Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/323830343a363666383a3a2f33322d3334203d3e20323639353935.roa
File:                     323830343a363666383a3a2f33322d3334203d3e20323639353935.roa (raw, json)
Hash identifier:          p6vGD2F0GWDoAHKRARkmeX5zKi35cW6Y3VE1IYPfbDs=
Subject key identifier:   FE:7E:EB:B6:E6:22:F0:4F:CA:60:A4:D0:A2:EB:05:A7:83:71:FA:BE
Certificate issuer:       /CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
Certificate serial:       423967AEE1715A520EB1071974A5B7BC7407FCAE
Authority key identifier: 88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/323830343a363666383a3a2f33322d3334203d3e20323639353935.roa
Signing time:             Thu 20 Jul 2023 13:00:00 +0000
ROA not before:           Thu 20 Jul 2023 12:55:00 +0000
ROA not after:            Thu 18 Jul 2024 13:00:00 +0000
asID:                     269595
IP address blocks:        2804:66f8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:39:67:ae:e1:71:5a:52:0e:b1:07:19:74:a5:b7:bc:74:07:fc:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8879D5E3D171B5DE5A8E646093001F09E0D9FD62
        Validity
            Not Before: Jul 20 12:55:00 2023 GMT
            Not After : Jul 18 13:00:00 2024 GMT
        Subject: CN=3082010A0282010100B324411E1C7537EA73CC0E5E55423122661440B5445772150B20E9A7423651BE06B3B5D9C14885362431AA841000EE6DC25874BE01390099DA86E7A3C79B4CA7E017C696E778DF2A6636F4F4770C96B2B52F325092DB9C3EC3108DF409C8ABEC67A7186F5AD4AD40233843858F6112420BBD88DC85BC02C67917B2DF1D132B921D9EC34397DACCA71E50B0904F5C58010D697E6D6074F9BC384E23CFE87E00E3191D7188F04A22618E1DCD8B3B3532F7438FED1F7E7B87E7A5B049BE3B295431E69C3DC8F6C514FD2143F4032C59CB43B9630846E49F9BB44E153292966AA6721E3C45992F4C8D206AC73B2EB92CAC4809566B0442577E2D9574A972384F9E1D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:24:41:1e:1c:75:37:ea:73:cc:0e:5e:55:42:
                    31:22:66:14:40:b5:44:57:72:15:0b:20:e9:a7:42:
                    36:51:be:06:b3:b5:d9:c1:48:85:36:24:31:aa:84:
                    10:00:ee:6d:c2:58:74:be:01:39:00:99:da:86:e7:
                    a3:c7:9b:4c:a7:e0:17:c6:96:e7:78:df:2a:66:36:
                    f4:f4:77:0c:96:b2:b5:2f:32:50:92:db:9c:3e:c3:
                    10:8d:f4:09:c8:ab:ec:67:a7:18:6f:5a:d4:ad:40:
                    23:38:43:85:8f:61:12:42:0b:bd:88:dc:85:bc:02:
                    c6:79:17:b2:df:1d:13:2b:92:1d:9e:c3:43:97:da:
                    cc:a7:1e:50:b0:90:4f:5c:58:01:0d:69:7e:6d:60:
                    74:f9:bc:38:4e:23:cf:e8:7e:00:e3:19:1d:71:88:
                    f0:4a:22:61:8e:1d:cd:8b:3b:35:32:f7:43:8f:ed:
                    1f:7e:7b:87:e7:a5:b0:49:be:3b:29:54:31:e6:9c:
                    3d:c8:f6:c5:14:fd:21:43:f4:03:2c:59:cb:43:b9:
                    63:08:46:e4:9f:9b:b4:4e:15:32:92:96:6a:a6:72:
                    1e:3c:45:99:2f:4c:8d:20:6a:c7:3b:2e:b9:2c:ac:
                    48:09:56:6b:04:42:57:7e:2d:95:74:a9:72:38:4f:
                    9e:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:7E:EB:B6:E6:22:F0:4F:CA:60:A4:D0:A2:EB:05:A7:83:71:FA:BE
            X509v3 Authority Key Identifier:
                keyid:88:79:D5:E3:D1:71:B5:DE:5A:8E:64:60:93:00:1F:09:E0:D9:FD:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8879D5E3D171B5DE5A8E646093001F09E0D9FD62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5GDCirghQvBaJX9rWkK1wRPg5A6Qr97o5BdJbQTmYdP6/0/323830343a363666383a3a2f33322d3334203d3e20323639353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:66f8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:34:e4:67:55:70:f4:64:c4:4a:b8:6e:3c:42:a1:f3:11:7a:
         ce:26:07:59:44:d5:f5:3c:75:df:7c:37:23:77:9d:d1:78:98:
         5e:56:7d:3e:3a:3e:1f:ab:9a:b2:7f:69:27:4c:62:74:09:e0:
         89:2b:ad:3c:07:1a:77:48:70:40:fa:9f:7b:b2:32:98:b7:5a:
         1c:51:34:aa:8f:01:6f:88:9e:08:b3:c7:4e:e8:b1:03:2e:d4:
         3d:e6:ae:33:e8:1c:bc:e0:7d:e5:9b:a9:a1:5b:18:07:ba:f0:
         83:da:fa:ba:58:a4:25:3b:bc:fb:b3:c9:1c:aa:51:31:ec:02:
         5f:04:50:ea:98:2e:7e:4c:99:b5:ff:78:7f:0a:a1:5f:fe:6d:
         51:b7:d0:33:81:ef:f1:0c:0e:37:1b:af:3c:60:00:f7:67:bc:
         d0:f3:f2:8b:8a:31:39:46:c8:cd:c9:e9:cc:03:98:6c:a8:fd:
         88:e2:7b:d3:6a:fd:4f:86:79:fe:f8:0f:45:48:2e:a9:85:2a:
         09:f0:8e:ca:55:a1:a6:69:6f:35:65:6a:3d:be:f3:ed:4b:5f:
         d8:d3:35:be:50:3b:f4:95:12:8f:da:04:8c:08:92:8c:c5:39:
         ce:75:8c:4b:1d:ca:a0:48:b7:f0:2e:d1:9b:2e:95:52:f3:33:
         69:94:9d:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org