Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33332d3333203d3e20323633303236.roa
File:                     323830343a6132383a3a2f33332d3333203d3e20323633303236.roa (raw, json)
Hash identifier:          IQ72wSMJ0erqX6Vbl5hXb9tas6y98yeoBY4lD9dMjWo=
Subject key identifier:   3E:3D:6B:EA:26:ED:11:76:01:1B:A8:DB:B5:75:57:D2:38:8C:5E:3B
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       32BBCB3568E6728663C6BC82D44AED4C3D378FC5
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33332d3333203d3e20323633303236.roa
Signing time:             Thu 30 Nov 2023 20:23:09 +0000
ROA not before:           Thu 30 Nov 2023 20:18:09 +0000
ROA not after:            Thu 28 Nov 2024 20:23:09 +0000
asID:                     263026
IP address blocks:        2804:a28::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:bb:cb:35:68:e6:72:86:63:c6:bc:82:d4:4a:ed:4c:3d:37:8f:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Nov 30 20:18:09 2023 GMT
            Not After : Nov 28 20:23:09 2024 GMT
        Subject: CN=3E3D6BEA26ED1176011BA8DBB57557D2388C5E3B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:86:42:5c:a0:05:c1:cb:f6:87:7c:cd:9a:32:
                    c3:4a:c1:da:84:44:e2:8c:74:eb:33:27:b1:e8:95:
                    35:6d:0f:89:a1:7d:6f:db:7d:bb:5d:46:d1:90:3c:
                    9d:3c:92:31:20:ce:09:92:90:34:d1:7b:e8:de:96:
                    32:61:67:54:2f:c5:64:79:96:ba:22:62:ed:85:ec:
                    6d:e9:f3:3b:fc:fe:8d:e2:36:30:ae:d8:fb:1c:3e:
                    a6:48:8e:70:73:a8:4b:0b:b3:70:1c:1e:a7:56:04:
                    69:b1:d3:e2:ab:40:5b:73:66:91:74:b4:85:2d:a2:
                    a3:ce:df:e8:c1:4c:22:2c:c9:10:43:f0:65:30:fc:
                    dc:1e:d7:ee:69:a0:4a:1a:e9:3f:bd:e3:17:f7:ed:
                    ac:87:2f:92:5e:a4:10:27:22:2b:6e:c8:d3:2c:11:
                    3b:c5:34:87:e9:63:d4:e4:6d:8c:29:40:91:16:18:
                    1f:e2:c2:35:00:94:dd:26:53:28:93:6e:ab:f4:c3:
                    84:18:73:b2:59:4d:4d:4d:3c:06:5a:cb:d1:60:4d:
                    f0:20:0d:63:e5:be:94:6e:d3:d3:b4:2d:f7:7e:fe:
                    9e:9d:37:2f:0b:5d:8a:51:f1:b8:3b:74:60:bf:ef:
                    13:37:14:d1:21:fa:0b:19:eb:f4:2c:84:4f:96:44:
                    5a:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:3D:6B:EA:26:ED:11:76:01:1B:A8:DB:B5:75:57:D2:38:8C:5E:3B
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f33332d3333203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28::/33

    Signature Algorithm: sha256WithRSAEncryption
         4b:c0:6c:94:60:67:64:9f:30:a2:33:61:49:d4:6d:20:3e:1f:
         da:4d:35:0d:a2:6e:7c:62:94:b7:50:f3:44:68:d8:df:2b:de:
         71:1b:b4:b3:d2:b5:96:fd:f9:65:d1:40:32:b5:b6:35:1b:ce:
         5b:b6:82:a3:3c:14:89:37:7d:03:d6:25:5d:76:49:15:63:18:
         af:a6:41:ba:b0:07:55:3f:81:a1:a1:a1:e0:4c:45:f2:27:21:
         9a:b7:1d:4f:91:f8:17:f0:9f:72:65:0d:55:06:9b:b3:a3:43:
         78:96:ab:04:56:f7:84:68:20:55:07:fc:8b:ad:46:79:80:bf:
         68:03:d4:4c:5e:62:0a:98:4a:5c:7d:34:8c:89:5f:e4:29:7f:
         ab:e2:e9:ae:f2:a2:4a:02:f9:aa:ec:d4:c2:c4:48:f6:a8:46:
         c0:23:b7:f0:a1:86:00:3c:5c:c2:db:d0:4f:8b:2e:8b:85:39:
         73:81:30:c5:a7:12:5a:49:64:7e:8d:cf:8f:6c:13:f8:41:1b:
         c0:3f:c3:70:2f:10:4f:a8:64:12:1f:ee:6b:12:44:dc:fa:c4:
         22:9a:e3:66:49:36:09:47:91:14:48:95:05:d6:1d:a3:6a:f7:
         02:dd:b1:96:d5:48:e6:08:2c:9f:39:8b:48:0a:f1:b7:50:e5:
         84:67:e7:ad
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org