Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/323830343a323366303a3230303a3a2f34302d3430203d3e20323634313932.roa
File:                     323830343a323366303a3230303a3a2f34302d3430203d3e20323634313932.roa (raw, json)
Hash identifier:          YIOUZKyY3utUvzQ6DsdBhopljpjEZxVv3DFP7RAF/9Q=
Subject key identifier:   05:15:73:B6:9C:0F:C8:8A:DA:DC:DC:B0:59:31:CE:56:33:B8:B2:0E
Certificate issuer:       /CN=7416BDE8982661C0715BA0ADF262F83EB49F1381
Certificate serial:       5067FAA966DD46519E19062E9ECA0F0AC1489022
Authority key identifier: 74:16:BD:E8:98:26:61:C0:71:5B:A0:AD:F2:62:F8:3E:B4:9F:13:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7416BDE8982661C0715BA0ADF262F83EB49F1381.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/323830343a323366303a3230303a3a2f34302d3430203d3e20323634313932.roa
Signing time:             Wed 13 Dec 2023 12:38:15 +0000
ROA not before:           Wed 13 Dec 2023 12:33:15 +0000
ROA not after:            Wed 11 Dec 2024 12:38:15 +0000
asID:                     264192
IP address blocks:        2804:23f0:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:67:fa:a9:66:dd:46:51:9e:19:06:2e:9e:ca:0f:0a:c1:48:90:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7416BDE8982661C0715BA0ADF262F83EB49F1381
        Validity
            Not Before: Dec 13 12:33:15 2023 GMT
            Not After : Dec 11 12:38:15 2024 GMT
        Subject: CN=051573B69C0FC88ADADCDCB05931CE5633B8B20E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:59:0d:f9:b1:bb:7c:05:d4:38:da:8a:6d:fd:
                    83:c9:56:8b:ce:ac:c0:a8:e3:8c:11:ae:f6:39:ac:
                    b3:d1:a5:23:17:a0:56:7c:72:e6:ab:d7:2b:80:49:
                    b2:c5:16:21:22:37:ac:22:1e:db:87:6f:57:38:d6:
                    b5:0a:d4:c0:cf:a8:1d:50:fd:cf:a8:de:ed:bb:06:
                    6c:4d:da:08:2b:57:df:b7:9e:e7:ea:5c:a0:c7:47:
                    09:79:19:cd:85:a9:ff:32:fe:de:66:da:bc:47:b7:
                    51:86:45:4a:27:4d:44:29:1e:8a:10:2c:d9:4f:3d:
                    fa:ad:ea:35:42:b0:b4:f7:d0:9b:75:30:2c:51:a2:
                    da:d4:15:92:86:d1:98:c0:fa:6c:d5:0e:13:ef:95:
                    32:68:72:48:61:43:25:2c:b9:05:7a:9d:7d:30:ef:
                    3b:a8:f6:64:e5:f9:72:de:ce:e6:99:52:04:ab:17:
                    54:63:ab:c9:27:ca:c5:4b:72:7e:17:2a:9b:ed:8b:
                    2d:f1:a5:99:f4:13:7a:76:d6:fb:ef:ce:4e:49:9d:
                    30:0f:c4:40:d9:5b:4b:19:06:e6:2e:98:df:c5:3d:
                    b0:57:15:2b:2c:9c:ac:b3:38:1a:82:d0:03:dc:6b:
                    68:ef:05:9d:42:ef:bf:ab:a5:28:29:be:6a:a0:14:
                    80:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:15:73:B6:9C:0F:C8:8A:DA:DC:DC:B0:59:31:CE:56:33:B8:B2:0E
            X509v3 Authority Key Identifier:
                keyid:74:16:BD:E8:98:26:61:C0:71:5B:A0:AD:F2:62:F8:3E:B4:9F:13:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/7416BDE8982661C0715BA0ADF262F83EB49F1381.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7416BDE8982661C0715BA0ADF262F83EB49F1381.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/83ujggwyaJUEG2Kpp4wKh6fBgByX2NP5GVT5qJ1P7KAP/1/323830343a323366303a3230303a3a2f34302d3430203d3e20323634313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:23f0:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         07:3e:95:fd:dd:e7:8b:7a:b7:fe:1d:5a:fc:5d:f0:8c:0f:9a:
         21:91:6a:40:cb:2e:c8:35:3f:b5:74:5b:81:ab:87:fb:3f:12:
         0a:35:24:cd:b2:c2:95:ba:f5:a5:b6:43:ef:fa:26:69:05:5d:
         8f:bc:9e:a2:bd:ee:bc:4b:e1:f1:49:34:08:39:d3:88:9c:ad:
         08:4c:80:01:e1:ef:87:99:92:3c:63:32:37:0d:83:e2:2d:ea:
         77:7d:1f:8f:c3:2b:8c:9c:d4:1a:2c:2c:95:cd:a7:dd:25:2d:
         a1:99:48:22:44:f0:6d:8b:b4:03:bb:3e:f1:3c:95:fc:a6:fe:
         75:7f:af:3a:ba:c0:ee:2a:53:ab:f1:ac:5f:e9:4f:96:91:17:
         9c:6a:26:ba:88:0f:ac:e6:8f:9b:06:92:f6:03:e6:b9:84:0c:
         e5:87:7e:74:d4:d4:6b:7e:d3:21:b7:7a:94:a6:ef:4b:19:31:
         4f:70:f3:94:d3:b4:8e:67:ed:c1:0a:06:16:9e:20:45:e2:65:
         14:25:1a:83:6a:3b:20:01:2c:ec:0f:43:38:93:fc:fe:19:69:
         72:11:f1:d6:e9:e6:41:09:66:00:4c:10:b6:fc:4d:a2:c9:57:
         43:c0:2d:f5:16:3c:0a:5f:2f:40:87:db:00:ad:a8:e3:4c:d0:
         0c:fd:a1:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:46 2024 by rpki-client on console-ams.rpki-client.org