Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/323830343a353839383a3a2f33322d3335203d3e20323638313338.roa
File:                     323830343a353839383a3a2f33322d3335203d3e20323638313338.roa (raw, json)
Hash identifier:          bxZaCPDQG7DvTjm8LJwhwpWOYar/qZyzUZ+CdZF5w7M=
Subject key identifier:   8F:B4:79:A0:57:82:86:82:20:14:6B:5F:4B:B1:D0:39:73:50:ED:83
Certificate issuer:       /CN=DBA87B52C08D64387CF846B996B53360B65F2B90
Certificate serial:       07DC6CC18F14167EE521240D21083A962A5ACA7B
Authority key identifier: DB:A8:7B:52:C0:8D:64:38:7C:F8:46:B9:96:B5:33:60:B6:5F:2B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBA87B52C08D64387CF846B996B53360B65F2B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/323830343a353839383a3a2f33322d3335203d3e20323638313338.roa
Signing time:             Tue 05 Dec 2023 16:44:41 +0000
ROA not before:           Tue 05 Dec 2023 16:39:41 +0000
ROA not after:            Tue 03 Dec 2024 16:44:41 +0000
asID:                     268138
IP address blocks:        2804:5898::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:dc:6c:c1:8f:14:16:7e:e5:21:24:0d:21:08:3a:96:2a:5a:ca:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DBA87B52C08D64387CF846B996B53360B65F2B90
        Validity
            Not Before: Dec  5 16:39:41 2023 GMT
            Not After : Dec  3 16:44:41 2024 GMT
        Subject: CN=8FB479A05782868220146B5F4BB1D0397350ED83
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:cc:bf:ab:7a:52:0a:18:30:26:16:d8:2a:c5:
                    dd:6b:87:53:f2:76:6f:2b:7b:43:6d:10:a7:3d:db:
                    f8:42:31:09:4c:e8:fd:a5:79:ab:96:a0:09:12:65:
                    06:2a:7d:42:3c:0e:f7:77:96:05:99:e3:e1:c6:a4:
                    80:41:b5:0d:88:fc:a1:85:77:1d:d6:00:02:f4:17:
                    e9:ae:cc:70:6c:96:b5:79:7a:74:57:19:ce:bd:44:
                    c9:8c:a6:05:bc:c3:e2:d1:46:c7:f9:cb:a1:52:d1:
                    c3:11:ab:e0:ac:d5:d8:45:59:21:85:e3:fa:d2:8b:
                    36:ae:14:6d:03:22:74:60:06:82:28:7a:64:cc:a5:
                    ef:d7:e3:b6:2b:d3:26:3a:98:91:77:de:f9:a5:1c:
                    b1:9a:10:33:56:e7:a6:96:d5:61:e0:48:c8:fd:93:
                    8d:a0:25:37:d4:60:5f:3a:81:6a:97:0a:ff:a7:44:
                    20:8d:96:48:f8:76:b8:4b:80:a9:5c:59:7e:8f:d0:
                    25:b8:21:ac:c0:49:7c:7b:f9:35:2c:83:41:29:94:
                    06:86:4a:ea:07:00:9f:f5:9d:92:ef:e7:df:08:77:
                    9d:94:ec:84:81:38:5e:ab:c5:d2:2d:1c:1e:81:3e:
                    89:6a:ef:9a:b3:c7:6c:24:07:ce:54:23:9a:af:ac:
                    9d:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8F:B4:79:A0:57:82:86:82:20:14:6B:5F:4B:B1:D0:39:73:50:ED:83
            X509v3 Authority Key Identifier:
                keyid:DB:A8:7B:52:C0:8D:64:38:7C:F8:46:B9:96:B5:33:60:B6:5F:2B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/DBA87B52C08D64387CF846B996B53360B65F2B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DBA87B52C08D64387CF846B996B53360B65F2B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2vZ2bGuL4sD26qDzEEHWShbn1kphBy3aR95fZXA3j2hS/0/323830343a353839383a3a2f33322d3335203d3e20323638313338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5898::/32

    Signature Algorithm: sha256WithRSAEncryption
         99:2e:51:c1:9a:99:fb:88:ba:fa:f2:48:d8:39:9d:4c:1d:aa:
         c7:eb:02:13:b9:0a:7d:2d:83:d5:94:42:4a:72:37:a8:e5:70:
         e1:8f:e0:d6:f0:87:83:0c:f5:36:f5:80:a7:2f:c7:e6:b5:0f:
         c2:46:a6:58:c1:ae:09:75:89:3a:db:c0:ab:8b:f5:2a:90:d1:
         51:dd:cc:cf:c5:92:9a:62:2d:eb:53:47:7c:e2:5e:4f:e4:9a:
         14:7e:8e:2d:f1:bf:ea:02:74:81:fe:ef:bf:9c:60:7a:10:76:
         d8:a9:ef:2f:d1:9f:78:af:87:82:12:7e:90:9a:0a:34:84:d3:
         a4:38:26:4c:51:ad:b5:4d:78:3e:8d:95:bb:d6:48:b7:11:c5:
         e6:31:65:49:d5:0b:92:a5:f9:a3:68:2a:70:0e:b3:69:c2:cd:
         8d:dd:93:70:ba:2e:8e:55:09:59:fd:a1:b6:2d:a6:b0:b8:b2:
         4b:b0:ad:e9:58:7a:90:48:be:ab:37:be:f5:f7:db:67:b4:39:
         c5:b5:6f:eb:bd:18:e5:5d:06:b3:01:d5:f7:ce:29:53:4b:72:
         29:0e:dc:3f:b7:e2:37:28:e6:7b:b7:9f:5f:a6:a1:e3:cd:d0:
         10:aa:ac:2b:17:ae:a1:2d:44:b6:b9:9a:d6:03:45:3d:b4:e1:
         66:b2:97:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org