Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3830303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a3830303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          1J/PPhOc5+EFlqnSh3WkZiZrhNPlGhGy6uQCIDwQ7TA=
Subject key identifier:   6F:68:6E:F2:F6:3C:F8:31:D4:F5:6F:23:A7:1C:C9:BD:23:AF:D4:7F
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       263F43FD4EC1572CD2A6B51F876FC86BF542F173
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3830303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 05 Sep 2023 12:00:00 +0000
ROA not before:           Tue 05 Sep 2023 11:55:00 +0000
ROA not after:            Tue 03 Sep 2024 12:00:00 +0000
asID:                     262687
IP address blocks:        2804:385c:800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:3f:43:fd:4e:c1:57:2c:d2:a6:b5:1f:87:6f:c8:6b:f5:42:f1:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Sep  5 11:55:00 2023 GMT
            Not After : Sep  3 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:bd:9f:02:38:be:c0:81:3c:f4:06:a4:2c:2c:
                    9e:9d:12:ea:a9:c4:09:79:00:5e:f6:ac:b1:83:29:
                    18:f8:f6:02:bf:59:12:06:20:e7:59:12:2a:51:20:
                    cf:f7:5e:62:ac:02:73:cd:3d:04:dc:6f:1e:b6:26:
                    69:a5:d9:92:ca:80:09:a5:e7:1f:38:d0:1e:43:d8:
                    5a:8e:3a:41:2a:b5:cf:62:c6:f3:cc:68:86:1c:db:
                    58:6f:33:b8:9d:9b:71:f7:c0:1d:2b:e6:9b:a3:e5:
                    29:3d:99:cc:ef:cc:ea:61:97:6e:5c:e1:29:db:e0:
                    90:34:6f:49:c9:b7:94:15:fd:0d:a6:4b:47:d6:52:
                    63:d9:4a:80:47:a0:5c:34:b9:9a:c4:df:83:1d:35:
                    92:10:05:f5:d0:9c:f2:30:be:c8:05:9f:99:bd:d6:
                    7a:84:4e:85:84:66:65:80:ae:5d:61:bc:5d:3e:7e:
                    6c:28:26:51:1e:5a:53:af:88:ac:6d:05:5f:19:3f:
                    c8:c9:76:0b:33:30:70:a7:dd:6a:18:65:23:ca:82:
                    e7:e5:56:e1:51:51:67:2e:5d:c1:23:a2:8c:23:89:
                    66:25:ca:d1:0b:b7:a3:2e:06:61:d3:dd:4c:eb:8a:
                    25:cb:5c:66:5b:c0:91:cf:a8:73:db:b8:58:16:29:
                    2e:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:68:6E:F2:F6:3C:F8:31:D4:F5:6F:23:A7:1C:C9:BD:23:AF:D4:7F
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a3830303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         43:cf:18:2d:3c:ef:c8:ca:b3:23:b1:b3:a1:72:b6:48:77:d0:
         a3:db:fb:b9:5e:9b:80:bb:6c:98:cb:b4:02:54:ba:cd:37:77:
         00:49:03:30:16:95:46:5a:10:55:d9:32:db:32:f8:dd:b5:6b:
         46:93:82:11:47:47:ad:84:2b:90:64:7c:53:bd:79:5e:e2:e1:
         34:97:52:a2:ff:9b:56:f4:66:94:57:1e:e9:46:3d:28:7b:9e:
         4e:80:dc:c4:70:55:b6:14:e6:98:ed:2b:cd:81:4e:42:2e:28:
         1f:9a:9a:de:14:c2:12:d0:c1:91:09:a8:a2:29:8a:59:a6:e6:
         32:1b:71:ba:d7:79:9a:cc:45:3c:be:f4:9e:0d:23:5f:e9:72:
         02:51:86:51:3e:97:4d:4c:32:ca:50:6b:69:b2:c8:bc:77:9c:
         39:eb:72:cd:13:31:e6:b3:21:2c:cd:3e:10:15:b1:30:4a:6e:
         b6:e4:0b:75:1b:78:9d:1c:b0:81:bc:f9:f3:0f:60:56:30:d4:
         f1:b8:a9:68:30:14:cd:f4:8d:a7:d3:e6:98:12:26:b5:25:4f:
         4a:c3:1d:3f:ef:53:c0:c2:c3:ef:a8:93:4f:45:46:3c:68:97:
         94:33:8b:4c:27:a2:1e:f6:6f:24:8a:07:a8:ea:6c:e3:64:92:
         c7:eb:1f:af
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org