Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a3763633a3a2f33322d3536203d3e203238363639.roa
File:                     323830343a3763633a3a2f33322d3536203d3e203238363639.roa (raw, json)
Hash identifier:          +K421D/RxUOKQBReSE7RCHgKUR4zWXCuz6hB4AQ6pLo=
Subject key identifier:   1E:14:4C:44:F4:81:A0:C1:9D:3D:93:1C:90:5B:D1:7D:E1:78:EB:77
Certificate issuer:       /CN=7ABB6B59054A649CACCC9CEA32D96A4D579F1370
Certificate serial:       18AA1EE75C8E7EBB80CCDB1C052C61D7B84A4C65
Authority key identifier: 7A:BB:6B:59:05:4A:64:9C:AC:CC:9C:EA:32:D9:6A:4D:57:9F:13:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ABB6B59054A649CACCC9CEA32D96A4D579F1370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a3763633a3a2f33322d3536203d3e203238363639.roa
Signing time:             Thu 01 Jun 2023 17:50:29 +0000
ROA not before:           Thu 01 Jun 2023 17:45:29 +0000
ROA not after:            Thu 30 May 2024 17:50:29 +0000
asID:                     28669
IP address blocks:        2804:7cc::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:aa:1e:e7:5c:8e:7e:bb:80:cc:db:1c:05:2c:61:d7:b8:4a:4c:65
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABB6B59054A649CACCC9CEA32D96A4D579F1370
        Validity
            Not Before: Jun  1 17:45:29 2023 GMT
            Not After : May 30 17:50:29 2024 GMT
        Subject: CN=1E144C44F481A0C19D3D931C905BD17DE178EB77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:76:d3:7a:39:95:23:ec:5d:cd:d9:2c:c7:e1:
                    be:91:64:b5:fc:33:59:8c:94:ab:26:6c:f6:a7:11:
                    e3:e4:0a:ff:cb:dd:75:5a:65:3d:56:7f:2c:55:79:
                    92:eb:3e:16:d0:1c:46:4b:a2:9c:2b:b7:d8:8e:28:
                    b8:0a:a5:b1:68:9e:8a:8c:49:b8:05:77:2b:aa:e8:
                    f6:4f:45:53:40:e7:09:53:56:33:52:9a:64:f6:09:
                    80:58:0a:ab:a7:72:1f:63:4f:81:1c:86:3b:36:17:
                    29:d2:51:c4:2b:11:17:4c:82:2a:09:6c:8a:f4:c8:
                    5a:a6:d9:45:2d:26:be:e7:cc:ff:4e:49:2d:41:67:
                    f1:6a:af:6b:43:f1:05:2e:64:bb:a1:9f:eb:d5:b0:
                    55:5d:f3:aa:5a:00:37:af:5d:7e:7b:2c:3e:73:28:
                    3f:bc:ee:3d:e5:cf:81:90:fa:4b:83:f3:72:e0:b9:
                    dd:bf:08:08:a0:1f:26:4e:69:8a:24:68:df:66:33:
                    53:c2:4f:d1:c1:4c:be:88:2c:8a:96:91:6f:4b:a5:
                    db:8d:36:c3:d3:63:1d:c3:28:29:42:13:22:14:a7:
                    4d:73:4e:6f:fb:c8:9f:a5:31:53:72:07:dc:16:de:
                    c8:83:db:6b:07:24:e7:5c:c3:2d:ea:a6:76:f2:39:
                    27:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:14:4C:44:F4:81:A0:C1:9D:3D:93:1C:90:5B:D1:7D:E1:78:EB:77
            X509v3 Authority Key Identifier:
                keyid:7A:BB:6B:59:05:4A:64:9C:AC:CC:9C:EA:32:D9:6A:4D:57:9F:13:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/7ABB6B59054A649CACCC9CEA32D96A4D579F1370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ABB6B59054A649CACCC9CEA32D96A4D579F1370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a3763633a3a2f33322d3536203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:b3:90:26:8f:d4:2f:6e:ab:dc:d1:55:bd:05:0c:de:91:e2:
         90:c6:50:73:36:10:b0:63:16:02:59:17:b5:5f:2d:b3:22:8c:
         1e:80:9c:9f:3d:56:1b:f2:af:1c:7b:08:27:e9:28:aa:ec:46:
         bd:85:1e:00:26:e1:ad:84:78:98:5e:ca:09:68:40:a1:11:b1:
         a7:0b:ae:66:14:43:80:7b:96:a4:6b:d3:3d:88:da:af:b6:34:
         90:ad:cd:68:20:31:fb:c4:4c:c7:ab:0b:ee:76:54:14:c0:19:
         fd:83:35:52:81:87:99:ab:e2:3e:ce:89:4e:41:29:9f:7d:2e:
         3d:c7:e9:55:a2:5a:85:62:20:8a:c4:ed:26:42:b0:c0:70:bd:
         3c:ac:cf:61:8d:76:ca:62:2b:ea:83:39:92:9f:ab:b8:98:71:
         d7:e9:a7:ad:bf:cb:04:f5:1c:8e:0e:ca:3c:4f:75:d5:1c:e2:
         9c:18:ac:b8:a2:44:aa:10:a0:ae:3f:e9:3a:96:dd:2a:35:70:
         51:48:58:81:c4:6e:ec:63:a0:65:84:c6:96:25:51:51:e0:8c:
         8f:ad:89:9f:1c:62:74:63:20:b8:4c:70:f4:2d:f0:53:bf:d8:
         90:63:59:6e:7b:76:97:d5:6d:73:13:31:7e:97:87:56:97:bb:
         bb:cb:33:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org