Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33322d3438203d3e203631373736.roa
File:                     323830343a313932633a3a2f33322d3438203d3e203631373736.roa (raw, json)
Hash identifier:          b4ljt6qOOcI80Bh1g+kHzezogywpumsQhlGblxOdf10=
Subject key identifier:   F4:B7:8D:25:EB:D3:DE:0E:26:AC:B6:C3:F6:01:7E:AE:F2:96:55:09
Certificate issuer:       /CN=D5AC9B9277A1EBF21D85A281540155F60527A721
Certificate serial:       41B7F43419A09BFCD7933BEBD2DD5A72839BA24C
Authority key identifier: D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33322d3438203d3e203631373736.roa
Signing time:             Tue 12 Dec 2023 17:01:37 +0000
ROA not before:           Tue 12 Dec 2023 16:56:37 +0000
ROA not after:            Tue 10 Dec 2024 17:01:37 +0000
asID:                     61776
IP address blocks:        2804:192c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:b7:f4:34:19:a0:9b:fc:d7:93:3b:eb:d2:dd:5a:72:83:9b:a2:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D5AC9B9277A1EBF21D85A281540155F60527A721
        Validity
            Not Before: Dec 12 16:56:37 2023 GMT
            Not After : Dec 10 17:01:37 2024 GMT
        Subject: CN=F4B78D25EBD3DE0E26ACB6C3F6017EAEF2965509
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:8c:22:21:36:d7:33:c1:16:2b:cb:d4:38:96:
                    38:c0:9a:8d:b3:9e:14:ad:18:4e:af:8a:2a:ec:3b:
                    7b:6a:a3:c8:9e:d1:67:2d:c7:a0:1a:7c:6f:53:6d:
                    51:7f:1c:11:8f:15:e6:08:6d:bd:79:f7:da:75:80:
                    f5:b7:b8:eb:25:8b:c3:48:9a:5c:48:ae:d7:3f:3f:
                    a8:12:36:45:ed:69:8f:8b:ca:08:d9:6c:7e:4c:e1:
                    15:75:25:e2:0b:13:d5:04:8d:d6:d0:3e:b4:54:db:
                    82:ed:76:f4:3f:53:ac:aa:42:98:af:3e:34:fc:21:
                    18:1c:15:a8:a5:04:4b:8f:8d:79:e4:54:58:3a:5c:
                    97:64:36:b2:d8:73:a8:21:7a:cd:a9:c3:ca:e7:4a:
                    21:26:9a:05:8c:3d:0c:b3:34:11:e4:1d:e5:87:cc:
                    d1:4d:99:1d:dc:cc:47:27:e1:69:50:c8:f6:37:43:
                    85:31:a1:45:7a:3e:4b:ac:dd:fc:92:d5:93:42:a7:
                    0d:33:2e:c4:d0:26:9b:7c:bd:5b:cc:7b:c4:bf:93:
                    25:c4:54:1e:73:a6:4c:71:cd:43:c1:88:ca:1a:b0:
                    f3:23:9f:9d:05:67:23:a8:da:0d:a5:1c:51:30:78:
                    6e:3d:c0:d7:92:72:45:65:38:19:75:ba:44:02:13:
                    bd:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F4:B7:8D:25:EB:D3:DE:0E:26:AC:B6:C3:F6:01:7E:AE:F2:96:55:09
            X509v3 Authority Key Identifier:
                keyid:D5:AC:9B:92:77:A1:EB:F2:1D:85:A2:81:54:01:55:F6:05:27:A7:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/D5AC9B9277A1EBF21D85A281540155F60527A721.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D5AC9B9277A1EBF21D85A281540155F60527A721.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8MAymV989sX8kqJSfKPaWvFJaVGLivjYbnT9RtWAtRqf/0/323830343a313932633a3a2f33322d3438203d3e203631373736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:192c::/32

    Signature Algorithm: sha256WithRSAEncryption
         76:1e:cb:72:92:3d:fe:ad:4a:73:10:77:20:8a:54:80:38:4e:
         ea:7a:cc:dc:6c:30:16:4f:5a:2d:38:ef:f6:73:d9:85:18:5b:
         87:b7:db:2d:6d:40:cf:19:99:b8:c9:0b:02:c5:6b:48:b3:da:
         ef:4e:91:4a:28:ee:c9:1d:be:ba:2b:86:02:99:df:d9:02:be:
         a7:67:fa:c4:7b:d6:57:8f:bc:10:7e:05:22:5d:ae:fa:f9:43:
         d2:6f:4a:c7:b1:f9:21:77:04:82:cd:d2:2c:4a:d8:bf:44:3f:
         93:6e:a1:4b:88:f9:82:7e:4a:84:0a:9c:e1:3d:f9:45:6f:35:
         ee:32:f5:a2:7e:0b:24:79:bb:2d:20:d0:d2:75:93:2c:14:80:
         06:b7:ab:86:2a:5e:89:83:31:8b:0b:1e:ff:58:3b:e9:6a:f9:
         02:40:41:13:7d:f8:e8:68:11:9b:9d:16:a6:df:ff:cd:ec:e3:
         e8:7f:ca:7f:4f:c2:f7:57:ed:d3:44:1b:d5:8b:6a:e7:a4:ed:
         3b:8f:75:cd:00:d2:c8:e2:d6:d4:44:31:e8:2a:0c:17:56:f1:
         05:86:02:89:2b:49:74:90:93:7a:73:6c:be:c2:63:eb:a1:fe:
         8a:e2:f6:9f:22:d3:a1:c2:c6:d2:56:f3:8e:c6:41:35:f2:1f:
         7a:d1:5d:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org