Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/323830343a346664383a3a2f33322d3332203d3e20323638333533.roa
File:                     323830343a346664383a3a2f33322d3332203d3e20323638333533.roa (raw, json)
Hash identifier:          kjlYY1ZAO4HfUlhF3K2JH0jvLxhFtb+RxOKLu/Hz0eE=
Subject key identifier:   BE:C0:D5:7B:9E:EB:9A:40:D0:07:95:19:CC:0A:33:76:7D:BF:97:36
Certificate issuer:       /CN=95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D
Certificate serial:       45C009D9E593F4B864AA4B425B34760E3408D455
Authority key identifier: 95:BD:1D:7A:4D:8F:79:CB:1C:18:D3:50:3C:43:DB:80:0C:85:1B:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/323830343a346664383a3a2f33322d3332203d3e20323638333533.roa
Signing time:             Tue 21 Nov 2023 21:14:18 +0000
ROA not before:           Tue 21 Nov 2023 21:09:18 +0000
ROA not after:            Tue 19 Nov 2024 21:14:18 +0000
asID:                     268353
IP address blocks:        2804:4fd8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:c0:09:d9:e5:93:f4:b8:64:aa:4b:42:5b:34:76:0e:34:08:d4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D
        Validity
            Not Before: Nov 21 21:09:18 2023 GMT
            Not After : Nov 19 21:14:18 2024 GMT
        Subject: CN=BEC0D57B9EEB9A40D0079519CC0A33767DBF9736
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:07:d1:31:7a:84:bd:34:23:4a:68:78:b0:2d:
                    03:4f:8f:08:f9:3f:6e:29:3e:11:02:4d:4c:86:34:
                    be:e3:04:ec:1a:2c:9b:5a:a2:b1:4f:da:ae:15:8f:
                    e4:d2:5d:e7:45:5f:79:c1:01:98:88:34:a3:76:fb:
                    3e:78:6a:3a:e1:69:e7:a6:a4:f5:f7:b8:42:2a:59:
                    6a:c7:c3:b4:0d:c8:0a:ab:e4:b7:02:29:4d:57:15:
                    11:63:b6:1e:e4:01:13:ee:c0:66:61:94:cc:77:a0:
                    d1:b4:38:96:ef:95:da:a9:50:46:c9:fe:4a:29:a7:
                    49:95:25:3e:2d:1f:fe:3f:d9:84:83:b1:c6:b1:28:
                    c7:7b:53:f3:1a:ec:0c:6c:e1:16:99:e1:8f:cf:d2:
                    f3:21:1f:0d:b4:f4:dc:2b:2a:5b:a1:ca:04:ce:d1:
                    e3:66:ee:65:21:26:81:c8:e5:25:90:1f:bb:33:9f:
                    4a:6b:98:3b:b0:82:68:18:80:7d:f5:ed:61:06:6b:
                    f1:f9:63:64:e2:82:59:78:31:e9:30:27:bd:b4:19:
                    1b:2a:d9:37:a4:66:ca:dd:24:2b:30:e6:a0:53:e8:
                    e8:c7:19:65:50:68:9e:dc:68:5d:47:7e:88:4e:2b:
                    3c:a5:25:e5:af:e3:67:38:39:00:03:9e:ad:c8:c0:
                    3d:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:C0:D5:7B:9E:EB:9A:40:D0:07:95:19:CC:0A:33:76:7D:BF:97:36
            X509v3 Authority Key Identifier:
                keyid:95:BD:1D:7A:4D:8F:79:CB:1C:18:D3:50:3C:43:DB:80:0C:85:1B:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95BD1D7A4D8F79CB1C18D3503C43DB800C851B1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5gwFr1qg3vRDHhpAm4f275fgUoUanYQZixZowj7NfKhh/0/323830343a346664383a3a2f33322d3332203d3e20323638333533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fd8::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:7e:94:3f:68:95:f8:38:5d:70:ef:67:43:f9:3e:f3:33:19:
         43:c9:bf:59:a4:f9:c0:aa:d9:f6:db:56:7a:df:35:ed:fa:21:
         5c:fe:60:49:d2:78:4c:22:53:3c:c5:7b:f7:ef:fa:5f:62:af:
         21:86:78:36:94:10:23:a0:50:96:a7:00:31:27:24:f6:7e:f3:
         f3:24:44:94:c4:40:10:35:b3:a2:0e:48:b6:9e:f2:54:fc:09:
         06:20:c7:ce:8a:60:5c:d8:48:d2:73:b5:42:55:73:72:a5:20:
         64:d3:0a:8a:cd:47:1e:b8:8d:5e:f7:b0:d2:65:e0:c2:b1:f3:
         86:b4:ae:86:f5:c0:89:dc:23:a3:ad:e9:67:96:b7:08:77:0d:
         5a:01:ed:a2:15:28:66:dd:4a:50:96:d0:2b:5c:0e:0b:07:9c:
         a4:b8:59:4e:2c:b4:41:6d:0a:f7:19:1d:74:01:f5:cc:c1:c5:
         96:cb:59:f8:a2:95:f1:e2:2f:9b:4d:3b:25:3e:fe:50:5b:38:
         14:dd:45:80:21:bb:88:58:67:9f:83:8f:f0:e6:c2:8d:c8:49:
         fb:df:fb:58:b9:26:3d:83:7f:85:b7:43:44:15:2f:3c:80:8a:
         1e:b3:39:83:87:3c:e6:f8:97:a1:c2:4e:28:95:25:d6:67:0b:
         06:cf:69:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org