Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a383030303a3a2f33332d3333203d3e20323633303236.roa
File:                     323830343a6132383a383030303a3a2f33332d3333203d3e20323633303236.roa (raw, json)
Hash identifier:          jNDBVa83wt54jv2R2j8OgpTNHYk3Uc2r2f5JNcIWw/0=
Subject key identifier:   56:11:BC:AF:7F:7F:C1:B9:50:7C:EC:7C:07:04:83:7B:56:E9:49:10
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       1B9896BE5B778745269632686F8A005B38E929A3
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a383030303a3a2f33332d3333203d3e20323633303236.roa
Signing time:             Thu 30 Nov 2023 20:24:00 +0000
ROA not before:           Thu 30 Nov 2023 20:19:00 +0000
ROA not after:            Thu 28 Nov 2024 20:24:00 +0000
asID:                     263026
IP address blocks:        2804:a28:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:98:96:be:5b:77:87:45:26:96:32:68:6f:8a:00:5b:38:e9:29:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Nov 30 20:19:00 2023 GMT
            Not After : Nov 28 20:24:00 2024 GMT
        Subject: CN=5611BCAF7F7FC1B9507CEC7C0704837B56E94910
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:28:f5:62:49:ba:48:64:cc:8d:ce:8b:0b:80:
                    78:80:70:3e:19:b9:a0:b0:f3:c6:93:8c:44:bc:ea:
                    ef:72:0f:cc:d9:39:ce:32:f0:dd:7b:4b:d8:8d:35:
                    d3:d5:65:ba:cc:ea:f7:34:c4:f4:9f:ee:fc:d5:e1:
                    0d:50:8d:7f:8b:5a:63:10:97:da:11:2a:99:6f:67:
                    b1:df:a5:b3:d5:38:71:72:20:2f:f5:ae:d4:d4:eb:
                    04:7b:68:7b:44:85:ed:16:60:37:d8:24:7c:7b:15:
                    e1:d3:95:d0:d2:96:08:5e:61:6b:6a:ab:22:94:92:
                    44:c8:1c:8e:de:41:54:57:08:60:4e:a5:39:e3:fc:
                    f0:3c:ef:be:88:af:52:5f:8c:c2:80:ab:dd:15:76:
                    1b:80:8f:57:5e:7b:a1:2a:d6:6c:07:3e:aa:fa:7e:
                    a8:26:d2:de:8e:26:1d:c8:30:31:31:3e:54:fe:ed:
                    06:b8:fd:81:24:7b:05:e1:eb:64:e8:62:87:9b:0e:
                    48:b1:f2:5c:e0:97:64:1e:74:4d:27:e0:5b:fe:e4:
                    12:8d:0b:47:5b:6e:c7:ae:70:74:3b:3e:07:a3:54:
                    75:2d:83:b0:5c:53:26:3c:ce:5d:83:7c:8b:1c:bb:
                    a0:6b:3d:fb:5c:c2:ec:fb:f8:53:97:ce:aa:fa:40:
                    b9:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                56:11:BC:AF:7F:7F:C1:B9:50:7C:EC:7C:07:04:83:7B:56:E9:49:10
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a383030303a3a2f33332d3333203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         2b:1e:6a:f1:38:f5:fb:bc:71:f5:08:46:c4:db:e0:e9:d7:40:
         70:25:a0:ac:23:a5:8c:88:44:ea:96:fe:6e:75:11:ec:49:aa:
         8c:62:1d:3a:70:f4:fb:73:3d:82:1a:e5:83:cc:13:18:d2:67:
         93:80:7d:6b:be:0c:34:b6:05:6d:22:f7:c8:4a:40:2d:d4:69:
         27:66:ea:71:22:c8:5b:7d:01:1a:f9:22:15:d7:b6:13:a7:d3:
         bc:34:10:4b:8f:f4:fe:e9:cb:69:24:f8:64:b8:77:d8:71:82:
         c3:f0:08:a7:bf:8a:73:22:ed:84:3b:59:10:e3:b4:1c:c7:cf:
         ca:14:0f:48:a8:cb:54:77:45:3b:3e:60:1a:fd:71:df:3e:1f:
         31:4d:c4:cf:96:a5:7b:a2:89:fc:04:4f:ec:e2:87:e9:dd:a3:
         84:cb:90:fb:55:52:61:45:f7:39:d7:92:05:7d:2b:ed:8b:72:
         cd:c4:c3:37:67:04:8d:bc:42:c4:27:28:7d:08:d6:a9:9c:de:
         1a:ed:0a:12:e9:00:38:df:f3:3e:ca:30:13:62:75:6e:67:89:
         dc:2d:51:65:66:f0:f9:e2:06:a4:3e:08:66:f0:88:6f:68:0e:
         e9:dd:99:4f:58:24:40:6f:da:30:08:88:f5:13:3a:f4:7e:a2:
         85:53:54:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org