Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3438303a3a2f34322d3432203d3e20323635343732.roa
File:                     323830343a333461633a3438303a3a2f34322d3432203d3e20323635343732.roa (raw, json)
Hash identifier:          oH37XAwYfHZqNljjXiwYRgu04DfLJIMGbrK0ewbLCMQ=
Subject key identifier:   0E:08:25:3D:E4:EF:69:C7:D8:B3:2A:E3:3F:AE:89:4C:32:D7:18:F0
Certificate issuer:       /CN=B09F555E338DACE2F046F7B3C94528216109B8C5
Certificate serial:       14683011BA1827C1A528C0D908A31DDD7E16497C
Authority key identifier: B0:9F:55:5E:33:8D:AC:E2:F0:46:F7:B3:C9:45:28:21:61:09:B8:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B09F555E338DACE2F046F7B3C94528216109B8C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3438303a3a2f34322d3432203d3e20323635343732.roa
Signing time:             Wed 17 May 2023 13:50:25 +0000
ROA not before:           Wed 17 May 2023 13:45:25 +0000
ROA not after:            Wed 15 May 2024 13:50:25 +0000
asID:                     265472
IP address blocks:        2804:34ac:480::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:68:30:11:ba:18:27:c1:a5:28:c0:d9:08:a3:1d:dd:7e:16:49:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09F555E338DACE2F046F7B3C94528216109B8C5
        Validity
            Not Before: May 17 13:45:25 2023 GMT
            Not After : May 15 13:50:25 2024 GMT
        Subject: CN=0E08253DE4EF69C7D8B32AE33FAE894C32D718F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:0f:9c:ef:3d:46:c3:07:a1:54:83:fb:ce:d1:
                    fb:e3:34:4b:f9:db:34:51:ad:5b:e9:f5:5a:b4:0f:
                    c8:86:0c:9b:d7:80:26:a7:36:27:73:18:2a:f9:8f:
                    56:7d:50:3b:d2:a8:76:11:db:15:4d:0f:79:f3:3f:
                    1c:a7:e7:30:3f:9b:44:b0:30:d0:d1:fb:93:74:90:
                    77:48:14:71:8e:d5:59:82:ed:84:d2:a0:60:75:cf:
                    70:3b:a7:c5:db:a9:7d:7d:08:97:06:40:d7:d4:63:
                    af:9f:fd:72:b9:af:78:28:79:f5:ab:99:4d:ba:ce:
                    67:ee:da:e7:08:e2:7d:59:c1:bf:a4:0b:f9:db:5c:
                    37:38:c7:0e:d7:53:fb:f0:29:3b:10:85:8b:93:c9:
                    8e:82:b7:61:cb:8e:37:77:33:0c:c1:b3:f8:83:86:
                    ad:9a:fd:d3:6b:9c:71:90:d8:3e:a2:ab:3c:93:61:
                    10:20:3d:3c:ca:15:6d:72:bb:f3:bb:8c:b7:73:7d:
                    7c:ce:fc:a0:86:ab:ca:d7:35:e4:69:06:bb:14:11:
                    ba:4f:33:5b:2a:b5:ff:a7:22:c8:90:04:2a:19:eb:
                    e2:1b:65:e0:ac:20:29:de:ca:bd:c3:a4:fd:d9:2a:
                    e2:4b:14:c4:26:0e:e1:e7:da:0f:10:1e:89:43:e6:
                    f0:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:08:25:3D:E4:EF:69:C7:D8:B3:2A:E3:3F:AE:89:4C:32:D7:18:F0
            X509v3 Authority Key Identifier:
                keyid:B0:9F:55:5E:33:8D:AC:E2:F0:46:F7:B3:C9:45:28:21:61:09:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/B09F555E338DACE2F046F7B3C94528216109B8C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B09F555E338DACE2F046F7B3C94528216109B8C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3438303a3a2f34322d3432203d3e20323635343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34ac:480::/42

    Signature Algorithm: sha256WithRSAEncryption
         8a:ce:63:1d:1d:92:94:db:98:73:1b:28:8a:07:2e:ce:ee:c8:
         ae:c1:d4:58:a9:ef:1a:0b:0d:15:a9:d0:36:c2:57:08:b6:5c:
         35:43:04:f6:33:84:f2:af:02:4d:f0:e2:84:53:c0:74:28:3f:
         1b:ba:6e:01:ea:e9:86:61:49:06:55:d8:c1:10:c3:aa:46:aa:
         f2:b4:21:47:69:31:a7:59:af:62:fa:17:d2:8e:bf:c7:fd:71:
         e5:7b:5d:c2:2f:ca:56:26:52:f9:1b:7a:71:6a:f3:4b:d1:6d:
         f9:6a:f9:f0:f5:b4:2e:f1:84:bb:a5:24:1a:d3:fb:76:2a:5c:
         5f:d5:6a:d0:17:d9:6f:0b:e6:89:51:1b:3d:8b:d2:63:34:23:
         49:cf:e3:d3:e1:7d:b0:41:36:e7:ed:2c:48:1c:d5:3a:49:88:
         e5:e7:2e:4a:a0:bc:b1:52:c0:33:10:8c:0a:59:2a:ab:f6:46:
         4b:05:51:34:88:69:7a:22:63:78:38:6b:a1:1c:d7:48:48:4b:
         f4:a0:cb:f5:7c:65:67:61:b9:61:90:6a:29:4b:0d:de:88:2d:
         d2:ae:df:16:2d:a4:22:ff:1c:14:a1:cb:cd:69:08:75:84:bc:
         3d:44:a7:64:be:57:74:ac:88:f3:2b:25:4d:71:92:cb:7c:3e:
         49:18:77:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org