Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a633030303a3a2f33342d3334203d3e20323633303236.roa
File:                     323830343a6132383a633030303a3a2f33342d3334203d3e20323633303236.roa (raw, json)
Hash identifier:          bZg2iLHBz1LJXyXTxwq+ifjD0tOgiRsRE3KWvmnAXdo=
Subject key identifier:   AF:61:22:4C:FC:B9:64:76:FB:6E:2B:6A:39:14:F6:7C:C3:EC:00:FB
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       7CA3BC86106A4C68406DF6B72C8100299F51DCFB
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a633030303a3a2f33342d3334203d3e20323633303236.roa
Signing time:             Thu 30 Nov 2023 20:24:27 +0000
ROA not before:           Thu 30 Nov 2023 20:19:27 +0000
ROA not after:            Thu 28 Nov 2024 20:24:27 +0000
asID:                     263026
IP address blocks:        2804:a28:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7c:a3:bc:86:10:6a:4c:68:40:6d:f6:b7:2c:81:00:29:9f:51:dc:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Nov 30 20:19:27 2023 GMT
            Not After : Nov 28 20:24:27 2024 GMT
        Subject: CN=AF61224CFCB96476FB6E2B6A3914F67CC3EC00FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:3b:26:af:4b:8a:03:2a:09:15:c7:f2:9c:d8:
                    33:95:3b:f1:43:b0:a6:bf:e0:54:59:09:51:d1:69:
                    11:78:c0:c0:88:ba:28:20:28:6b:09:c7:34:0d:b5:
                    d8:9b:80:4e:4e:d3:de:09:ec:5d:4a:6d:e7:92:a1:
                    51:dc:97:35:da:05:31:2d:05:25:87:cd:15:de:d6:
                    e8:0b:d9:51:e4:d2:b8:71:17:d5:30:2b:29:98:2c:
                    a5:a5:6f:bb:e3:45:f0:b8:5d:f5:2d:e5:70:6c:82:
                    09:93:c1:d6:a6:83:be:f4:79:30:7e:d7:2e:26:e7:
                    22:84:45:6a:bf:77:29:48:e5:c4:23:6e:80:68:a5:
                    bc:8d:23:3e:b4:7b:af:5d:a3:a0:c8:9a:89:4f:74:
                    e1:3c:9d:0d:f1:8c:e5:89:f5:3b:dc:5f:7f:06:ae:
                    89:83:eb:3f:d1:34:f7:79:90:ef:00:8d:c1:96:2a:
                    23:ec:f2:88:80:d7:ca:8a:7b:e7:40:6b:84:c9:85:
                    06:ab:09:14:c8:a3:2b:99:65:6b:75:95:50:da:d2:
                    f9:04:e1:73:f7:fc:32:63:61:01:12:6a:06:fd:53:
                    97:34:ed:99:2e:e0:8d:bd:12:32:ce:c1:56:1e:24:
                    3d:f4:57:dd:c9:d5:b7:8f:8e:2e:a0:4a:90:03:0c:
                    b6:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:61:22:4C:FC:B9:64:76:FB:6E:2B:6A:39:14:F6:7C:C3:EC:00:FB
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a633030303a3a2f33342d3334203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         1e:b5:85:ac:14:45:28:56:b1:45:88:37:75:2a:13:34:97:07:
         95:b0:69:7d:8e:2d:88:bb:de:af:59:84:c6:8b:6a:c7:b8:57:
         1b:c9:ed:f2:e5:88:90:8f:29:ed:4f:2f:22:42:bb:dd:9b:25:
         df:d0:6b:bf:18:c8:cd:16:26:92:b6:af:45:1a:9d:76:19:5b:
         86:39:dd:bd:30:c7:07:ac:21:7e:69:16:36:1f:64:4c:b4:fc:
         16:f1:57:a7:46:18:34:93:6f:32:3a:d7:3c:a0:b5:b6:db:30:
         c1:a0:a5:c9:05:e3:e3:66:57:a7:5f:c0:30:a2:9b:d6:db:37:
         fe:e4:cd:5f:82:59:7c:e3:69:13:33:1e:a4:d8:8c:45:6c:38:
         fb:f9:fb:e2:87:c8:80:62:53:a8:8e:b2:15:01:68:eb:ef:fc:
         3c:1f:47:07:19:69:ef:32:ac:d8:8b:d1:23:75:b3:89:84:d5:
         43:ec:07:74:a5:12:fe:3c:79:9f:2e:14:6d:ec:86:03:fd:58:
         a5:99:aa:28:ff:53:c6:da:55:9e:4a:41:a2:84:69:36:05:ea:
         a0:1e:08:17:b4:df:97:a6:c2:04:96:0c:8d:9d:a4:84:07:70:
         10:a2:4c:9a:d5:33:b5:3a:e1:b4:15:78:74:72:e7:53:ca:61:
         fb:24:27:ba
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org