Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313031303a3a2f34342d3434203d3e20323632333136.roa
File:                     323830343a3763303a313031303a3a2f34342d3434203d3e20323632333136.roa (raw, json)
Hash identifier:          y9dIYrDHrUyemSx1aaQBi8YxP5nJ/0mjPN7CEUkuy4o=
Subject key identifier:   86:8B:D3:E0:99:18:B3:50:60:E3:8B:F1:3E:BE:53:88:55:91:74:B4
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       5537B1ECB1E49B909633C5CE15F878CCCF3D5868
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313031303a3a2f34342d3434203d3e20323632333136.roa
Signing time:             Wed 13 Sep 2023 13:20:25 +0000
ROA not before:           Wed 13 Sep 2023 13:15:25 +0000
ROA not after:            Wed 11 Sep 2024 13:20:25 +0000
asID:                     262316
IP address blocks:        2804:7c0:1010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:37:b1:ec:b1:e4:9b:90:96:33:c5:ce:15:f8:78:cc:cf:3d:58:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Sep 13 13:15:25 2023 GMT
            Not After : Sep 11 13:20:25 2024 GMT
        Subject: CN=868BD3E09918B35060E38BF13EBE5388559174B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:b9:61:70:72:64:55:d5:86:99:d4:6f:2c:48:
                    33:3f:e2:d8:6c:77:7b:0e:42:61:c5:29:b7:5a:55:
                    88:76:7c:a1:a5:b4:0d:a6:fc:3c:46:ec:f9:8f:04:
                    83:f3:57:92:fa:56:56:65:e8:01:ae:a7:8d:b2:e5:
                    9e:9d:5b:0a:21:57:a2:24:ac:32:8b:fb:28:cd:8e:
                    52:45:85:76:c2:63:be:9d:35:3a:d9:10:33:72:a3:
                    f2:ef:0c:54:8a:a8:bd:29:d6:a5:89:e7:12:4e:90:
                    ae:5e:53:5e:3f:2c:c6:1f:25:56:b3:d2:00:ae:b5:
                    39:47:74:8b:4d:1d:10:bf:09:8c:88:b3:45:6d:1a:
                    67:f7:10:e0:9e:71:b8:60:db:1f:23:60:53:90:e4:
                    c8:68:62:32:53:aa:e9:c6:5b:a8:0f:f4:1f:f6:f5:
                    16:b4:20:fe:55:53:1a:82:bb:3d:66:1e:69:60:9b:
                    79:20:23:55:77:5f:8c:c4:c8:2e:4c:13:ff:a1:b6:
                    f2:38:8b:8e:67:fc:26:fa:4d:ea:28:28:58:c8:27:
                    15:4d:ee:c8:e7:94:be:9c:70:6a:36:2b:5c:3e:23:
                    c6:dc:0a:ee:3d:87:2e:e9:36:02:6d:5a:65:75:a6:
                    e0:54:ac:c2:bf:b6:0c:45:44:3c:47:4c:f4:04:3b:
                    bf:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:8B:D3:E0:99:18:B3:50:60:E3:8B:F1:3E:BE:53:88:55:91:74:B4
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a313031303a3a2f34342d3434203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:1010::/44

    Signature Algorithm: sha256WithRSAEncryption
         10:93:ec:2f:5d:96:48:b6:d4:58:c6:2e:46:8e:75:ab:27:3d:
         0b:26:d8:72:51:0f:5a:90:e4:31:a6:ef:ab:f0:4f:5c:90:66:
         99:b4:df:a9:17:34:33:cf:5a:00:3d:17:9a:c9:e9:d6:a2:44:
         50:0f:56:99:18:74:b8:ae:a9:58:8b:0c:3b:40:21:58:1c:0d:
         ee:93:17:7e:b4:23:40:1e:2e:bd:76:ab:8c:b1:52:64:19:11:
         d2:d5:d3:27:a6:cd:a9:f3:27:aa:cf:96:4f:a2:cd:14:8b:24:
         b4:6d:24:a5:c6:18:0d:c8:61:6d:6e:42:ac:91:a9:4e:10:ec:
         96:86:0c:0c:12:73:6b:3d:95:e1:15:e5:53:08:01:18:26:a3:
         fd:bd:58:08:89:18:75:b1:69:68:87:ac:ee:91:d1:5c:72:5f:
         36:6b:3e:aa:8f:95:ed:f2:ea:0f:3d:84:96:05:f7:84:aa:74:
         48:62:d2:ba:a3:4b:51:87:ea:1a:f4:1b:02:e6:41:96:b0:1d:
         31:9f:02:5e:c4:7e:82:18:5e:a4:2b:f2:4d:af:e9:70:87:5e:
         56:27:2f:07:7d:29:69:eb:57:52:c8:37:b2:b1:34:9f:94:5d:
         7b:bc:de:54:31:32:b2:c2:fc:43:db:02:7a:8a:5a:51:10:56:
         d6:2b:a2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org