Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8yQmMFZaunQDFLUsf5QpSE9Vjn7Y5vedUvWjfnq1mWGm/0/323830343a313232633a3a2f33322d3438203d3e20323633343631.roa
File:                     323830343a313232633a3a2f33322d3438203d3e20323633343631.roa (raw, json)
Hash identifier:          HK8CBK4OP9I3ae4+siYy5sQrvoOZv46ZeBj0uGHv228=
Subject key identifier:   63:80:2F:84:3E:51:55:36:B6:55:F9:8B:9F:3D:9B:24:DB:70:C8:BE
Certificate issuer:       /CN=4329180F24DF1D33ED89890D8A321F63B1E56783
Certificate serial:       1787CE59F105EBD07BACEF2FDAAD949697E85084
Authority key identifier: 43:29:18:0F:24:DF:1D:33:ED:89:89:0D:8A:32:1F:63:B1:E5:67:83
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4329180F24DF1D33ED89890D8A321F63B1E56783.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8yQmMFZaunQDFLUsf5QpSE9Vjn7Y5vedUvWjfnq1mWGm/0/323830343a313232633a3a2f33322d3438203d3e20323633343631.roa
Signing time:             Fri 13 Jan 2023 19:00:00 +0000
ROA not before:           Fri 13 Jan 2023 18:55:00 +0000
ROA not after:            Sat 13 Jan 2024 19:00:00 +0000
asID:                     263461
IP address blocks:        2804:122c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:87:ce:59:f1:05:eb:d0:7b:ac:ef:2f:da:ad:94:96:97:e8:50:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4329180F24DF1D33ED89890D8A321F63B1E56783
        Validity
            Not Before: Jan 13 18:55:00 2023 GMT
            Not After : Jan 13 19:00:00 2024 GMT
        Subject: CN=3082010A02820101009D4DCB5C92519B7DAB0D8F78FBE86B498E68AE9115CB2E1A372469D0F014F981EFA6E46EC0D364BF3FF849C91121827739476D6B404E288C389F9BC9EEFEE2F18F35814B30213A84A72768EC1102A15E988968704A6F26776C34ADA6BBF6ED3FDF20B65B7F2A53B0DD42CF992FD17D76E7023D563790C70315DC3902EE2C368BDEAC8AC9B0BB4986CA9131144423BB04E26846A1801611D3496FBC57337DE0996852F582F4A8B4FEDF3363DE5EBC3CD908EF9FF5292A116D3C4BA89133235751F832E123F8955D98C2BA4E00DA922D4AE061A5922373BD54E0CED4125D41DCB4128AFED30BAD86BD0C4207680C2CFEF8527B1502FB46983A8B3EC5862011E2CB0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:4d:cb:5c:92:51:9b:7d:ab:0d:8f:78:fb:e8:
                    6b:49:8e:68:ae:91:15:cb:2e:1a:37:24:69:d0:f0:
                    14:f9:81:ef:a6:e4:6e:c0:d3:64:bf:3f:f8:49:c9:
                    11:21:82:77:39:47:6d:6b:40:4e:28:8c:38:9f:9b:
                    c9:ee:fe:e2:f1:8f:35:81:4b:30:21:3a:84:a7:27:
                    68:ec:11:02:a1:5e:98:89:68:70:4a:6f:26:77:6c:
                    34:ad:a6:bb:f6:ed:3f:df:20:b6:5b:7f:2a:53:b0:
                    dd:42:cf:99:2f:d1:7d:76:e7:02:3d:56:37:90:c7:
                    03:15:dc:39:02:ee:2c:36:8b:de:ac:8a:c9:b0:bb:
                    49:86:ca:91:31:14:44:23:bb:04:e2:68:46:a1:80:
                    16:11:d3:49:6f:bc:57:33:7d:e0:99:68:52:f5:82:
                    f4:a8:b4:fe:df:33:63:de:5e:bc:3c:d9:08:ef:9f:
                    f5:29:2a:11:6d:3c:4b:a8:91:33:23:57:51:f8:32:
                    e1:23:f8:95:5d:98:c2:ba:4e:00:da:92:2d:4a:e0:
                    61:a5:92:23:73:bd:54:e0:ce:d4:12:5d:41:dc:b4:
                    12:8a:fe:d3:0b:ad:86:bd:0c:42:07:68:0c:2c:fe:
                    f8:52:7b:15:02:fb:46:98:3a:8b:3e:c5:86:20:11:
                    e2:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:80:2F:84:3E:51:55:36:B6:55:F9:8B:9F:3D:9B:24:DB:70:C8:BE
            X509v3 Authority Key Identifier:
                keyid:43:29:18:0F:24:DF:1D:33:ED:89:89:0D:8A:32:1F:63:B1:E5:67:83

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8yQmMFZaunQDFLUsf5QpSE9Vjn7Y5vedUvWjfnq1mWGm/0/4329180F24DF1D33ED89890D8A321F63B1E56783.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4329180F24DF1D33ED89890D8A321F63B1E56783.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8yQmMFZaunQDFLUsf5QpSE9Vjn7Y5vedUvWjfnq1mWGm/0/323830343a313232633a3a2f33322d3438203d3e20323633343631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:122c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2e:61:2e:32:ed:de:65:60:2f:1e:37:39:b2:7a:3f:90:fa:67:
         78:f3:fb:f8:dd:99:cf:96:ab:94:cb:8d:34:e2:25:62:52:e0:
         a7:02:0f:77:7b:75:35:3a:a6:10:b4:4d:56:1b:37:1c:bd:f2:
         dc:2c:80:9a:68:e1:70:6a:a2:08:7f:39:db:b2:c9:cd:15:0b:
         a0:d1:35:5b:25:a1:c5:56:8f:fe:9b:0e:c2:56:20:14:d2:02:
         2f:cb:c1:b3:03:74:8d:62:2a:55:18:8e:c8:19:fe:09:4c:25:
         52:d0:3c:18:ab:f7:22:0c:a2:da:62:d1:ee:3e:22:c6:4a:61:
         04:27:92:ee:bc:6a:ca:c9:55:9d:2c:1d:03:83:e2:82:1d:3b:
         21:ba:bf:92:9f:85:27:d3:5e:96:b1:73:80:54:e1:8e:f4:df:
         fb:02:bf:ff:f4:cb:93:1b:e1:f4:29:c0:6e:7c:c4:79:d0:07:
         49:c8:35:c7:2b:4a:9a:95:02:e7:f7:f7:94:d2:9a:9e:3e:e9:
         84:50:75:51:cb:d4:dc:49:bf:65:e2:2c:04:99:55:87:98:b6:
         33:36:dd:d2:4f:72:2a:4a:56:c2:2d:44:af:2d:3d:02:d0:72:
         38:31:81:5e:75:20:a8:62:72:fc:34:29:ae:a1:1e:30:b7:57:
         72:b2:82:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org