Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a3a2f33322d3332203d3e203631373236.roa
File:                     323830343a316236383a3a2f33322d3332203d3e203631373236.roa (raw, json)
Hash identifier:          v9dC7ogU8R9e7ap/FpK1wWsP4VD8UNJWREt7uQ8Mbck=
Subject key identifier:   08:6F:5F:95:86:AD:D1:B9:CF:A3:64:CE:BC:98:DF:69:6A:92:4D:55
Certificate issuer:       /CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
Certificate serial:       35435F5CBA77A024BBB1500D54270698C0383708
Authority key identifier: DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a3a2f33322d3332203d3e203631373236.roa
Signing time:             Tue 06 Feb 2024 18:22:43 +0000
ROA not before:           Tue 06 Feb 2024 18:17:43 +0000
ROA not after:            Tue 04 Feb 2025 18:22:43 +0000
asID:                     61726
IP address blocks:        2804:1b68::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:43:5f:5c:ba:77:a0:24:bb:b1:50:0d:54:27:06:98:c0:38:37:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DD0ADDE73F928E43B84E117E0F7591F247D189BD
        Validity
            Not Before: Feb  6 18:17:43 2024 GMT
            Not After : Feb  4 18:22:43 2025 GMT
        Subject: CN=086F5F9586ADD1B9CFA364CEBC98DF696A924D55
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:eb:4a:76:15:8c:12:cb:86:fa:08:ea:e1:66:
                    65:c6:25:e4:81:0c:95:8f:fd:1e:35:2f:22:da:9d:
                    53:df:6f:78:71:56:e5:6c:ed:16:b5:66:c5:ab:ca:
                    66:99:3e:cd:a6:87:c5:ae:23:c0:46:99:23:aa:74:
                    bd:c4:e2:c4:1c:08:6f:42:9e:29:ae:b4:d7:6d:bf:
                    97:8b:1f:02:26:24:1f:c4:32:ed:c1:a5:02:d4:74:
                    a0:15:91:db:f6:16:dc:41:2c:57:10:45:1a:d2:95:
                    4a:5d:0b:a1:5c:ec:c3:f4:cc:8e:d0:b2:cf:03:7a:
                    07:7d:c9:af:0d:ae:50:c7:b9:01:ec:fb:4f:e6:2d:
                    3a:b0:a5:ca:c6:d3:b8:55:35:f2:f7:83:68:af:8d:
                    8d:3e:95:22:76:e2:0d:27:41:61:ae:84:7d:9a:ba:
                    30:c4:81:4a:ef:98:08:2c:f8:17:ff:97:41:2a:79:
                    93:ad:f2:9b:76:41:dc:b9:97:ad:e5:80:7b:49:fc:
                    af:56:0c:43:3a:3e:c5:9e:7b:04:7f:bf:b5:05:bc:
                    42:60:4d:a7:9c:4b:89:55:ef:11:88:14:a1:d9:fd:
                    d4:23:75:57:1b:17:ad:f1:76:9f:49:23:35:41:61:
                    60:18:0e:8a:8c:27:80:0e:88:3a:5c:5b:6e:4f:d6:
                    e8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                08:6F:5F:95:86:AD:D1:B9:CF:A3:64:CE:BC:98:DF:69:6A:92:4D:55
            X509v3 Authority Key Identifier:
                keyid:DD:0A:DD:E7:3F:92:8E:43:B8:4E:11:7E:0F:75:91:F2:47:D1:89:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DD0ADDE73F928E43B84E117E0F7591F247D189BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8hwBY2pwUEUzp2aZuLCWh5CPWCq8r4XfYe349vgY1i5h/0/323830343a316236383a3a2f33322d3332203d3e203631373236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b68::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:fe:c7:46:4e:34:07:0c:bf:36:2a:c4:b5:c0:91:81:3c:80:
         f3:43:cb:cc:b6:83:76:ba:ab:78:cc:d0:cf:a6:87:2b:41:36:
         0e:3f:b2:e1:1a:62:44:f3:71:b9:ea:81:b6:45:80:87:96:0e:
         de:70:55:41:f1:31:17:b6:5b:09:78:c1:9f:10:84:e1:94:df:
         bc:73:4a:1e:ab:e9:f6:8f:87:e4:11:a6:d3:a6:41:87:10:4b:
         a4:c8:92:f7:68:82:0b:38:cc:5b:ab:ea:91:d6:cf:35:89:33:
         2d:e3:74:96:9b:cd:4d:7a:d0:9d:6c:fa:7c:64:d9:41:47:0c:
         d2:90:ab:6f:7f:1f:4e:17:a4:b9:fb:52:50:5c:82:fb:e9:61:
         00:9e:ec:c5:47:50:72:4f:71:fa:d1:7b:71:32:8d:cd:38:b2:
         68:be:7d:d8:31:01:12:30:f4:3f:24:18:f6:06:74:07:cb:81:
         a6:e6:e3:14:66:56:e3:71:2e:31:9e:88:d1:eb:69:88:a7:31:
         56:d3:7b:8e:41:13:b7:01:37:ac:8d:e4:b0:6d:7a:2c:27:6c:
         c3:cc:e2:2a:7d:9e:b0:3d:1c:b1:91:b3:86:b4:5f:b2:3f:6a:
         73:8c:c9:fe:4b:34:18:ee:51:ca:48:7c:dd:bc:ca:be:32:8d:
         56:fa:14:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org