Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/323830343a316538383a343030303a3a2f33342d3334203d3e20323634343334.roa
File:                     323830343a316538383a343030303a3a2f33342d3334203d3e20323634343334.roa (raw, json)
Hash identifier:          qiL5dil+mwPocKizoR4n9MMpP1wq2z1IQ8j+9ncj3xw=
Subject key identifier:   86:07:9E:EE:C1:CC:86:94:DF:5E:59:7A:E0:5D:6D:23:DE:8A:E9:5E
Certificate issuer:       /CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
Certificate serial:       352CA0752C5DB32DA02DF846DD4F15434D43A851
Authority key identifier: 5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/323830343a316538383a343030303a3a2f33342d3334203d3e20323634343334.roa
Signing time:             Wed 10 May 2023 13:28:21 +0000
ROA not before:           Wed 10 May 2023 13:23:21 +0000
ROA not after:            Wed 08 May 2024 13:28:21 +0000
asID:                     264434
IP address blocks:        2804:1e88:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:2c:a0:75:2c:5d:b3:2d:a0:2d:f8:46:dd:4f:15:43:4d:43:a8:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A3B8374CEF0DA39D870881A0679C05C040E5145
        Validity
            Not Before: May 10 13:23:21 2023 GMT
            Not After : May  8 13:28:21 2024 GMT
        Subject: CN=86079EEEC1CC8694DF5E597AE05D6D23DE8AE95E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:db:5a:f6:bc:09:79:b9:a4:63:79:84:58:cf:
                    53:67:81:6f:b9:ca:da:99:07:03:32:c8:f7:62:1e:
                    ae:64:01:f6:4d:11:6d:b5:d6:d4:60:d2:a1:5e:4d:
                    fd:58:20:d9:bc:e4:bc:fb:4d:3d:57:61:7d:32:6d:
                    d9:af:62:7b:02:c1:1f:cd:43:69:37:4e:65:38:7f:
                    78:45:f9:e5:8b:79:a7:5c:90:d0:c2:37:b0:bc:04:
                    ac:ab:0e:d6:5a:4b:5d:bf:24:30:14:99:63:53:4c:
                    69:d2:9e:be:85:23:c0:64:f2:d3:2a:bc:9f:11:4b:
                    9a:54:0c:41:7c:3d:c2:37:a6:63:85:75:02:cb:1b:
                    08:1d:07:c3:4a:75:b9:8a:74:2f:c1:07:f9:b5:e3:
                    bd:2c:2c:38:e3:34:3e:20:65:75:bc:2a:37:d5:8f:
                    36:92:8e:44:f3:ac:10:a9:db:12:fa:11:ad:37:41:
                    1c:eb:71:b9:95:46:74:df:2d:63:d1:63:8e:a8:27:
                    93:fa:ca:8b:cf:02:64:f7:2a:32:dc:a5:c1:75:90:
                    0c:06:82:5c:28:55:b9:b4:92:7a:05:02:c8:19:c2:
                    9f:d3:46:d9:07:5e:7e:fc:9e:8a:c2:d0:3f:03:5e:
                    d2:90:da:af:01:b5:bb:e8:82:24:52:e7:82:0b:e1:
                    ff:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:07:9E:EE:C1:CC:86:94:DF:5E:59:7A:E0:5D:6D:23:DE:8A:E9:5E
            X509v3 Authority Key Identifier:
                keyid:5A:3B:83:74:CE:F0:DA:39:D8:70:88:1A:06:79:C0:5C:04:0E:51:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A3B8374CEF0DA39D870881A0679C05C040E5145.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FdqBe5cyCX7eqh9b9dRrifyZYu6WqPCrzZw4BLTbCCG/0/323830343a316538383a343030303a3a2f33342d3334203d3e20323634343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e88:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:fe:8d:13:be:83:a5:2c:5b:b4:79:6f:26:2f:69:35:46:3d:
         ee:6e:5d:52:7e:98:75:5f:80:bd:13:d1:25:63:1b:97:fe:cd:
         1d:e3:58:87:95:bf:8e:7f:39:55:34:0e:67:54:5d:7c:e9:ac:
         7e:bb:61:eb:95:4e:ee:ad:72:66:b1:e7:1c:10:3d:e2:80:d9:
         57:d5:0a:81:79:92:3f:ec:60:ee:a8:44:88:cc:07:53:e8:e7:
         eb:72:f1:d1:e4:47:5b:61:f8:0e:82:38:93:8f:d2:18:38:c8:
         4d:23:f7:34:0f:68:dc:d4:9e:c5:43:7c:96:ce:db:64:0d:f0:
         25:5a:85:1a:16:14:0f:3f:3d:aa:ce:59:a8:f0:34:1e:23:88:
         a7:1e:86:35:a5:f7:40:ff:43:9b:4e:1b:f6:29:17:71:27:30:
         23:56:ea:75:b7:18:39:77:60:94:9b:eb:93:eb:03:36:e8:34:
         40:00:b3:a8:23:71:6e:0c:22:7b:d9:63:22:6a:a8:e3:79:0f:
         af:d4:1b:d0:55:51:56:0a:4d:6a:0e:9d:f5:3e:9d:41:c7:b4:
         cc:18:72:f1:dd:8f:d8:94:83:09:e1:dc:e6:37:1d:fa:1f:e1:
         10:c0:f2:2d:bb:83:4c:26:aa:e8:8e:64:10:62:49:32:ff:e0:
         b5:fc:ce:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org