Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/0/323830343a383863343a3a2f34382d3438203d3e20323732373932.roa
File:                     323830343a383863343a3a2f34382d3438203d3e20323732373932.roa (raw, json)
Hash identifier:          dLcNDi+u8vZ2kdiG1ZujA5kI44Ab3+zUR2nx5smxw2w=
Subject key identifier:   CC:9A:24:E2:0E:0C:1B:F8:C1:DB:D3:AA:F2:6B:5B:DB:FC:20:4E:45
Certificate issuer:       /CN=939B51FB589E6066A78E9724A2F8D81B339948CB
Certificate serial:       0A47571E51751BD5C91806FB2DEF8D22AE636960
Authority key identifier: 93:9B:51:FB:58:9E:60:66:A7:8E:97:24:A2:F8:D8:1B:33:99:48:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/939B51FB589E6066A78E9724A2F8D81B339948CB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/0/323830343a383863343a3a2f34382d3438203d3e20323732373932.roa
Signing time:             Tue 14 Nov 2023 19:31:51 +0000
ROA not before:           Tue 14 Nov 2023 19:26:51 +0000
ROA not after:            Tue 12 Nov 2024 19:31:51 +0000
asID:                     272792
IP address blocks:        2804:88c4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0a:47:57:1e:51:75:1b:d5:c9:18:06:fb:2d:ef:8d:22:ae:63:69:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=939B51FB589E6066A78E9724A2F8D81B339948CB
        Validity
            Not Before: Nov 14 19:26:51 2023 GMT
            Not After : Nov 12 19:31:51 2024 GMT
        Subject: CN=CC9A24E20E0C1BF8C1DBD3AAF26B5BDBFC204E45
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:26:30:3e:66:df:4b:b5:53:00:46:0a:7a:3a:
                    b9:ff:c6:84:4e:cd:b2:15:5d:bd:9b:b3:89:bc:34:
                    e1:c2:c2:af:22:41:f5:d8:38:30:a1:16:53:ad:5c:
                    28:21:07:7b:63:18:93:71:13:30:29:07:6a:74:b7:
                    0c:44:62:6f:89:f9:72:50:c6:fa:ff:56:c3:87:a2:
                    99:1e:ee:ed:52:9f:5f:f3:72:c2:7c:50:c9:fb:e2:
                    82:dd:ba:11:ad:5d:39:df:30:65:32:50:99:18:13:
                    60:f2:1f:45:54:b4:a4:23:19:e6:96:1f:0e:8a:59:
                    dc:f2:e7:b0:f0:f7:ca:e1:f7:65:4d:f3:7d:16:1f:
                    ca:3e:2f:10:cd:18:a9:5b:ad:07:6f:7b:46:bf:bd:
                    eb:37:9b:cb:2d:24:b6:0d:d9:57:59:09:ac:56:c9:
                    83:9f:5c:c1:b5:32:32:f6:1f:df:8e:f2:55:e0:0e:
                    8f:84:f7:5e:62:cd:2e:01:b4:56:8b:3d:a3:17:8d:
                    29:e2:00:93:2d:0d:e4:b4:03:b1:8c:2d:b9:61:7f:
                    1c:eb:69:3f:18:55:cd:89:1e:9e:3c:01:45:89:7a:
                    50:21:18:89:51:62:b3:7b:ff:fa:2c:5a:0d:c2:4e:
                    d5:59:ca:a0:f6:b4:5c:c9:61:73:03:c4:7d:e3:d9:
                    da:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CC:9A:24:E2:0E:0C:1B:F8:C1:DB:D3:AA:F2:6B:5B:DB:FC:20:4E:45
            X509v3 Authority Key Identifier:
                keyid:93:9B:51:FB:58:9E:60:66:A7:8E:97:24:A2:F8:D8:1B:33:99:48:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/0/939B51FB589E6066A78E9724A2F8D81B339948CB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/939B51FB589E6066A78E9724A2F8D81B339948CB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5Vms8TWfXbGRvQkBPdButKDmo4MfQrt8M5BMS6Jwhpfo/0/323830343a383863343a3a2f34382d3438203d3e20323732373932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:88c4::/48

    Signature Algorithm: sha256WithRSAEncryption
         7c:77:bc:67:fd:f0:6c:fc:8e:b1:a4:b0:e9:f7:32:c2:67:8a:
         44:55:af:a1:96:5c:32:df:b3:ef:3f:34:d4:d7:a4:86:4e:27:
         8e:d4:39:fb:1b:01:61:1c:aa:ab:c7:56:98:a8:58:4e:96:28:
         48:29:6c:6c:ec:50:9e:03:50:a0:a1:81:30:f5:ea:52:5b:93:
         98:bf:eb:83:31:33:4b:0e:ba:9d:f0:d5:05:1f:4b:d0:89:f1:
         88:8d:3d:b1:56:30:df:e9:8a:c8:0a:50:48:98:85:58:4a:50:
         e6:aa:d0:6b:5c:41:91:f4:be:5c:dc:bc:2d:f1:6e:8f:31:f2:
         9f:9c:37:89:70:62:f6:5a:44:c0:de:7d:78:bc:38:21:0e:e7:
         97:fe:6e:b2:41:11:2e:fc:fd:83:95:eb:3f:67:dd:c0:39:11:
         8a:50:3f:97:cd:e2:90:9b:d4:9e:c7:f4:1d:47:04:62:dd:c1:
         16:eb:ab:7c:ea:b4:8e:46:32:0d:84:5a:f3:f5:90:a2:f9:1d:
         38:3f:75:f6:31:88:11:99:0d:eb:e6:63:c7:1b:46:8f:f8:3b:
         60:e7:13:b4:67:60:b3:98:83:46:ef:44:43:4e:96:2a:0c:41:
         89:7c:1c:17:88:43:44:25:43:3f:9d:a1:6e:18:97:c2:73:68:
         b1:8d:a7:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:55 2024 by rpki-client on console-ams.rpki-client.org