Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323030303a3a2f34342d3434203d3e20323632333136.roa
File:                     323830343a3763303a323030303a3a2f34342d3434203d3e20323632333136.roa (raw, json)
Hash identifier:          ntxOjTruohR3oAioVPqInNfGlbMqU5Sm0sS1MFMT9ns=
Subject key identifier:   EC:26:1A:A0:ED:CC:72:3A:23:F5:4D:3B:ED:27:5D:39:AA:F8:D4:22
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       1F605A89FF724599299C06F0D45A3AAAD256FC04
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323030303a3a2f34342d3434203d3e20323632333136.roa
Signing time:             Thu 14 Sep 2023 13:08:41 +0000
ROA not before:           Thu 14 Sep 2023 13:03:41 +0000
ROA not after:            Thu 12 Sep 2024 13:08:41 +0000
asID:                     262316
IP address blocks:        2804:7c0:2000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:60:5a:89:ff:72:45:99:29:9c:06:f0:d4:5a:3a:aa:d2:56:fc:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Sep 14 13:03:41 2023 GMT
            Not After : Sep 12 13:08:41 2024 GMT
        Subject: CN=EC261AA0EDCC723A23F54D3BED275D39AAF8D422
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:9f:29:13:79:7a:33:78:2f:7e:c9:1f:57:94:
                    89:ce:81:10:9c:5c:88:02:1f:88:2a:2f:3e:57:28:
                    b0:3a:d0:7a:d3:c3:34:02:27:00:63:65:ef:00:74:
                    b1:cb:21:80:b3:5e:78:03:0a:45:39:dd:89:a5:c7:
                    e7:e8:16:2b:30:79:a5:1f:9c:23:c5:65:e3:7b:22:
                    fd:50:e7:e3:92:71:08:39:5b:c3:24:1e:9e:a0:c0:
                    68:31:90:c5:fb:ad:a5:53:a0:5f:bd:84:1f:ce:cb:
                    16:80:ec:d3:51:c6:f4:b5:79:15:5d:2a:9f:d5:19:
                    c2:69:61:01:95:0c:9a:74:55:60:84:5b:4e:40:e5:
                    65:fc:b3:21:5c:f8:a0:53:a6:13:60:83:9a:8a:13:
                    b8:2a:02:14:56:9b:4d:46:51:7b:08:49:13:34:a5:
                    80:a7:e0:7a:8a:7e:29:b3:c5:05:8f:4d:b7:b8:42:
                    8c:1a:2c:8c:1d:3a:ce:ce:1d:f3:58:1c:98:47:b0:
                    ac:fe:f4:ba:24:48:5c:4e:e3:98:a7:9b:4c:c0:97:
                    13:f3:63:33:87:98:11:8f:0f:06:94:7e:f8:ba:78:
                    f2:96:1a:3b:a7:69:8a:29:e3:a1:cc:b0:bc:68:bd:
                    13:51:b2:05:48:23:37:ad:aa:22:4c:8c:11:74:86:
                    6d:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:26:1A:A0:ED:CC:72:3A:23:F5:4D:3B:ED:27:5D:39:AA:F8:D4:22
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a323030303a3a2f34342d3434203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:2000::/44

    Signature Algorithm: sha256WithRSAEncryption
         84:5a:09:d1:5e:7f:fb:3b:75:72:c6:67:e1:28:06:53:66:9e:
         bc:49:6f:9a:06:74:bb:3b:3c:26:bf:9f:2f:22:fd:77:f6:40:
         fc:14:30:53:ab:ae:d9:55:69:9c:75:0b:4e:2c:c0:71:0d:a9:
         2f:35:03:86:79:99:bc:e2:10:0a:71:8e:c2:e4:92:d1:d3:d5:
         20:79:8d:66:58:90:33:da:e6:01:c4:20:22:ac:ec:d6:e6:14:
         4f:61:ae:7b:3e:c7:b9:ac:09:d2:e6:66:d1:1a:7e:fb:a3:f6:
         6f:e9:23:ec:be:cb:e4:25:59:dc:e4:63:e4:96:81:44:7f:be:
         39:3e:8f:8e:24:ad:7b:c1:fc:90:5c:19:84:26:70:f7:aa:93:
         fb:01:7a:58:f7:d4:f8:a0:ad:71:56:b4:6d:ab:23:f1:2e:ba:
         67:a7:f5:ff:9a:a1:6f:d4:2d:36:e4:e0:f3:6b:33:37:6d:80:
         db:63:64:1f:4d:78:1e:42:c2:f4:c7:a6:61:25:a9:0b:ef:b0:
         a2:be:88:bc:68:da:d3:2a:3c:61:b4:51:74:4c:e6:67:a8:27:
         de:17:b7:01:fe:bf:d4:3f:c4:67:75:64:0e:42:59:fa:82:51:
         16:65:92:92:6c:a4:d3:8e:37:91:96:8f:43:bc:09:ad:36:a3:
         81:cf:a2:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org