Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3332203d3e20323633303236.roa
File:                     323830343a6132383a3a2f33322d3332203d3e20323633303236.roa (raw, json)
Hash identifier:          iKOtWODLZfVw9hqhBWNamrTOgdpiifnuHaS2485ErDg=
Subject key identifier:   A1:97:76:22:C9:2C:23:43:7F:B6:42:A8:E7:74:BB:C4:C4:A0:4D:E1
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       6A6252F28DE8BC6534C0DF17CBE37A3B86A579CF
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3332203d3e20323633303236.roa
Signing time:             Thu 15 Jun 2023 20:03:13 +0000
ROA not before:           Thu 15 Jun 2023 19:58:13 +0000
ROA not after:            Thu 13 Jun 2024 20:03:13 +0000
asID:                     263026
IP address blocks:        2804:a28::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:62:52:f2:8d:e8:bc:65:34:c0:df:17:cb:e3:7a:3b:86:a5:79:cf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Jun 15 19:58:13 2023 GMT
            Not After : Jun 13 20:03:13 2024 GMT
        Subject: CN=A1977622C92C23437FB642A8E774BBC4C4A04DE1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:92:5b:9a:a5:bd:c8:33:f3:f6:6a:0a:24:1d:
                    56:c8:7a:6c:27:3c:a7:f8:ee:77:16:db:3d:1c:d9:
                    2c:24:de:23:6b:40:93:c1:94:28:a7:4b:df:4f:13:
                    8b:a4:48:97:99:78:a2:cf:89:2a:e0:f6:89:bf:65:
                    99:97:59:f1:da:ff:9e:ef:36:f1:8d:ce:61:4a:07:
                    fb:9a:e7:12:bb:8c:1f:34:7b:5a:20:63:c3:d6:c7:
                    6b:3d:a1:1e:06:5b:e1:c3:c7:21:30:ff:d3:1f:23:
                    34:78:f8:68:c6:32:db:34:91:00:9b:e4:f5:ab:4d:
                    37:06:82:3f:af:f6:28:4d:e5:09:4c:87:3f:34:e4:
                    00:75:74:12:c2:9a:e6:da:3b:29:55:9a:b7:29:76:
                    7b:ad:a4:7e:10:10:a6:40:ea:67:91:91:7e:3a:94:
                    0a:d0:27:31:f0:0f:88:22:c3:a6:7e:93:de:34:54:
                    92:b4:2c:da:e3:50:34:e0:73:ab:5c:69:c2:7d:09:
                    74:61:54:8c:f8:2e:f7:7f:bf:8d:f6:34:e2:ff:6f:
                    75:c0:a1:a6:f9:9e:c5:e3:b2:b2:da:18:9c:8a:19:
                    b7:69:dd:b4:27:61:ce:78:f7:ac:13:f5:5a:fa:a0:
                    bc:20:6c:f7:3f:b7:ae:8b:77:ae:8c:c7:b1:7f:dc:
                    ce:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:97:76:22:C9:2C:23:43:7F:B6:42:A8:E7:74:BB:C4:C4:A0:4D:E1
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33322d3332203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28::/32

    Signature Algorithm: sha256WithRSAEncryption
         53:cc:6e:93:28:7e:a9:34:fc:14:c4:09:3e:ba:a2:5e:24:84:
         e2:d2:32:7e:76:0d:ea:30:b0:6e:e5:87:36:c8:56:6f:17:30:
         b5:bd:d3:87:94:e8:c6:e4:c9:ed:3f:ac:26:91:f7:87:64:c2:
         fe:74:71:ea:04:52:b9:e0:45:08:d6:04:09:5a:1f:97:b7:1f:
         9f:b6:8b:ac:f2:44:ab:0b:10:60:00:14:52:98:2a:8c:4e:2d:
         ea:ea:cb:6e:ae:6e:7f:62:36:e9:1a:8a:93:26:71:e5:6d:1e:
         ed:40:e7:9c:f4:57:95:81:c0:ef:ea:0c:85:46:b8:d7:e3:a0:
         83:db:8a:3c:4e:06:95:c1:75:b8:c5:20:89:86:39:0d:c8:13:
         80:04:6d:8e:6f:3a:9e:65:70:27:f1:74:8e:4e:73:e5:47:1c:
         72:49:53:8d:bd:8d:13:23:e1:3d:00:c8:3a:29:eb:e0:9f:e4:
         6f:66:31:b1:2f:4c:60:55:bc:5b:cc:6f:4e:f1:23:b6:95:20:
         b3:1f:88:1b:ca:12:36:e2:6b:0f:76:c1:73:a0:9c:52:d2:21:
         98:6c:2b:95:0d:d7:0c:e7:9e:b0:e5:ef:27:18:b7:53:70:50:
         fb:ce:77:8f:bf:28:53:49:72:23:e4:32:85:73:95:bb:0d:8e:
         6b:63:eb:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org