Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/323830343a363666383a3a2f33322d3332203d3e20323639353935.roa
File:                     323830343a363666383a3a2f33322d3332203d3e20323639353935.roa (raw, json)
Hash identifier:          bcTT1wc9NqmqLYHbltkDKVBWI8PouCC3YrXoLaH8tpw=
Subject key identifier:   32:77:6F:ED:CF:DA:50:9F:5A:06:E1:D1:5C:6C:5B:6B:36:77:6D:29
Certificate issuer:       /CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
Certificate serial:       3E9FFEF0DF6F94B31DB3521741D8DBE889E5DB51
Authority key identifier: 88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/323830343a363666383a3a2f33322d3332203d3e20323639353935.roa
Signing time:             Tue 15 Aug 2023 21:52:53 +0000
ROA not before:           Tue 15 Aug 2023 21:47:53 +0000
ROA not after:            Tue 13 Aug 2024 21:52:53 +0000
asID:                     269595
IP address blocks:        2804:66f8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:9f:fe:f0:df:6f:94:b3:1d:b3:52:17:41:d8:db:e8:89:e5:db:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
        Validity
            Not Before: Aug 15 21:47:53 2023 GMT
            Not After : Aug 13 21:52:53 2024 GMT
        Subject: CN=3082010A0282010100F0E77D011FC190936D0527D9B6EF6E118FAC481B577C4815B381880ECD8B90C6BB86565B99FAA7F2394270BD5DEAEE47186E87F98EBD862FF9E104E7BF428D17F252490FDEB1969D2A89741AAAF9EA93ABBA389B8962042F6158C32F269BCDB94D1DADD0E68183F8AD03B08D7B230952AAF9E0256D273A8D130C0AFA4D526FD9FDA6EC51C24EE4644313E1E56D08D6538DB2EE675336ECC30670062EFBBD519197371B1A5152186F1DA3BBEB761D1B31C6DD90798647982AAD9126FC7192D606082818579B18555DF333006EDE84D442D31B5A3ED0D85A50EF8D46A961353B7B3BB9C464486ED7CFA8E26808FDD101DC5BE582803A18455606F41D90460AEF050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:e7:7d:01:1f:c1:90:93:6d:05:27:d9:b6:ef:
                    6e:11:8f:ac:48:1b:57:7c:48:15:b3:81:88:0e:cd:
                    8b:90:c6:bb:86:56:5b:99:fa:a7:f2:39:42:70:bd:
                    5d:ea:ee:47:18:6e:87:f9:8e:bd:86:2f:f9:e1:04:
                    e7:bf:42:8d:17:f2:52:49:0f:de:b1:96:9d:2a:89:
                    74:1a:aa:f9:ea:93:ab:ba:38:9b:89:62:04:2f:61:
                    58:c3:2f:26:9b:cd:b9:4d:1d:ad:d0:e6:81:83:f8:
                    ad:03:b0:8d:7b:23:09:52:aa:f9:e0:25:6d:27:3a:
                    8d:13:0c:0a:fa:4d:52:6f:d9:fd:a6:ec:51:c2:4e:
                    e4:64:43:13:e1:e5:6d:08:d6:53:8d:b2:ee:67:53:
                    36:ec:c3:06:70:06:2e:fb:bd:51:91:97:37:1b:1a:
                    51:52:18:6f:1d:a3:bb:eb:76:1d:1b:31:c6:dd:90:
                    79:86:47:98:2a:ad:91:26:fc:71:92:d6:06:08:28:
                    18:57:9b:18:55:5d:f3:33:00:6e:de:84:d4:42:d3:
                    1b:5a:3e:d0:d8:5a:50:ef:8d:46:a9:61:35:3b:7b:
                    3b:b9:c4:64:48:6e:d7:cf:a8:e2:68:08:fd:d1:01:
                    dc:5b:e5:82:80:3a:18:45:56:06:f4:1d:90:46:0a:
                    ef:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:77:6F:ED:CF:DA:50:9F:5A:06:E1:D1:5C:6C:5B:6B:36:77:6D:29
            X509v3 Authority Key Identifier:
                keyid:88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/323830343a363666383a3a2f33322d3332203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:49:2c:62:11:3c:5d:c4:77:94:57:9c:fb:7f:89:ad:e6:f3:
         12:ed:a1:c0:36:32:e4:d1:bc:c0:2e:27:a6:bc:55:7f:29:64:
         18:56:60:6a:5e:44:14:76:5f:53:b6:b1:25:9e:ad:d4:57:a6:
         6b:84:7d:3f:eb:02:78:0e:78:e4:f7:68:00:fd:1e:18:dc:17:
         9f:c6:af:19:71:8d:0d:74:f8:a4:8e:11:84:69:3f:d3:ef:dc:
         41:5c:59:bc:c2:b8:c1:6c:48:2f:2b:b3:eb:25:dd:bf:9c:91:
         e6:6b:db:b9:36:e3:e7:52:9a:ac:1f:13:80:e6:74:81:70:aa:
         45:66:74:a0:97:63:22:76:c9:71:ff:65:56:85:98:8e:6d:26:
         b6:8b:65:50:6f:c9:85:f8:bb:80:22:94:77:f1:3b:58:14:d6:
         97:27:61:bf:17:6b:fd:c5:b7:9d:47:b1:56:27:7f:8d:ec:ad:
         84:12:31:26:ce:93:c8:95:d6:8c:72:fa:aa:10:b3:b1:b1:b6:
         b3:b4:62:90:b3:17:a9:4b:40:5a:51:91:bd:1c:33:90:45:90:
         a2:87:f5:f2:a9:30:eb:5e:2b:48:36:58:c4:2b:d5:0f:21:23:
         a6:1c:83:fa:eb:13:a7:e5:ec:8d:56:6b:e2:17:fb:99:f3:da:
         09:4d:83:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org