Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/323830343a353739383a3a2f33332d3333203d3e20323638303734.roa
File:                     323830343a353739383a3a2f33332d3333203d3e20323638303734.roa (raw, json)
Hash identifier:          wYF57/LSZaQZ6uSBPBdNAWowE4j65v6FH/6bq6r+QpM=
Subject key identifier:   2C:00:88:B9:A0:DD:F5:77:58:CB:29:50:AD:FA:20:38:56:BB:62:6B
Certificate issuer:       /CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
Certificate serial:       38CF1037D413E6F4BBB76CD91456DAF605D13A6F
Authority key identifier: 09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/323830343a353739383a3a2f33332d3333203d3e20323638303734.roa
Signing time:             Sat 29 Jul 2023 15:55:30 +0000
ROA not before:           Sat 29 Jul 2023 15:50:30 +0000
ROA not after:            Mon 29 Jul 2024 15:55:30 +0000
asID:                     268074
IP address blocks:        2804:5798::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:cf:10:37:d4:13:e6:f4:bb:b7:6c:d9:14:56:da:f6:05:d1:3a:6f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=09C790C05FE7F95909ADE0C76BBA3670C6717819
        Validity
            Not Before: Jul 29 15:50:30 2023 GMT
            Not After : Jul 29 15:55:30 2024 GMT
        Subject: CN=3082010A0282010100C36C517C488CFEF436251F43F4D8BC5BA1EC5592A061DBF6A73A912FF93F702D9C7A6D803FA32E751D4479D2F2A71C7E75912476FFFCE5C407F2353EFB4E1C5149F1A339B46CE9B2197BFF2E474E3648C58CA8E4443ED64FA63CB180713A75011FBFF9824E08F9A26B89BB0B2E5462674E89F999F9E527055BED2CD2DDF54F1959FC5532C441B8277D88118C8DE7BF0CDF3AE0BDC83D571922CEAB5C76E692D2EDC40569A55C2315066E462E9E0DC9B14D9D861170715551A5DD643EA868C8B780A8D3E0862DE895C62B1CCDD8879A54640222D3EE44FAFCC7B9C0E8EDDE575FBA045207F3598C5D6E6864C9E664CFD8551402CE3379F614EBECCD548D55F3630203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:6c:51:7c:48:8c:fe:f4:36:25:1f:43:f4:d8:
                    bc:5b:a1:ec:55:92:a0:61:db:f6:a7:3a:91:2f:f9:
                    3f:70:2d:9c:7a:6d:80:3f:a3:2e:75:1d:44:79:d2:
                    f2:a7:1c:7e:75:91:24:76:ff:fc:e5:c4:07:f2:35:
                    3e:fb:4e:1c:51:49:f1:a3:39:b4:6c:e9:b2:19:7b:
                    ff:2e:47:4e:36:48:c5:8c:a8:e4:44:3e:d6:4f:a6:
                    3c:b1:80:71:3a:75:01:1f:bf:f9:82:4e:08:f9:a2:
                    6b:89:bb:0b:2e:54:62:67:4e:89:f9:99:f9:e5:27:
                    05:5b:ed:2c:d2:dd:f5:4f:19:59:fc:55:32:c4:41:
                    b8:27:7d:88:11:8c:8d:e7:bf:0c:df:3a:e0:bd:c8:
                    3d:57:19:22:ce:ab:5c:76:e6:92:d2:ed:c4:05:69:
                    a5:5c:23:15:06:6e:46:2e:9e:0d:c9:b1:4d:9d:86:
                    11:70:71:55:51:a5:dd:64:3e:a8:68:c8:b7:80:a8:
                    d3:e0:86:2d:e8:95:c6:2b:1c:cd:d8:87:9a:54:64:
                    02:22:d3:ee:44:fa:fc:c7:b9:c0:e8:ed:de:57:5f:
                    ba:04:52:07:f3:59:8c:5d:6e:68:64:c9:e6:64:cf:
                    d8:55:14:02:ce:33:79:f6:14:eb:ec:cd:54:8d:55:
                    f3:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:00:88:B9:A0:DD:F5:77:58:CB:29:50:AD:FA:20:38:56:BB:62:6B
            X509v3 Authority Key Identifier:
                keyid:09:C7:90:C0:5F:E7:F9:59:09:AD:E0:C7:6B:BA:36:70:C6:71:78:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/09C790C05FE7F95909ADE0C76BBA3670C6717819.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/26fjYUNYEuQyo13Kj7QbwXyMbNQvH4oKdqdG2TJGyJFu/0/323830343a353739383a3a2f33332d3333203d3e20323638303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5798::/33

    Signature Algorithm: sha256WithRSAEncryption
         9a:0d:8a:07:32:84:6a:8d:ca:69:db:58:cf:50:d5:bc:37:88:
         88:dc:19:e5:38:0a:11:19:55:e0:3a:06:ab:28:ff:0e:2e:ae:
         42:32:a9:5d:25:5a:82:61:4d:1a:cd:b7:9d:f4:45:3a:ae:1a:
         34:5f:b0:ef:db:5f:2b:c2:8b:b1:3a:ea:fa:f2:c8:d3:07:a1:
         34:50:cf:4e:ff:2b:d2:a8:62:e0:9f:1f:ee:dd:fa:07:6f:07:
         c1:8c:44:56:07:fb:ef:57:f3:af:ae:82:9c:32:99:24:df:4e:
         56:22:47:23:1a:e5:bb:36:37:ff:9e:ef:d2:6e:07:2b:86:be:
         4a:5d:c8:74:54:34:a8:44:89:01:68:1a:0b:ca:96:04:f9:3c:
         6d:37:0c:e3:2a:bc:f9:ae:2c:fc:76:c8:8b:a7:13:a1:08:dd:
         7f:10:80:ac:fa:fe:a6:a4:ed:b1:47:24:ca:fa:8c:ce:04:26:
         ae:56:f7:64:73:c9:03:ca:43:e5:67:39:60:b9:56:27:ae:7c:
         b0:ee:04:ff:97:f6:9c:06:72:25:d4:64:dd:1a:c3:1b:ed:ed:
         7a:c8:9d:39:88:1a:03:08:1d:75:53:b5:eb:7c:21:b7:2c:4d:
         e6:d8:34:cc:62:57:2f:bf:a4:3d:67:f5:f8:49:85:68:ac:c5:
         a5:ae:f9:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:17 2024 by rpki-client on console-fra.rpki-client.org