Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3a2f33322d3334203d3e20323635343732.roa
File:                     323830343a333461633a3a2f33322d3334203d3e20323635343732.roa (raw, json)
Hash identifier:          OcYzWvjBpqjCbqGmiRVGDjjQUGMYbazaUkMxPxUPAgU=
Subject key identifier:   41:0F:30:E1:79:4E:21:A4:3C:8C:21:64:61:A4:C1:7D:27:70:6D:38
Certificate issuer:       /CN=B09F555E338DACE2F046F7B3C94528216109B8C5
Certificate serial:       6502F8D46487276AA8F42431B2F5D350E415380F
Authority key identifier: B0:9F:55:5E:33:8D:AC:E2:F0:46:F7:B3:C9:45:28:21:61:09:B8:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B09F555E338DACE2F046F7B3C94528216109B8C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3a2f33322d3334203d3e20323635343732.roa
Signing time:             Sun 05 Nov 2023 23:14:06 +0000
ROA not before:           Sun 05 Nov 2023 23:09:06 +0000
ROA not after:            Sun 03 Nov 2024 23:14:06 +0000
asID:                     265472
IP address blocks:        2804:34ac::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:02:f8:d4:64:87:27:6a:a8:f4:24:31:b2:f5:d3:50:e4:15:38:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B09F555E338DACE2F046F7B3C94528216109B8C5
        Validity
            Not Before: Nov  5 23:09:06 2023 GMT
            Not After : Nov  3 23:14:06 2024 GMT
        Subject: CN=410F30E1794E21A43C8C216461A4C17D27706D38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9a:c8:3e:86:41:b7:a8:fd:54:84:df:5c:44:
                    73:df:f0:59:95:81:bd:42:9d:d5:a1:d6:81:76:e9:
                    aa:d0:1d:ca:60:5f:b4:30:89:bc:7c:2e:53:80:41:
                    bd:e9:e5:84:cc:31:4b:05:cb:31:12:64:f0:3d:cd:
                    c0:67:86:7e:43:09:c4:a9:21:23:21:58:5c:e4:c1:
                    85:69:ad:a8:fe:20:66:0d:9a:ac:e5:39:29:b2:2c:
                    a9:f8:2e:e7:5b:ed:b9:2c:04:87:11:b4:8e:bb:02:
                    31:f3:3f:fc:5a:3c:3e:0d:fa:cf:59:2d:8e:9f:98:
                    b2:d9:78:65:c3:9b:97:b0:c3:aa:3a:1b:5e:00:9b:
                    98:3b:83:94:86:0b:22:87:4c:e8:7d:72:73:ab:e2:
                    1b:82:a1:a3:a3:d5:9c:42:74:6f:ad:56:c4:19:56:
                    3b:74:f8:98:96:64:34:24:36:7f:16:b2:f3:60:23:
                    32:28:da:84:4f:f7:2d:b9:49:f9:f0:8f:5a:90:3b:
                    7d:e2:04:22:fc:59:35:56:2a:1b:b0:ba:c9:54:20:
                    3d:df:de:8d:0c:c7:7a:5d:fd:84:eb:60:80:5f:47:
                    83:89:b5:4f:ae:d2:3d:99:36:f1:db:74:98:db:71:
                    25:f5:19:eb:a5:cd:e8:6f:4f:b6:42:4d:e1:1d:85:
                    e9:3b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:0F:30:E1:79:4E:21:A4:3C:8C:21:64:61:A4:C1:7D:27:70:6D:38
            X509v3 Authority Key Identifier:
                keyid:B0:9F:55:5E:33:8D:AC:E2:F0:46:F7:B3:C9:45:28:21:61:09:B8:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/B09F555E338DACE2F046F7B3C94528216109B8C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B09F555E338DACE2F046F7B3C94528216109B8C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/86wV2Vf8Qau5iFcCJc9j9BK4Km6d4iwk94PPiuGcfQY5/0/323830343a333461633a3a2f33322d3334203d3e20323635343732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         09:68:39:b6:70:1f:ed:61:1a:70:3c:a0:9b:24:1d:b5:2f:48:
         90:ba:4f:f0:f4:0f:ea:e8:2d:69:07:31:6b:55:51:be:5e:e4:
         62:e2:d1:f9:ac:9b:d3:9f:6f:93:22:84:40:74:24:1f:00:b8:
         49:ed:f9:80:b0:e9:a0:d8:a2:c9:7d:f8:9c:74:81:b1:ec:67:
         58:2d:07:b9:2c:e9:f4:59:48:27:a3:c8:36:62:e5:ca:ba:7a:
         e8:00:5c:66:a4:52:71:c8:ff:be:37:bf:27:c6:e1:3c:07:22:
         27:43:8b:ec:88:e7:63:20:57:d3:04:67:9d:18:d4:7a:2d:a7:
         85:ce:c6:5a:7a:12:0e:b3:17:a8:2d:51:88:cf:f8:0f:e6:03:
         61:f8:00:29:6b:96:75:13:b7:cf:0f:97:57:a7:0d:20:cb:6b:
         6f:11:f0:77:5b:b9:3e:f4:3b:90:10:8f:15:50:27:64:7c:3e:
         8f:d3:a3:c6:67:a1:eb:ee:e9:6f:5f:58:47:e8:c5:32:75:ee:
         0c:c9:78:d9:04:ac:cf:eb:a0:64:de:9d:d5:cf:53:a4:b3:64:
         a9:ba:b6:e8:47:22:2b:5e:64:60:28:bc:98:50:74:96:30:a1:
         94:f4:f8:ab:41:05:e8:3c:02:c4:f9:75:87:78:6d:e5:64:1f:
         54:78:c9:4f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org