Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313030303a3a2f34342d3434203d3e20323632333136.roa
File:                     323830343a3763303a313030303a3a2f34342d3434203d3e20323632333136.roa (raw, json)
Hash identifier:          o+qFo0p5CGl16IZGIBBdQfymCWdyqtAhIYoSqpafAoU=
Subject key identifier:   92:2A:82:D4:BC:B9:8F:1D:0B:CF:28:1E:7B:3E:98:C1:10:E3:D0:62
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       0B32A88262A6539877415AC130601241FE24C3C8
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313030303a3a2f34342d3434203d3e20323632333136.roa
Signing time:             Wed 13 Sep 2023 13:12:46 +0000
ROA not before:           Wed 13 Sep 2023 13:07:46 +0000
ROA not after:            Wed 11 Sep 2024 13:12:46 +0000
asID:                     262316
IP address blocks:        2804:7c0:1000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:32:a8:82:62:a6:53:98:77:41:5a:c1:30:60:12:41:fe:24:c3:c8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Sep 13 13:07:46 2023 GMT
            Not After : Sep 11 13:12:46 2024 GMT
        Subject: CN=922A82D4BCB98F1D0BCF281E7B3E98C110E3D062
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:4b:7d:47:1e:76:cc:2d:95:25:28:96:ab:e9:
                    07:0e:8e:06:19:e0:73:88:a0:ea:2f:8d:7c:57:0e:
                    17:d8:3f:58:0f:bc:33:37:86:ee:a8:4a:2d:94:a4:
                    8b:1d:b1:b7:54:be:62:b9:86:b1:54:35:1a:a9:89:
                    5a:e6:a7:c9:59:3d:b0:68:20:c7:81:2f:03:2f:ec:
                    8a:75:18:21:af:cd:8c:a6:99:b9:ef:13:70:70:7e:
                    c9:c9:ac:92:04:cd:95:9d:33:39:09:68:23:07:f5:
                    d7:52:3d:7a:10:7d:0a:c3:6a:4e:3c:e1:41:6a:44:
                    04:8b:99:2b:e1:37:9c:12:b3:b0:40:a5:86:6e:e0:
                    e3:63:64:67:3f:98:6f:79:7d:d0:c8:93:20:cf:15:
                    ca:cb:67:17:1f:43:0f:f0:45:7a:9c:31:db:80:3c:
                    61:ec:35:b5:14:6c:3e:ce:75:c9:57:84:cc:50:de:
                    b2:0b:d2:c1:f5:52:a4:f1:cc:e2:71:b6:ae:af:e4:
                    cf:cc:63:72:a5:9c:63:5b:08:92:f9:30:33:47:7d:
                    34:7d:b5:3b:de:ae:03:19:c2:0e:b4:82:40:ea:b0:
                    0b:47:86:c8:2a:14:a8:df:e2:70:c2:5b:d6:5d:13:
                    d5:6f:72:93:89:5c:71:7d:db:23:d0:69:a7:24:a9:
                    cf:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:2A:82:D4:BC:B9:8F:1D:0B:CF:28:1E:7B:3E:98:C1:10:E3:D0:62
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313030303a3a2f34342d3434203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:1000::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:16:30:03:ff:b4:9b:80:18:bc:a6:a4:84:50:69:38:b3:80:
         7b:97:e8:d0:2e:f1:07:1d:bb:ea:e9:12:7c:bc:4a:a7:c4:83:
         47:a9:ab:5e:87:f6:6b:1c:af:fd:0f:a5:16:5f:ad:07:85:b9:
         72:df:63:80:44:0c:65:b4:b9:f5:a4:90:07:b9:38:a6:ac:88:
         34:71:7e:32:8c:83:f8:56:35:90:37:38:5c:3b:df:91:b9:ba:
         f6:9d:3e:ba:a6:77:b3:ea:4e:79:51:ea:ce:49:34:73:c4:29:
         6e:d7:5b:8f:68:8d:a7:18:09:53:ee:4d:a6:d6:1f:ed:45:c5:
         fb:c1:4f:66:15:ff:f6:a1:48:4a:00:3b:9e:03:20:52:c7:5e:
         5b:21:e5:47:35:06:03:d7:68:05:8a:06:33:e8:8d:4a:e0:9d:
         81:68:b8:0f:40:e7:7a:44:35:e7:18:b2:ad:a4:41:5c:c4:bf:
         5c:ad:1b:23:07:65:b3:c6:55:61:f1:3c:cf:4c:8e:2d:1f:98:
         37:1a:23:89:b3:a0:3f:d2:3a:b0:46:c1:9d:39:91:9d:27:d4:
         96:03:92:68:98:a1:24:d6:1e:14:2c:0e:0a:28:62:4c:f8:0e:
         09:15:68:e5:4f:52:c5:70:a0:c1:36:cb:e1:c2:17:38:d1:b9:
         df:88:53:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org