Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a623030303a3a2f33362d3336203d3e20323632333136.roa
File:                     323830343a3763303a623030303a3a2f33362d3336203d3e20323632333136.roa (raw, json)
Hash identifier:          BISF0o/JuMuoYm73eXbcpVL52Fnmeba2Vq6Kn2NqSPo=
Subject key identifier:   31:A8:B6:C3:B9:12:58:8E:4D:4E:43:20:A6:F0:03:9C:EE:2F:B1:6F
Certificate issuer:       /CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
Certificate serial:       2A13639A86BBD388DC89F07365E8CE0F2F03D651
Authority key identifier: CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a623030303a3a2f33362d3336203d3e20323632333136.roa
Signing time:             Mon 21 Aug 2023 13:26:37 +0000
ROA not before:           Mon 21 Aug 2023 13:21:37 +0000
ROA not after:            Mon 19 Aug 2024 13:26:37 +0000
asID:                     262316
IP address blocks:        2804:7c0:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:13:63:9a:86:bb:d3:88:dc:89:f0:73:65:e8:ce:0f:2f:03:d6:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808
        Validity
            Not Before: Aug 21 13:21:37 2023 GMT
            Not After : Aug 19 13:26:37 2024 GMT
        Subject: CN=31A8B6C3B912588E4D4E4320A6F0039CEE2FB16F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:d6:57:65:1f:d6:7b:f0:7b:a3:e9:d2:40:0a:
                    04:47:a8:08:95:e3:a4:75:52:a7:6d:5f:40:99:bf:
                    df:3f:6a:d7:7c:04:e0:40:25:5d:bd:5f:2a:66:96:
                    fa:d0:91:26:24:2d:05:f7:5b:07:9e:06:0e:51:89:
                    59:ac:24:d8:5a:3b:80:70:7e:11:65:1d:a9:4b:33:
                    be:0b:3b:5a:5e:01:ff:1e:56:05:0d:e8:57:4a:50:
                    a2:e3:f0:b6:cc:3f:3d:91:9b:d1:21:88:12:8a:a4:
                    94:52:81:c3:a8:eb:13:fd:14:19:ab:3c:db:d1:b3:
                    d4:39:31:4b:8e:7e:93:de:a5:cc:45:8b:dd:a4:b4:
                    9f:98:45:b8:df:1f:e8:21:79:43:66:f5:9a:8b:61:
                    ca:aa:e9:e2:5a:00:09:a1:a6:fc:b3:03:ce:1d:cd:
                    83:a2:32:9a:2a:f4:08:58:46:b5:0d:2f:37:0e:e7:
                    5e:7d:e1:ac:00:35:4d:4d:64:7e:dd:5d:90:e3:91:
                    dd:59:b1:fc:02:47:aa:36:a8:06:23:de:68:0c:16:
                    54:45:34:24:f9:a1:c0:21:0c:77:2a:1b:32:dc:2b:
                    24:69:9c:8a:ae:64:6f:8f:81:0d:78:79:e2:03:49:
                    3b:2d:2d:92:e0:2f:01:b0:cb:cb:7c:78:19:58:a3:
                    19:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                31:A8:B6:C3:B9:12:58:8E:4D:4E:43:20:A6:F0:03:9C:EE:2F:B1:6F
            X509v3 Authority Key Identifier:
                keyid:CD:6A:13:2F:B8:F9:C1:B9:8A:9C:DC:F1:51:EA:82:35:0A:1E:08:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CD6A132FB8F9C1B98A9CDCF151EA82350A1E0808.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/88Sr6k5g5ny1vwdiwh8yfMDS2EerW45pZdDhoXuUt2Ka/0/323830343a3763303a623030303a3a2f33362d3336203d3e20323632333136.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c0:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         48:6a:3e:d2:d7:8b:20:c6:e4:35:fc:ce:23:92:f7:ed:d2:51:
         c3:4c:4b:a7:92:2e:96:e1:1d:50:d4:3a:35:62:b5:4d:9d:5d:
         79:a1:55:0a:fd:1c:03:cf:d3:d5:68:9f:cc:e1:79:b6:cd:9e:
         bd:14:9c:50:a2:1c:e4:a7:df:2a:92:4c:29:55:47:55:cb:0e:
         58:ec:7a:eb:86:0a:d0:cd:0d:92:dc:bb:77:aa:78:fd:48:71:
         45:9b:93:84:d7:42:c4:fa:4b:12:15:11:08:62:52:f2:1b:26:
         26:ee:30:41:42:52:e6:11:ae:97:e1:4c:53:1d:68:70:1c:05:
         76:2d:2a:f3:6a:7b:65:d4:ab:1e:a1:8e:24:e5:30:d7:fe:61:
         c5:f2:ae:a4:74:38:7c:54:0d:2a:2d:b6:af:3f:7e:cc:4c:4a:
         03:e6:e4:ad:33:5a:d1:c8:ab:1f:d5:25:13:4e:bc:95:41:c0:
         5a:f4:c0:1a:7d:1c:10:69:f5:26:47:be:6e:3a:aa:30:a4:9e:
         4c:fd:24:45:9a:ec:28:65:ac:b6:b0:63:fe:13:8c:fc:c4:73:
         0e:66:a0:d6:c1:e2:62:f3:fc:65:72:24:58:42:42:77:8a:0c:
         8c:01:5b:79:3d:fa:31:11:b9:ff:a0:69:78:e5:3c:ab:1b:ac:
         ca:e5:4d:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:47 2024 by rpki-client on console-ams.rpki-client.org