Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/323830343a326462343a343030303a3a2f33342d3438203d3e20323635323938.roa
File:                     323830343a326462343a343030303a3a2f33342d3438203d3e20323635323938.roa (raw, json)
Hash identifier:          HXJ8GtiLVeok8t0DRW7pWjUsH82GASYXrwOp8oeXSZc=
Subject key identifier:   01:23:12:C9:D3:53:FB:2A:9A:BE:9C:11:89:1B:B8:58:D0:77:BF:7D
Certificate issuer:       /CN=88A082BE1C98D97C00715C6C1BE2D1424D5957C0
Certificate serial:       091F2B7D61227F704551D2D3138FC0D18BA8CBD4
Authority key identifier: 88:A0:82:BE:1C:98:D9:7C:00:71:5C:6C:1B:E2:D1:42:4D:59:57:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88A082BE1C98D97C00715C6C1BE2D1424D5957C0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/323830343a326462343a343030303a3a2f33342d3438203d3e20323635323938.roa
Signing time:             Fri 17 Nov 2023 18:14:59 +0000
ROA not before:           Fri 17 Nov 2023 18:09:59 +0000
ROA not after:            Fri 15 Nov 2024 18:14:59 +0000
asID:                     265298
IP address blocks:        2804:2db4:4000::/34 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:1f:2b:7d:61:22:7f:70:45:51:d2:d3:13:8f:c0:d1:8b:a8:cb:d4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88A082BE1C98D97C00715C6C1BE2D1424D5957C0
        Validity
            Not Before: Nov 17 18:09:59 2023 GMT
            Not After : Nov 15 18:14:59 2024 GMT
        Subject: CN=012312C9D353FB2A9ABE9C11891BB858D077BF7D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:2a:0a:ef:42:02:80:cb:05:10:b1:11:32:6f:
                    15:f5:eb:b9:f0:7f:2d:87:36:21:ef:d5:73:f5:82:
                    b0:a7:0f:e2:8a:c0:b3:c8:5a:47:21:4d:4e:d5:5c:
                    2a:04:5f:f3:7f:d2:b1:55:0f:f2:5c:de:7d:c6:04:
                    8d:e9:56:a1:45:93:70:3e:7a:d6:82:80:c6:fe:d5:
                    d3:75:ea:18:e9:34:c2:68:6c:9e:84:27:c9:5d:23:
                    07:2d:08:bb:6f:2f:4f:80:ad:4e:b5:85:56:37:2f:
                    11:e3:37:b8:cf:82:f0:3e:8a:12:9f:7a:70:56:b7:
                    45:aa:36:62:11:25:57:45:c6:d3:3a:3b:dd:4e:13:
                    27:10:15:0b:5e:22:78:d1:31:96:91:d5:09:c1:e1:
                    5e:5f:f0:33:ad:60:ae:bf:17:78:99:3f:d3:eb:f0:
                    bf:17:89:52:a7:96:cd:43:c0:c9:f1:1d:b5:14:65:
                    ed:60:fb:1f:e0:9f:6b:f7:99:05:03:37:c2:6d:32:
                    87:c9:41:63:a7:b3:95:f0:6a:8a:8f:8b:d7:19:a0:
                    3d:e0:88:3a:b9:7f:46:fd:61:ef:a9:00:18:f0:dc:
                    2f:23:25:ff:71:f4:ae:59:5e:bd:50:e0:29:6d:92:
                    1c:7b:97:7c:c8:84:9e:66:e6:ce:fd:98:6f:9d:9d:
                    40:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:23:12:C9:D3:53:FB:2A:9A:BE:9C:11:89:1B:B8:58:D0:77:BF:7D
            X509v3 Authority Key Identifier:
                keyid:88:A0:82:BE:1C:98:D9:7C:00:71:5C:6C:1B:E2:D1:42:4D:59:57:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/88A082BE1C98D97C00715C6C1BE2D1424D5957C0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88A082BE1C98D97C00715C6C1BE2D1424D5957C0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/38XQoywVwxp3ZRFypDYwcr3SqcWNwwoZCsbpJiihu28K/0/323830343a326462343a343030303a3a2f33342d3438203d3e20323635323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2db4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         13:af:1d:00:32:b6:a6:66:89:93:41:97:5d:e4:e0:21:ff:7c:
         c0:af:7b:47:c2:7f:75:a1:87:0d:9c:96:c5:61:23:ce:d7:6a:
         89:82:8d:ed:3d:f8:23:17:af:3c:f0:48:e2:03:3c:d7:6c:d0:
         99:ef:f8:a1:05:38:56:e2:85:44:b7:27:59:5a:a7:10:36:f6:
         93:7d:3a:d3:e8:2d:51:cf:a0:96:8a:bd:ed:cb:30:1f:81:c8:
         9a:95:dc:d9:6f:81:10:77:bd:42:b5:92:59:69:b5:a3:d9:cd:
         5c:ea:b1:95:ee:6a:8d:3e:3f:48:b8:f6:ba:44:f1:10:e9:82:
         33:a1:7f:53:eb:81:2c:3f:ff:bd:72:ec:dc:7c:2e:ed:36:df:
         ab:3d:54:3c:b6:f9:23:30:88:64:94:c7:9e:11:a2:65:cd:b5:
         72:a2:df:46:ff:54:ef:f1:d5:3d:87:b2:14:d7:f4:56:0c:b9:
         66:5e:e0:4e:7c:b9:25:5c:00:c4:04:b1:90:c9:03:31:a6:e1:
         fd:b4:ed:4c:d6:c8:91:f4:bf:a7:4e:41:07:fe:10:27:b0:7a:
         34:9a:94:fb:41:53:e4:80:b3:ba:44:3b:aa:49:0f:0f:d6:cf:
         b3:17:da:5e:ff:14:c1:99:2d:8b:8b:a4:13:7d:63:ab:85:44:
         9c:4d:e7:35
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:19 2024 by rpki-client on console-ams.rpki-client.org