Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/323830343a376632383a3a2f33322d3333203d3e20323731363730.roa
File:                     323830343a376632383a3a2f33322d3333203d3e20323731363730.roa (raw, json)
Hash identifier:          4lqFIh+iJ0VBWTu/3swnXQSA+BYnM2tT6mecpZSt2EU=
Subject key identifier:   C5:FC:9C:95:83:13:A4:52:B2:4F:8D:60:F7:AE:F0:BB:A6:CE:24:FB
Certificate issuer:       /CN=86F4DAF212D079B19A8A220EB4B28BC4191DAAAC
Certificate serial:       2161CED1C3570856ED2E33028BA56461C48A6703
Authority key identifier: 86:F4:DA:F2:12:D0:79:B1:9A:8A:22:0E:B4:B2:8B:C4:19:1D:AA:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/323830343a376632383a3a2f33322d3333203d3e20323731363730.roa
Signing time:             Tue 10 Oct 2023 17:54:10 +0000
ROA not before:           Tue 10 Oct 2023 17:49:10 +0000
ROA not after:            Tue 08 Oct 2024 17:54:10 +0000
asID:                     271670
IP address blocks:        2804:7f28::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:61:ce:d1:c3:57:08:56:ed:2e:33:02:8b:a5:64:61:c4:8a:67:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86F4DAF212D079B19A8A220EB4B28BC4191DAAAC
        Validity
            Not Before: Oct 10 17:49:10 2023 GMT
            Not After : Oct  8 17:54:10 2024 GMT
        Subject: CN=C5FC9C958313A452B24F8D60F7AEF0BBA6CE24FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:86:0a:bd:d9:e6:2f:a8:01:ee:ef:82:ed:c2:
                    be:c9:6f:3e:a3:f0:3d:b2:1d:33:d2:a2:62:07:1e:
                    c5:e3:4a:93:71:fb:2a:5b:02:42:1a:0a:fe:91:ee:
                    9a:3f:dc:f3:ce:f3:91:8e:73:87:cf:14:5f:26:df:
                    d7:91:02:62:9f:a6:f2:f2:97:5f:35:52:43:8a:48:
                    25:c9:c6:33:5c:a2:db:11:d4:99:d3:7e:f8:a2:98:
                    16:d9:b6:3b:06:02:4b:83:21:87:c6:62:da:77:fa:
                    b4:27:2b:b6:10:3a:8b:1b:18:cb:77:25:18:d3:66:
                    45:09:5d:86:70:9b:22:ca:4a:cc:58:28:1f:97:bd:
                    69:d6:43:21:6b:74:af:9c:b0:bb:c3:7e:f0:28:15:
                    d6:fd:1b:46:8c:e1:d9:02:47:e5:3e:4b:19:86:4c:
                    16:9a:17:c6:17:78:cb:75:43:75:74:15:f1:c3:0a:
                    5f:39:49:9d:f2:df:55:c2:b1:38:fe:87:6a:77:64:
                    a4:42:b9:76:9d:a0:a3:e2:45:36:f7:17:da:f2:7a:
                    41:a2:f5:60:4b:d6:4d:20:34:0b:bd:93:a9:bc:cc:
                    1a:bf:bb:6d:0f:2f:e6:d2:56:cf:3e:8d:b9:11:6d:
                    dc:0c:93:26:af:a5:6d:7d:19:6f:d3:a0:39:22:85:
                    7a:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C5:FC:9C:95:83:13:A4:52:B2:4F:8D:60:F7:AE:F0:BB:A6:CE:24:FB
            X509v3 Authority Key Identifier:
                keyid:86:F4:DA:F2:12:D0:79:B1:9A:8A:22:0E:B4:B2:8B:C4:19:1D:AA:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86F4DAF212D079B19A8A220EB4B28BC4191DAAAC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3WNaUqtbJSv86ueJcrvG5J9Lxzxds3wjZ8xEG8CENrzh/0/323830343a376632383a3a2f33322d3333203d3e20323731363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7f28::/32

    Signature Algorithm: sha256WithRSAEncryption
         00:c0:bb:e6:47:0e:3e:7d:ec:f6:be:86:93:a1:d0:82:d6:3e:
         6a:c3:24:16:d6:d2:1f:a3:d9:b6:1c:aa:d9:4d:79:8c:48:09:
         12:96:cd:f6:a8:24:97:83:2f:4d:e9:5c:81:f3:cf:86:0b:09:
         09:41:2b:47:76:e1:c3:a4:64:29:04:2b:0e:3a:49:8c:a6:0a:
         c5:d4:a5:4e:63:35:34:15:55:0c:c6:29:b5:d0:18:a7:86:1d:
         b7:4b:32:19:6e:f7:7e:eb:77:49:3a:32:cd:a4:af:00:7b:6c:
         be:6a:08:b1:b3:fa:ab:78:a1:a2:6a:25:45:f6:ed:18:0f:d6:
         af:c3:e5:93:50:ff:b3:54:81:08:4c:5f:68:0a:ed:52:f3:b0:
         43:1f:00:51:19:e2:79:32:99:31:98:49:1d:f0:8e:d0:44:14:
         cf:ae:c5:74:ae:13:aa:1c:e9:1a:fb:40:31:c3:81:5e:5b:9d:
         c0:6b:6a:02:8b:ae:89:70:12:24:6e:ef:a6:0c:ec:4e:28:7d:
         d2:e5:52:55:f1:e7:71:56:37:c0:68:4a:e8:89:39:b4:27:3b:
         08:45:89:6d:3f:a6:bd:81:3d:52:12:c2:f8:ed:29:02:05:36:
         db:23:62:ac:4e:95:66:ad:68:68:bb:c8:b4:db:5b:70:21:7f:
         44:63:19:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:24 2024 by rpki-client on console-ams.rpki-client.org