Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa
File:                     323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa (raw, json)
Hash identifier:          zgIDIwc0Gl+Nw92wNBDMh1Z7y+eha99tprYUdg+CFEg=
Subject key identifier:   62:7D:4C:A3:10:EA:81:CF:62:33:46:B7:BF:0B:FC:58:75:10:98:8A
Certificate issuer:       /CN=08C2A112D7B46BB31844B293BA30E7FCC2E551B6
Certificate serial:       72560A6D9CDA04FB5F344248937DE872B6FDD2F4
Authority key identifier: 08:C2:A1:12:D7:B4:6B:B3:18:44:B2:93:BA:30:E7:FC:C2:E5:51:B6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2A112D7B46BB31844B293BA30E7FCC2E551B6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa
Signing time:             Sat 02 Mar 2024 16:03:55 +0000
ROA not before:           Sat 02 Mar 2024 15:58:55 +0000
ROA not after:            Sat 01 Mar 2025 16:03:55 +0000
asID:                     264192
IP address blocks:        2804:23f0:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:56:0a:6d:9c:da:04:fb:5f:34:42:48:93:7d:e8:72:b6:fd:d2:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08C2A112D7B46BB31844B293BA30E7FCC2E551B6
        Validity
            Not Before: Mar  2 15:58:55 2024 GMT
            Not After : Mar  1 16:03:55 2025 GMT
        Subject: CN=627D4CA310EA81CF623346B7BF0BFC587510988A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:9b:91:5a:a4:c9:88:f8:d9:b4:51:05:f6:bf:
                    2a:e1:0e:77:13:33:01:b1:18:af:8f:3f:75:a2:bc:
                    45:99:d4:c8:e1:0d:8d:61:cc:36:17:b5:b7:d5:71:
                    f0:46:36:f7:f3:ce:61:9a:9b:72:f0:a2:8b:1d:87:
                    60:3b:6d:cb:54:28:96:1c:71:95:5f:99:76:4f:62:
                    71:14:d5:34:81:99:04:72:3d:59:31:7f:b4:19:b8:
                    d1:d5:1f:68:48:d3:2f:99:ad:d4:b8:cd:76:02:59:
                    b6:59:da:13:bd:8c:0b:24:2d:f8:28:10:5a:09:38:
                    c3:fe:31:e2:ad:6a:64:d6:b4:2b:b4:55:aa:e1:73:
                    08:9f:c1:ae:0e:37:0a:05:7c:31:3f:d3:8f:65:2f:
                    1b:11:ca:53:c7:44:a7:66:78:aa:62:8d:31:b0:2c:
                    33:58:86:0c:4f:f9:c2:c6:56:96:cd:1c:fa:a2:22:
                    71:6a:3c:58:02:a1:da:e2:ba:c2:47:94:ff:d5:60:
                    9d:49:8a:f8:10:99:93:e3:33:eb:02:ce:de:c9:6d:
                    07:fc:83:3d:50:f8:a8:c8:ce:c3:44:97:e8:3a:36:
                    9b:2b:c8:5b:f8:82:46:cc:17:b9:0b:83:01:5d:b9:
                    75:ee:32:61:07:66:cb:cc:d2:fc:ef:02:e9:d1:61:
                    dc:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:7D:4C:A3:10:EA:81:CF:62:33:46:B7:BF:0B:FC:58:75:10:98:8A
            X509v3 Authority Key Identifier:
                keyid:08:C2:A1:12:D7:B4:6B:B3:18:44:B2:93:BA:30:E7:FC:C2:E5:51:B6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/08C2A112D7B46BB31844B293BA30E7FCC2E551B6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08C2A112D7B46BB31844B293BA30E7FCC2E551B6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/0/323830343a323366303a3130303a3a2f34302d3430203d3e20323634313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23f0:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:9a:be:2b:24:b3:95:74:6b:06:de:f4:1e:94:d8:fb:91:e8:
         ba:10:17:51:e9:22:5b:5e:3a:10:88:44:5f:3b:b0:4a:dc:e6:
         58:5b:b5:c0:1c:b1:56:d4:af:33:2f:25:91:c2:c5:04:6a:21:
         75:85:b5:6e:f3:7f:eb:31:b5:8e:c2:00:86:1d:6b:59:fd:24:
         9d:66:a5:b2:df:f1:fb:0a:d9:8a:43:50:58:b5:6d:09:43:26:
         c9:34:23:93:a7:09:67:87:62:b2:e4:e8:4d:67:8e:7d:be:01:
         8d:f4:da:7d:f5:df:54:12:cf:4a:1d:02:65:31:4e:4a:de:2d:
         84:67:8e:a6:d5:d7:67:5a:19:4a:5b:2a:79:b0:d3:05:d8:8e:
         ef:3d:17:c1:16:64:fe:0c:0a:da:d1:c4:08:10:c6:d3:5c:3e:
         dc:75:13:60:93:69:20:ce:a6:7e:6e:34:f9:5a:6a:26:a1:6f:
         53:1e:a2:9e:03:80:d0:43:e1:14:1c:bd:62:0d:cd:a3:93:98:
         b3:7c:67:f3:d9:ac:7b:38:85:a6:88:99:dd:87:77:70:b7:da:
         99:2d:48:73:dc:05:07:64:01:3b:42:26:73:5d:b5:c1:e2:ab:
         fd:e7:4b:2b:ce:01:d8:3d:1a:82:ee:98:6a:4f:76:06:c2:14:
         96:d4:18:d0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:56 2024 by rpki-client on console-fra.rpki-client.org