Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a633030303a3a2f33352d3335203d3e20323633303236.roa
File:                     323830343a6132383a633030303a3a2f33352d3335203d3e20323633303236.roa (raw, json)
Hash identifier:          nzNs598V7d8v023cNNIMGCqjRLWcROuCYgeGhijHUbU=
Subject key identifier:   FB:DB:1C:EF:CB:C9:05:9E:67:6D:45:42:17:29:DD:75:B5:77:76:70
Certificate issuer:       /CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
Certificate serial:       02D9E03DBFB7E5FD8FD1771BC0AE2161192F1D13
Authority key identifier: 8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a633030303a3a2f33352d3335203d3e20323633303236.roa
Signing time:             Thu 30 Nov 2023 20:24:42 +0000
ROA not before:           Thu 30 Nov 2023 20:19:42 +0000
ROA not after:            Thu 28 Nov 2024 20:24:42 +0000
asID:                     263026
IP address blocks:        2804:a28:c000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:d9:e0:3d:bf:b7:e5:fd:8f:d1:77:1b:c0:ae:21:61:19:2f:1d:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F12E790E13BA21E692AD473569F1B90B3A9D017
        Validity
            Not Before: Nov 30 20:19:42 2023 GMT
            Not After : Nov 28 20:24:42 2024 GMT
        Subject: CN=FBDB1CEFCBC9059E676D45421729DD75B5777670
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:00:98:56:25:c8:2a:c1:7c:48:b4:12:df:09:
                    73:ef:45:85:0c:a6:62:71:1b:f7:3d:ab:45:76:ea:
                    0f:2a:85:b8:78:b9:43:dc:c5:69:d7:23:4b:6d:0c:
                    94:57:34:86:ad:33:13:f2:e2:39:7e:82:f8:a0:0f:
                    fd:dc:23:e7:d5:b1:d5:dd:4a:e1:41:fb:e3:66:b0:
                    dd:e7:9c:60:41:16:95:69:33:b7:6f:f3:37:8d:94:
                    f7:52:cb:b4:f1:5d:c6:2f:52:93:7f:cd:d4:df:2b:
                    2f:8d:02:11:02:24:d2:e8:01:01:7d:32:41:40:b5:
                    8a:b2:d8:cb:97:8d:fd:9b:5c:93:98:06:92:80:26:
                    34:73:85:ac:e3:e7:c0:aa:4a:77:98:6e:01:da:bb:
                    f9:18:a1:2a:cf:cc:3f:45:ca:33:af:8c:19:a0:01:
                    f1:20:82:04:5e:60:50:36:57:94:b9:84:bf:96:df:
                    3a:d2:4f:45:08:d4:26:99:55:25:ab:f8:ca:eb:d5:
                    6d:fa:79:93:fa:b5:8c:8c:64:ac:dd:c3:e6:c0:d1:
                    03:59:ff:f5:4d:81:b6:da:37:a5:4f:ef:a2:26:d2:
                    be:39:90:f1:54:0d:3b:3d:7a:2e:6d:04:f7:61:ad:
                    56:6e:34:69:eb:26:bf:e2:3e:22:00:4c:ef:5d:3a:
                    03:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FB:DB:1C:EF:CB:C9:05:9E:67:6D:45:42:17:29:DD:75:B5:77:76:70
            X509v3 Authority Key Identifier:
                keyid:8F:12:E7:90:E1:3B:A2:1E:69:2A:D4:73:56:9F:1B:90:B3:A9:D0:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F12E790E13BA21E692AD473569F1B90B3A9D017.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/xXpsAgvp69tKmp3P5BE9YdiduAz2dBN8EWan1tVACbc/0/323830343a6132383a633030303a3a2f33352d3335203d3e20323633303236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a28:c000::/35

    Signature Algorithm: sha256WithRSAEncryption
         71:b3:4d:25:90:ca:34:93:d8:a3:75:45:03:78:2f:a6:15:d0:
         92:b1:3a:6a:84:09:58:6b:2e:f6:07:19:19:ce:52:ef:4d:1b:
         96:54:34:60:df:e3:ee:d0:e4:53:74:49:03:c1:39:5a:8f:2f:
         d1:f0:bf:c1:87:a3:e1:4e:4e:af:3b:84:2a:ce:c3:8c:ad:63:
         bc:b8:52:c6:a4:10:b7:e5:68:0a:79:91:f7:ad:b0:cf:dd:eb:
         0b:e5:2f:7c:a2:9b:28:c7:79:d1:f5:ed:fa:d1:f6:6f:be:6a:
         10:3d:d9:9f:62:94:6e:13:d7:a2:1c:b3:8b:83:43:69:65:ca:
         27:c5:6a:ae:e1:f1:03:2a:c3:73:c5:82:62:84:b2:68:17:a4:
         58:43:53:79:c4:74:d4:8b:e2:6b:68:92:44:e5:49:3c:11:78:
         8a:ab:80:08:b5:ab:51:99:fe:29:e2:3d:87:10:9c:f7:11:1c:
         3c:4b:96:cc:1e:db:eb:b2:e2:95:c6:31:f5:96:2f:2d:44:09:
         02:8f:6e:86:ea:85:64:80:40:9b:4d:99:b8:4b:fc:a5:ac:b8:
         32:8a:d2:21:a9:69:35:a9:83:5c:92:3c:01:2f:ab:83:8b:b0:
         84:95:6c:5f:35:c1:54:4f:b2:df:ce:82:cc:c9:b6:e9:f0:02:
         9a:8e:50:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:31 2024 by rpki-client on console-ams.rpki-client.org