Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3a2f34302d3430203d3e20323635313831.roa
File:                     323830343a326264633a3a2f34302d3430203d3e20323635313831.roa (raw, json)
Hash identifier:          N3Vu8CyUnf/J9MDGgJ5W18CRffdAQ08rIdon9BnxkJI=
Subject key identifier:   00:69:3B:70:C0:EA:3A:41:B1:47:9F:4D:68:E2:63:C8:A7:E5:42:0B
Certificate issuer:       /CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
Certificate serial:       67877AB702C63BCB4D165C7E9656ED48113DBD0D
Authority key identifier: D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3a2f34302d3430203d3e20323635313831.roa
Signing time:             Fri 02 Feb 2024 00:15:25 +0000
ROA not before:           Fri 02 Feb 2024 00:10:25 +0000
ROA not after:            Fri 31 Jan 2025 00:15:25 +0000
asID:                     265181
IP address blocks:        2804:2bdc::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:87:7a:b7:02:c6:3b:cb:4d:16:5c:7e:96:56:ed:48:11:3d:bd:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D62223BCA44D4E6ABCF86B0FAA1734C037B11445
        Validity
            Not Before: Feb  2 00:10:25 2024 GMT
            Not After : Jan 31 00:15:25 2025 GMT
        Subject: CN=00693B70C0EA3A41B1479F4D68E263C8A7E5420B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:c1:ea:dd:8d:75:f7:2b:b7:00:16:52:9a:7d:
                    15:d8:aa:7d:c1:d4:13:1d:8c:da:4d:a4:10:b4:49:
                    06:c3:a2:80:26:7e:7f:80:86:6e:21:57:c5:63:97:
                    f9:dc:2a:a1:fa:56:cc:32:8a:f5:16:30:53:fa:30:
                    0a:0e:78:05:59:6d:1e:7b:6b:95:68:e3:d9:5a:2f:
                    08:4c:7f:16:34:ee:53:07:96:e6:69:67:20:2b:a0:
                    1a:33:a5:76:1f:2a:96:3d:92:4e:a9:35:d4:0e:c6:
                    97:bc:26:f3:9c:fb:75:b5:45:4f:b2:cd:49:8d:94:
                    58:ac:18:7e:f1:e2:c0:d2:9e:6d:ab:e0:d7:f2:99:
                    b6:a3:f7:22:31:84:f8:63:aa:15:65:4b:b7:5e:e7:
                    d3:cc:8b:f1:e3:6d:6e:d5:f8:c9:42:f9:52:c5:66:
                    d1:ee:75:8e:9b:49:1b:84:ad:8d:e7:8e:10:b2:54:
                    6c:c5:82:e0:0b:cc:d6:d1:01:b4:5b:18:fc:4d:f6:
                    06:1f:ee:89:e8:c0:22:9a:d9:d5:c5:4a:79:94:76:
                    ae:e9:b5:1a:e2:aa:b1:7d:cb:a3:43:24:bb:36:fb:
                    c8:9f:1e:8a:27:4b:68:55:f9:b9:f7:de:c6:95:47:
                    70:fd:cb:9d:cc:02:82:b9:96:2d:47:82:25:71:d3:
                    f1:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:69:3B:70:C0:EA:3A:41:B1:47:9F:4D:68:E2:63:C8:A7:E5:42:0B
            X509v3 Authority Key Identifier:
                keyid:D6:22:23:BC:A4:4D:4E:6A:BC:F8:6B:0F:AA:17:34:C0:37:B1:14:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D62223BCA44D4E6ABCF86B0FAA1734C037B11445.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kh4oLkdCKbKaq5gukMhKdTwsmioRGv5JMcTZstSLyww/0/323830343a326264633a3a2f34302d3430203d3e20323635313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2bdc::/40

    Signature Algorithm: sha256WithRSAEncryption
         99:a0:25:fe:2c:13:71:a7:1c:18:86:01:61:5c:62:3a:d4:f6:
         99:fd:55:22:52:86:1f:5e:44:5a:64:07:d7:82:ca:22:00:52:
         38:c7:b4:31:f6:06:89:f8:c4:74:54:d6:5a:eb:2d:78:82:ad:
         d9:e8:3f:9f:80:5d:f6:4e:9d:91:5a:61:9f:e7:f3:59:20:4b:
         d8:de:39:a8:a8:72:da:1d:67:0f:94:92:9c:d0:2d:8c:f7:94:
         56:5d:3c:0d:57:8b:1a:e3:29:02:05:05:c1:eb:ff:db:7b:65:
         82:56:3a:1f:f4:a3:92:eb:bf:85:22:d4:e2:7f:55:7b:c7:d8:
         f9:03:0c:c6:62:a7:f7:84:73:8b:e3:0f:7a:3f:1f:2a:04:45:
         ba:ca:38:b0:ec:3c:7d:cc:b7:d6:1d:5e:86:0e:4b:be:04:91:
         8b:be:58:b6:59:3f:39:2e:a3:29:8a:13:4f:0b:17:69:7b:2b:
         c8:fa:cf:05:31:46:5f:33:2c:38:30:4a:f6:d7:9c:1e:11:f7:
         20:2f:68:1f:c3:0b:39:66:88:a7:dc:f3:19:40:dc:14:37:16:
         d4:a1:42:91:44:97:82:0d:93:a4:9e:b9:e6:bf:88:14:ed:41:
         ea:ad:92:a2:04:5f:08:4d:16:a6:0d:79:18:6f:07:1e:c0:a7:
         1f:fa:09:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org