Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a383030303a3a2f33342d3334203d3e20323633303236.roa
File:                     323830343a6132383a383030303a3a2f33342d3334203d3e20323633303236.roa (raw, json)
Hash identifier:          wwNrkeE6tuPBXxquQjQKB1Ya1t+y9MFicKq2ipBUb54=
Subject key identifier:   16:27:40:96:A5:41:4C:E7:B1:89:06:79:B4:22:61:B4:DA:57:E6:A5
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       0654CED52C9D20793AA55BCCD52E370E9A4D7C87
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a383030303a3a2f33342d3334203d3e20323633303236.roa
Signing time:             Thu 30 Nov 2023 20:24:07 +0000
ROA not before:           Thu 30 Nov 2023 20:19:07 +0000
ROA not after:            Thu 28 Nov 2024 20:24:07 +0000
asID:                     263026
IP address blocks:        2804:a28:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:54:ce:d5:2c:9d:20:79:3a:a5:5b:cc:d5:2e:37:0e:9a:4d:7c:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Nov 30 20:19:07 2023 GMT
            Not After : Nov 28 20:24:07 2024 GMT
        Subject: CN=16274096A5414CE7B1890679B42261B4DA57E6A5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:42:b9:d2:12:37:ba:d7:f0:99:8f:96:75:1c:
                    32:21:30:43:20:45:b2:64:e7:ae:1c:68:1d:62:18:
                    d8:ea:d2:4f:55:fd:a5:56:0a:cf:15:09:12:e0:0e:
                    56:25:ba:9a:c4:25:75:9f:1e:3d:78:3b:18:e7:59:
                    97:d5:5d:0c:6b:c2:e4:16:fc:d5:8d:98:ae:fe:42:
                    10:1a:1d:7e:d0:dc:99:d7:4a:73:c9:61:c4:7c:bd:
                    82:ed:13:68:13:41:19:32:80:a2:2a:19:c5:30:03:
                    18:dd:f2:9d:2e:a1:7d:80:33:a6:a4:51:d4:1d:bc:
                    0e:f0:25:a4:b1:07:3a:77:af:70:83:a4:e5:87:31:
                    6c:0a:cd:86:47:f0:d8:18:7a:6b:f8:95:3a:b1:7d:
                    d6:76:67:c6:aa:fa:16:a1:20:65:a5:1b:4e:65:c5:
                    bd:fb:33:cd:c1:2e:be:1d:59:2c:10:e5:ff:07:ca:
                    4a:dd:6d:cd:a7:8a:0d:ef:18:65:fb:7b:c5:b5:02:
                    ce:47:77:ff:3e:c5:29:08:5f:4f:a2:b7:4e:18:bc:
                    97:38:c4:20:ad:d5:da:9d:bb:e1:95:7a:4c:59:c4:
                    07:96:84:71:89:69:14:ae:e0:6a:e6:c9:1d:de:dc:
                    01:48:fc:08:f8:71:47:cb:20:11:e1:18:13:66:78:
                    58:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                16:27:40:96:A5:41:4C:E7:B1:89:06:79:B4:22:61:B4:DA:57:E6:A5
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a383030303a3a2f33342d3334203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         60:a5:00:67:10:cc:94:1b:47:da:0f:eb:24:d5:69:de:b2:fa:
         49:e4:cf:fa:76:c3:e9:b9:45:dd:dc:84:df:25:25:24:71:30:
         6d:8c:90:43:be:ee:2a:29:ea:56:f3:21:10:31:05:97:03:f3:
         6a:65:ab:e6:27:61:9a:8c:bc:38:59:d2:0a:0b:91:1e:00:ee:
         cc:64:ec:5b:03:95:50:be:5d:c6:50:f3:c2:28:3f:6f:50:34:
         f7:3e:7b:35:71:4e:38:da:9b:55:e0:67:bd:5d:a6:76:71:59:
         8b:36:ba:b0:3b:6e:12:d4:78:07:23:2b:6d:66:25:4c:48:b3:
         ab:c0:82:8a:da:35:96:dc:88:ab:a8:c2:fe:e7:d7:c3:0a:44:
         12:c9:bb:6d:45:27:13:73:97:7d:21:db:79:77:66:92:35:40:
         bd:8d:16:f5:c5:29:ef:0d:49:be:eb:47:ef:b1:ee:73:b2:ea:
         87:b3:42:27:2c:68:05:28:e9:fc:e3:8d:a6:73:3a:a1:fd:da:
         75:78:8a:3f:8e:87:0b:8f:3a:fb:49:c2:f1:53:35:4f:2c:21:
         38:11:6e:3a:89:22:7d:d5:ef:4d:2e:70:db:81:18:91:88:d1:
         cf:c5:d5:22:ef:d4:fe:5b:e3:59:53:1c:03:2e:a6:57:ef:a0:
         ad:ff:b0:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org