Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f34382d3438203d3e20323633303236.roa
File:                     323830343a6132383a3a2f34382d3438203d3e20323633303236.roa (raw, json)
Hash identifier:          JTUHNj7PTZGw0oNut5+lTBUTlgivJX5qwIpL4lryw+M=
Subject key identifier:   D8:41:1D:69:B0:AF:F0:20:42:E0:C4:23:C7:B6:17:68:18:C3:2B:6D
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       3075D5C01B6B82E7DA27CE85D72102D0DFC7E545
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f34382d3438203d3e20323633303236.roa
Signing time:             Tue 22 Aug 2023 16:26:18 +0000
ROA not before:           Tue 22 Aug 2023 16:21:18 +0000
ROA not after:            Tue 20 Aug 2024 16:26:18 +0000
asID:                     263026
IP address blocks:        2804:a28::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:75:d5:c0:1b:6b:82:e7:da:27:ce:85:d7:21:02:d0:df:c7:e5:45
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Aug 22 16:21:18 2023 GMT
            Not After : Aug 20 16:26:18 2024 GMT
        Subject: CN=D8411D69B0AFF02042E0C423C7B6176818C32B6D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:c2:72:41:9f:51:4a:a8:e9:69:08:07:ae:0f:
                    e7:d6:16:2b:a3:32:1e:ae:c4:28:61:95:0c:7d:c8:
                    ed:02:b8:f1:73:a2:51:43:e4:0d:56:c4:e9:3e:99:
                    25:9f:8f:f3:a2:3e:4d:c5:52:05:62:4c:98:12:4f:
                    7c:84:d9:c7:9d:a7:2f:d1:d9:88:79:c8:d5:f4:e7:
                    02:57:3a:c7:b8:4b:8e:b1:78:d0:69:49:fa:7f:12:
                    49:0f:30:47:5e:f6:f5:3f:3d:6f:5e:7d:2b:f2:9f:
                    2b:9b:4f:89:25:48:94:8f:4f:c6:5a:24:fd:3e:fb:
                    92:d7:96:22:9f:58:87:a1:06:b4:03:78:52:61:cd:
                    80:58:44:40:9c:01:8c:19:cb:92:83:7f:94:31:69:
                    17:b5:bd:ae:fc:0b:7c:23:eb:0d:92:ef:50:19:31:
                    54:98:7f:73:cf:c2:f1:b1:a4:11:01:2c:f0:03:88:
                    da:44:d4:00:82:33:b3:f2:67:b1:04:c6:4b:a4:35:
                    1a:e0:3d:89:5d:57:be:8a:32:c1:c7:53:2d:e9:b6:
                    fc:94:c8:de:6a:19:2b:45:79:39:6c:61:7b:05:01:
                    e0:83:48:22:6b:e5:20:6f:3a:bc:38:53:ba:ff:1e:
                    fd:9b:89:87:54:84:c1:11:30:cc:1d:6e:f7:b1:33:
                    40:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:41:1D:69:B0:AF:F0:20:42:E0:C4:23:C7:B6:17:68:18:C3:2B:6D
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a3a2f34382d3438203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28::/48

    Signature Algorithm: sha256WithRSAEncryption
         9c:4f:27:14:b6:03:62:c5:86:d8:05:f4:51:5b:82:a6:17:d7:
         6a:d7:b3:cd:f5:4c:94:f3:36:b6:53:fe:7f:fe:53:e3:96:64:
         a6:7c:c6:20:3d:6a:b0:9c:c1:63:fa:8b:64:10:d0:e3:f5:ad:
         0f:60:15:13:3d:b9:d5:32:eb:98:8a:c1:c7:6a:e2:eb:a3:88:
         b9:99:b3:b6:9a:fe:e6:9c:40:7a:4b:70:fb:28:e5:f7:f2:ef:
         b6:0a:07:c8:03:b0:77:10:5a:5f:ca:be:73:c0:51:9b:44:84:
         03:a7:b4:8a:1b:99:cc:f6:eb:d7:0d:ff:92:2c:41:c4:73:07:
         bf:5c:b9:46:5f:6b:75:31:51:af:fb:54:e8:df:e6:5f:b2:46:
         82:d4:ad:a7:4f:b3:b5:03:74:65:3e:d9:b5:41:49:76:83:62:
         71:c0:6b:57:d7:1d:95:e5:c6:06:42:61:c7:76:61:ff:60:63:
         d1:2a:bf:b8:bb:b8:f0:78:a8:e4:ac:13:6f:1d:91:82:9f:40:
         2a:5b:b6:a8:e5:ed:b1:6d:d0:1f:07:9d:c4:53:ac:85:6b:b2:
         8e:6e:34:f6:e9:1c:8b:9a:3e:ca:97:19:8d:b1:ae:ef:ac:90:
         38:9e:1c:be:ec:44:85:45:36:a1:66:83:cb:11:89:3b:1c:e8:
         79:93:2b:67
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:41 2024 by rpki-client on console-fra.rpki-client.org