Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3430203d3e203238333532.roa
File:                     323830343a6165303a3a2f33322d3430203d3e203238333532.roa (raw, json)
Hash identifier:          JB16G+qjYbZI7IDJc5Eoc//+1tjpeVsLPYBJJjAxu0o=
Subject key identifier:   E7:22:83:D5:35:30:BC:68:5F:00:F9:43:CF:F4:14:60:75:0C:80:D3
Certificate issuer:       /CN=68770DD8DB908120874A5AF20884A75E4E124513
Certificate serial:       1055A4CA34946429DB8823B16C7D1970BC216AB9
Authority key identifier: 68:77:0D:D8:DB:90:81:20:87:4A:5A:F2:08:84:A7:5E:4E:12:45:13
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68770DD8DB908120874A5AF20884A75E4E124513.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3430203d3e203238333532.roa
Signing time:             Mon 06 Feb 2023 14:59:42 +0000
ROA not before:           Mon 06 Feb 2023 14:54:42 +0000
ROA not after:            Mon 05 Feb 2024 14:59:42 +0000
asID:                     28352
IP address blocks:        2804:ae0::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:55:a4:ca:34:94:64:29:db:88:23:b1:6c:7d:19:70:bc:21:6a:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=68770DD8DB908120874A5AF20884A75E4E124513
        Validity
            Not Before: Feb  6 14:54:42 2023 GMT
            Not After : Feb  5 14:59:42 2024 GMT
        Subject: CN=E72283D53530BC685F00F943CFF41460750C80D3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:b4:74:96:bc:62:7c:77:4b:2b:c4:e2:52:d7:
                    c4:de:53:7f:fd:3b:ff:14:32:04:65:0d:00:de:33:
                    cc:fd:74:60:c3:96:9e:21:9c:8b:1e:75:85:2d:21:
                    a6:d5:d8:5e:a6:d0:de:89:be:6b:52:8c:b9:3e:86:
                    09:14:d8:62:c0:9a:21:72:39:11:09:c3:51:d8:1a:
                    e2:fb:05:88:ac:bf:4b:e7:e9:b5:33:04:57:20:e5:
                    f2:c4:a5:a3:c7:5e:9b:36:58:d4:65:f3:07:2e:3f:
                    a2:15:d4:81:91:de:1a:28:56:05:52:f6:7f:38:50:
                    fe:d4:40:4b:8d:91:c0:29:c7:6f:4f:b3:30:b7:9c:
                    80:36:1f:ab:2b:e9:1d:c3:33:b6:8c:96:f1:cc:0a:
                    08:8a:4b:94:ec:b1:34:83:65:bc:ac:ce:5d:35:31:
                    4b:a2:36:53:7d:8e:50:28:f0:8e:8e:e4:86:92:1e:
                    72:c1:23:1e:ee:25:df:85:85:c5:e5:1b:57:9a:4d:
                    d8:54:25:29:93:d7:83:ea:bf:e9:9b:db:0e:9f:fe:
                    e1:66:03:bc:ab:35:f6:2b:e4:05:be:13:4d:50:6c:
                    3e:5d:07:ce:81:98:e3:6d:12:f5:16:89:6d:45:2a:
                    4b:98:ff:d7:7e:6e:d5:ef:17:3f:fb:ae:fe:23:91:
                    6e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E7:22:83:D5:35:30:BC:68:5F:00:F9:43:CF:F4:14:60:75:0C:80:D3
            X509v3 Authority Key Identifier:
                keyid:68:77:0D:D8:DB:90:81:20:87:4A:5A:F2:08:84:A7:5E:4E:12:45:13

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/68770DD8DB908120874A5AF20884A75E4E124513.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/68770DD8DB908120874A5AF20884A75E4E124513.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8i686PbKLXvGcFWr6vpsyGuWt7CDw3T1XCF5mzqtoeHs/0/323830343a6165303a3a2f33322d3430203d3e203238333532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ae0::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:b7:c0:f5:ab:cc:12:2e:5e:e7:46:66:e1:d5:50:af:cf:de:
         fd:0d:e8:44:97:7d:53:b4:9a:4f:4c:30:da:ea:44:3a:29:f1:
         a2:e8:ac:99:6c:21:22:61:4f:63:5c:01:e9:59:59:de:ac:21:
         c2:63:73:e1:87:c2:6b:a8:84:e2:f9:9a:8b:46:91:a4:6c:ec:
         1f:b6:37:f1:2f:2d:21:a6:70:d7:74:9a:ca:6c:59:6f:e8:ca:
         01:44:05:7f:0d:49:b4:48:b2:15:78:00:f6:ae:73:ec:60:cc:
         30:36:12:2e:68:b5:a6:20:92:a5:3d:a5:99:ff:a8:44:6b:70:
         12:26:32:5d:00:ff:ed:c7:00:81:1a:0d:e8:34:59:29:82:d3:
         c0:77:70:c9:a8:fe:e8:1a:91:50:8d:ee:3d:f2:87:8a:57:eb:
         88:ec:d9:0c:75:6f:c9:d3:4c:43:a2:16:37:fd:49:45:a5:a1:
         5f:36:41:b0:9a:65:39:be:bf:5e:d2:e2:f2:2d:b1:c9:48:a9:
         cf:28:a9:a9:9b:5e:94:51:9e:26:75:9e:e3:c0:7f:f2:b4:0e:
         9a:70:97:84:1c:fe:34:fb:6b:f6:d5:6e:dc:77:11:b0:cc:af:
         ae:b9:dc:22:64:67:d0:ca:c4:b3:e0:be:fb:7e:bc:c9:98:2d:
         44:c5:77:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org