:15:a6:c1:c1:c4:ff:23:98:26:09:20:13:0c:19:d4:
         2f:ca:3f:d3:86:8c:e6:81:e3:31:e5:74:b4:06:e7:08:e4:63:
         e9:9e:24:7e:c6:99:44:e4:eb:90:84:e6:b1:2f:58:9e:7e:44:
         2e:91:30:e5:50:98:ee:32:c3:66:ed:d1:0e:96:74:d0:2b:ae:
         c2:1f:7c:17:dd:a1:5f:ff:fd:e9:e6:ab:66:eb:7a:85:2b:ab:
         09:a1:2c:9c:be:4a:f6:12:12:c9:1a:3a:9e:9b:c8:23:6c:61:
         97:fd:0f:64:f8:42:e8:c9:ac:00:c4:8d:37:77:99:2a:75:7a:
         f7:31:98:2b:4c:1b:8f:b7:86:24:a5:f2:95:7e:89:82:d0:cd:
         3a:3f:92:dd:17:cf:75:1a:1d:a3:f1:27:89:82:9b:ad:1f:8b:
         c8:49:c2:bc:ab:a5:e6:b2:4c:e0:fa:72:5a:10:b7:dc:33:b5:
         ff:f7:67:04:b1:9c:ad:41:be:b9:53:ee:e8:24:2a:76:20:6b:
         15:c9:95:2b:d7:32:5a:51:e2:26:c1:b5:59:b8:d9:16:94:3c:
         c9:27:5c:e4:ba:4a:7d:bd:87:b2:85:ce:e6:20:d0:da:da:22:
         a8:a3:82:38:41:13:05:52:6c:d7:0e:63:44:db:a0:e9:d2:1a:
         1b:35:69:32
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org