Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/323830343a343031343a3a2f33322d3332203d3e20323635393333.roa
File:                     323830343a343031343a3a2f33322d3332203d3e20323635393333.roa (raw, json)
Hash identifier:          yCTVkLi63FbvNtdYgDSXPqFHAToi7AfMFbJwxrKK9fE=
Subject key identifier:   89:73:C8:80:F7:FD:6B:89:CB:CF:C8:D6:BC:FB:56:9B:EA:D1:A4:61
Certificate issuer:       /CN=37FD977CDE44223390A6F44F0C91E67DE37D0E6E
Certificate serial:       0286D454244D528EAB30C755852F8C817A79EE29
Authority key identifier: 37:FD:97:7C:DE:44:22:33:90:A6:F4:4F:0C:91:E6:7D:E3:7D:0E:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37FD977CDE44223390A6F44F0C91E67DE37D0E6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/323830343a343031343a3a2f33322d3332203d3e20323635393333.roa
Signing time:             Tue 19 Sep 2023 13:26:27 +0000
ROA not before:           Tue 19 Sep 2023 13:21:27 +0000
ROA not after:            Tue 17 Sep 2024 13:26:27 +0000
asID:                     265933
IP address blocks:        2804:4014::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:86:d4:54:24:4d:52:8e:ab:30:c7:55:85:2f:8c:81:7a:79:ee:29
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37FD977CDE44223390A6F44F0C91E67DE37D0E6E
        Validity
            Not Before: Sep 19 13:21:27 2023 GMT
            Not After : Sep 17 13:26:27 2024 GMT
        Subject: CN=8973C880F7FD6B89CBCFC8D6BCFB569BEAD1A461
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:ae:1e:47:10:6d:e8:6b:54:9f:f5:1c:e1:09:
                    88:85:0f:c6:79:90:2e:8b:1e:0f:8a:e0:7c:8b:3e:
                    81:cd:79:82:9f:99:33:a6:b4:2a:92:27:0c:cb:ae:
                    a9:0b:27:ab:87:80:b2:e4:ec:28:b0:23:8e:6e:76:
                    4e:bb:a4:36:ed:98:9f:95:c8:74:e6:99:ac:80:3d:
                    ab:f3:9b:68:aa:b4:81:2e:ae:9d:5c:ae:9e:31:f4:
                    a2:83:e6:67:94:2d:cd:fa:26:93:75:a8:52:2e:36:
                    a4:55:16:2f:5e:46:80:18:11:d8:11:91:86:69:75:
                    6a:04:b7:c0:c7:23:07:cd:12:f6:66:d3:f6:85:17:
                    38:31:2e:f3:cc:d4:e4:8f:54:50:29:b7:00:44:cf:
                    1a:e0:2f:12:50:c7:49:e7:8d:f1:e3:70:b8:78:13:
                    19:e9:c8:ed:64:12:0f:30:de:65:73:09:bf:eb:ce:
                    79:b2:b7:9d:95:04:5a:a6:74:06:62:ff:26:d4:6a:
                    13:a1:5c:31:ee:fc:64:60:75:fd:df:8c:68:5a:44:
                    21:75:11:38:43:5d:b6:1f:11:10:4a:c1:55:e5:fe:
                    5c:50:20:62:3e:31:da:0a:b8:73:67:ad:a1:3b:1f:
                    02:ce:de:b6:0e:79:ff:44:ea:e9:8b:f1:67:e2:1d:
                    76:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:73:C8:80:F7:FD:6B:89:CB:CF:C8:D6:BC:FB:56:9B:EA:D1:A4:61
            X509v3 Authority Key Identifier:
                keyid:37:FD:97:7C:DE:44:22:33:90:A6:F4:4F:0C:91:E6:7D:E3:7D:0E:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/37FD977CDE44223390A6F44F0C91E67DE37D0E6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37FD977CDE44223390A6F44F0C91E67DE37D0E6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8YNnQuA5MGYj1JWpEPxUTKHY9fGiivdt7YbCyaBintDq/1/323830343a343031343a3a2f33322d3332203d3e20323635393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4014::/32

    Signature Algorithm: sha256WithRSAEncryption
         29:1f:b9:69:f4:c3:53:e2:2c:a3:76:03:03:fd:0f:bd:c0:8e:
         0d:2f:97:0b:27:b9:80:f3:78:70:b9:7e:d9:cc:a7:d9:be:b4:
         bc:fe:21:7b:6f:44:02:b6:a6:bb:19:14:80:dc:94:4f:4b:4a:
         3d:b5:4c:d1:06:63:32:00:a3:a8:61:86:49:5d:28:d9:d7:7d:
         83:19:b7:38:a8:57:4a:98:c0:f4:46:96:3d:bc:e8:7f:78:f3:
         bd:4e:ea:db:47:00:42:c6:39:c9:f9:79:f5:c5:82:1a:74:44:
         2c:1c:fe:ea:5e:ff:8d:71:d3:7c:75:d3:c5:85:45:a9:4b:59:
         47:2d:65:1d:cc:e6:ca:fb:fa:dd:2f:e3:c1:71:04:62:5b:b6:
         23:58:d7:df:82:15:91:d0:f0:c1:ec:02:98:22:b3:4e:0e:f7:
         52:4c:5b:d3:ff:cc:2f:34:38:b1:ae:14:c8:42:15:2e:a4:78:
         aa:fa:a5:cd:ea:d8:b8:75:aa:7f:0c:40:a4:0f:5f:8f:10:97:
         33:ca:50:1f:f3:72:f6:75:c9:a2:2f:5c:24:15:11:c7:d8:8d:
         d5:c0:53:47:f6:8c:35:3b:bd:b3:94:46:07:fe:47:26:42:35:
         93:e6:05:7d:44:09:82:05:f7:d1:9b:5a:75:f1:bb:88:62:b7:
         5e:81:84:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org