Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a343030303a3a2f33342d3334203d3e20323633303236.roa
File:                     323830343a6132383a343030303a3a2f33342d3334203d3e20323633303236.roa (raw, json)
Hash identifier:          XuxncSCaov5gCKT5IF2s4V69RjtwjugddYA18mI5DsU=
Subject key identifier:   DA:85:18:1D:A4:92:18:05:40:F8:D3:13:95:1D:61:59:15:C4:E1:4B
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       67306E56E23B3747B6EF51CB00D205CB3E617E31
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a343030303a3a2f33342d3334203d3e20323633303236.roa
Signing time:             Thu 30 Nov 2023 20:23:42 +0000
ROA not before:           Thu 30 Nov 2023 20:18:42 +0000
ROA not after:            Thu 28 Nov 2024 20:23:42 +0000
asID:                     263026
IP address blocks:        2804:a28:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:30:6e:56:e2:3b:37:47:b6:ef:51:cb:00:d2:05:cb:3e:61:7e:31
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Nov 30 20:18:42 2023 GMT
            Not After : Nov 28 20:23:42 2024 GMT
        Subject: CN=DA85181DA492180540F8D313951D615915C4E14B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:e9:23:25:2e:e3:43:bc:17:8d:42:9e:6a:4f:
                    a4:4d:36:6f:2d:3d:14:ca:84:a4:04:bd:ef:5e:4d:
                    e0:ac:7e:b8:0b:4e:d0:12:8f:23:08:22:90:4b:65:
                    c7:ca:3f:e2:45:e4:5c:65:a4:7d:c0:32:11:19:9d:
                    21:4e:51:f3:67:20:1d:b5:74:4c:4c:15:de:f4:30:
                    83:a6:01:1f:a4:d3:4e:56:dc:0a:8f:b7:79:4f:90:
                    c2:a9:78:25:ce:45:70:08:83:77:d7:32:c1:ae:ea:
                    51:28:a2:0c:8e:c0:ea:6d:40:25:a0:1b:4e:e4:d9:
                    76:78:a4:0b:6c:ca:be:e8:36:8e:fe:3a:9a:ce:0f:
                    d0:37:33:f0:71:4a:9b:21:3e:f5:e8:9c:be:20:b0:
                    cf:f9:f6:9c:53:19:00:63:09:36:d5:77:8b:cc:50:
                    71:a4:e1:64:b9:70:fe:54:50:2e:e9:24:df:b0:e1:
                    df:d1:09:4f:14:df:ba:ad:55:a2:b4:de:f2:c7:4b:
                    bb:64:98:2e:dd:2d:e2:f9:7d:c8:14:a5:56:44:b2:
                    59:fa:71:a7:35:c5:99:b4:ec:aa:62:c9:0a:c0:31:
                    b6:62:97:86:9c:31:c1:af:17:de:20:38:69:f0:a2:
                    a6:09:bc:3e:ed:1d:a4:ec:57:46:62:1d:c4:25:bd:
                    89:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:85:18:1D:A4:92:18:05:40:F8:D3:13:95:1D:61:59:15:C4:E1:4B
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a343030303a3a2f33342d3334203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         e1:c0:33:ad:60:69:68:ec:b4:15:ab:94:08:a8:5f:cc:6b:3b:
         59:5e:1d:6e:a4:2f:4c:ef:b3:c1:34:aa:7c:22:f0:03:3e:6b:
         fa:87:ed:0d:1e:55:5a:98:10:b4:27:f8:1f:2c:81:10:57:a3:
         8f:2a:a5:e5:86:3c:23:ca:ba:12:22:09:12:26:cb:a8:43:8b:
         d9:97:48:ec:1c:ed:97:8d:40:a4:4a:54:d5:7e:59:81:b6:36:
         93:f4:3b:d1:40:9c:7d:35:60:3e:31:30:cd:d9:54:a2:cc:80:
         68:2c:90:bd:9d:17:1c:74:a2:f2:42:f0:e9:35:82:d2:e3:2c:
         04:82:2d:de:b8:eb:6f:69:56:7e:b9:09:ba:82:0f:e3:96:93:
         14:94:cb:b5:0b:a7:ee:8f:9f:bd:d1:c6:dc:71:8c:bf:9e:6d:
         f2:f0:f0:bb:45:fc:7c:0c:a5:a1:0a:53:9c:0e:8c:99:20:96:
         29:4b:ae:43:d9:7a:c5:dd:62:63:56:4c:a9:50:c2:20:4f:e2:
         f2:14:1c:77:df:d2:a2:bd:7d:b0:2b:22:c3:2c:b9:2b:40:3f:
         1a:0d:5b:57:9b:96:90:eb:4f:78:07:cb:18:9b:45:60:f8:19:
         e2:ab:79:61:f5:9f:3f:54:a8:d6:6f:29:8f:36:44:e3:bc:8b:
         a0:46:cb:8e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:30 2024 by rpki-client on console-ams.rpki-client.org