Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33322d3438203d3e20323638393434.roa
File:                     323830343a356366633a3a2f33322d3438203d3e20323638393434.roa (raw, json)
Hash identifier:          weOD+e8N+9AGGoOWcFk+F32juERec58BlotTu/l3OLY=
Subject key identifier:   2E:29:5C:13:96:37:F3:B7:DF:AB:92:02:1D:CA:04:ED:73:7D:B4:94
Certificate issuer:       /CN=AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF
Certificate serial:       5F8845233ADB502C51F8B2D548D34C50C012223F
Authority key identifier: AB:8E:82:1D:6B:CE:52:5A:F5:AF:6C:1E:FD:73:0A:56:9B:1D:D9:FF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33322d3438203d3e20323638393434.roa
Signing time:             Fri 22 Mar 2024 20:53:59 +0000
ROA not before:           Fri 22 Mar 2024 20:48:59 +0000
ROA not after:            Fri 21 Mar 2025 20:53:59 +0000
asID:                     268944
IP address blocks:        2804:5cfc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:88:45:23:3a:db:50:2c:51:f8:b2:d5:48:d3:4c:50:c0:12:22:3f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF
        Validity
            Not Before: Mar 22 20:48:59 2024 GMT
            Not After : Mar 21 20:53:59 2025 GMT
        Subject: CN=2E295C139637F3B7DFAB92021DCA04ED737DB494
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:9d:c8:cc:df:e2:06:35:60:28:a3:6d:d4:eb:
                    61:3b:c2:bd:3f:3f:87:ce:86:c5:23:0a:35:19:ae:
                    37:fc:2a:f2:84:a5:a2:b0:2f:74:ae:24:d1:a5:20:
                    98:22:a6:73:a4:20:31:44:c2:b0:bf:d4:1a:0f:8b:
                    43:ae:00:c7:7c:39:6e:cb:63:5b:39:81:53:06:e6:
                    4d:b9:f9:79:45:8d:82:01:06:f2:c5:ad:a5:ac:2b:
                    c0:91:f7:2b:b6:51:dc:a7:81:c5:3e:b2:1b:6d:62:
                    54:54:00:ae:26:d1:de:0f:ea:f2:d3:08:92:94:d3:
                    4c:f2:60:67:a9:20:d1:07:d6:b4:42:cf:68:f5:d4:
                    90:7b:26:af:4e:ca:46:e3:44:3b:58:dd:6a:53:3b:
                    2a:bb:0b:c0:ec:87:f1:31:ec:62:bf:18:25:cb:b4:
                    ff:1a:ff:ce:1f:05:93:17:af:f6:96:42:8c:e7:63:
                    2d:46:80:60:99:02:4b:cc:76:f5:a0:a0:aa:d3:85:
                    22:72:f9:9f:67:cb:b4:ad:34:85:06:90:5e:dd:00:
                    d8:85:eb:e3:d7:e7:f9:30:48:f3:f5:04:03:97:9a:
                    88:7b:5e:79:20:d8:13:87:ed:dd:f7:cf:4e:cb:41:
                    78:23:68:d5:b2:f6:1d:26:60:a8:42:0e:83:72:ca:
                    72:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:29:5C:13:96:37:F3:B7:DF:AB:92:02:1D:CA:04:ED:73:7D:B4:94
            X509v3 Authority Key Identifier:
                keyid:AB:8E:82:1D:6B:CE:52:5A:F5:AF:6C:1E:FD:73:0A:56:9B:1D:D9:FF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB8E821D6BCE525AF5AF6C1EFD730A569B1DD9FF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/89KFRmafnZUv7ULkgrr6Lyhs32MYGvBq4KqLBBsKY9DW/0/323830343a356366633a3a2f33322d3438203d3e20323638393434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5cfc::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:c4:bb:16:00:87:2f:ff:91:af:11:0f:ce:0d:1a:5f:fb:cb:
         b0:e5:a1:8a:b6:a3:88:4f:b4:bd:20:fa:24:48:1e:e1:7e:ef:
         b1:b6:35:ce:d2:73:3d:ac:37:da:fd:be:2b:ac:61:e8:dd:aa:
         32:69:68:c9:73:84:9f:4a:ff:51:17:e0:f1:3f:37:8f:b0:45:
         a2:90:ef:f0:67:eb:b4:b5:92:fc:d4:2d:b2:77:df:16:7a:bb:
         63:20:b3:ac:22:8e:e4:16:af:ca:ba:37:a5:9d:31:75:12:aa:
         33:5d:83:5d:37:66:6b:4e:d5:5d:4e:09:40:d2:5b:af:d7:7a:
         e9:01:60:48:0f:ee:dc:01:b4:b5:00:20:f9:d7:02:80:88:9b:
         0d:e7:9e:70:23:2b:9f:a8:cb:64:bf:9f:c4:65:23:da:53:6a:
         2e:0c:76:2a:f1:11:b9:ff:0f:ac:b4:a1:61:a5:45:8e:da:a5:
         1c:68:95:df:da:1e:25:21:c5:59:c0:71:25:9f:6a:50:a6:00:
         d9:29:06:07:2c:e7:da:e0:d2:9f:4e:c6:3a:63:ab:8b:94:11:
         3f:f9:3a:91:82:28:9b:8b:1c:c6:99:7b:bb:07:bd:b7:20:19:
         c4:63:62:19:57:1e:58:91:00:6e:9a:f0:df:43:09:56:4f:a4:
         ec:68:cc:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:57 2024 by rpki-client on console-fra.rpki-client.org