Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/323830343a346664303a3a2f33322d3332203d3e20323638333531.roa
File:                     323830343a346664303a3a2f33322d3332203d3e20323638333531.roa (raw, json)
Hash identifier:          4z1ViIXhV558OjeZ+LPtkrJ2rISBfpwRkqzBQBLiEL4=
Subject key identifier:   B5:91:8D:D9:02:D5:D1:A7:30:D3:93:CD:93:B0:E8:F3:E6:D9:29:AC
Certificate issuer:       /CN=A8F61861E70F74FA63C371E61EC1B1AA5ABE5F6E
Certificate serial:       361437AAE7D0393B3DC6D00E4B75B6AC8180B711
Authority key identifier: A8:F6:18:61:E7:0F:74:FA:63:C3:71:E6:1E:C1:B1:AA:5A:BE:5F:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8F61861E70F74FA63C371E61EC1B1AA5ABE5F6E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/323830343a346664303a3a2f33322d3332203d3e20323638333531.roa
Signing time:             Wed 21 Feb 2024 18:05:49 +0000
ROA not before:           Wed 21 Feb 2024 18:00:49 +0000
ROA not after:            Wed 19 Feb 2025 18:05:49 +0000
asID:                     268351
IP address blocks:        2804:4fd0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:14:37:aa:e7:d0:39:3b:3d:c6:d0:0e:4b:75:b6:ac:81:80:b7:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8F61861E70F74FA63C371E61EC1B1AA5ABE5F6E
        Validity
            Not Before: Feb 21 18:00:49 2024 GMT
            Not After : Feb 19 18:05:49 2025 GMT
        Subject: CN=B5918DD902D5D1A730D393CD93B0E8F3E6D929AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:27:a8:01:c0:99:2b:3c:9d:45:0d:67:9d:57:
                    96:ae:12:30:1f:af:e8:37:51:a4:46:1c:ef:f2:e1:
                    7c:31:d2:23:1a:e4:6f:76:56:91:51:fe:b1:e4:30:
                    7e:54:da:aa:bf:f8:19:2b:f2:0e:37:13:5f:5b:9f:
                    52:78:13:81:0e:a2:18:2d:92:1d:1f:54:85:b3:17:
                    e2:bf:1a:4b:7a:00:0a:55:57:4a:fd:58:b1:f2:2c:
                    59:20:5a:e0:cc:06:e5:e9:15:3f:15:6d:ad:ee:9a:
                    6b:ff:ca:8e:57:d1:26:27:92:53:ee:fa:2b:56:4e:
                    6c:00:a3:e0:f7:70:6d:5a:39:b4:5e:13:3f:ca:0c:
                    d6:97:eb:8d:89:41:e8:a6:af:95:cc:40:be:69:2f:
                    c6:a5:a5:e3:29:1b:b4:ed:69:5a:37:10:6e:ec:16:
                    8d:24:02:06:43:0f:be:c2:85:0f:24:d0:44:9c:69:
                    92:8c:ea:0f:29:41:dd:97:b8:69:e6:9f:f1:9f:77:
                    1a:87:13:f0:4c:5a:a7:07:aa:01:88:6f:30:ed:ac:
                    ba:1e:ac:8a:23:f4:d0:b2:d6:65:7a:2b:9c:41:a6:
                    cd:dc:a1:47:0d:78:21:5f:0d:5b:ca:c8:2e:ec:8a:
                    87:dc:15:7f:96:8c:22:cd:29:cc:72:6b:64:2a:c0:
                    1b:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:91:8D:D9:02:D5:D1:A7:30:D3:93:CD:93:B0:E8:F3:E6:D9:29:AC
            X509v3 Authority Key Identifier:
                keyid:A8:F6:18:61:E7:0F:74:FA:63:C3:71:E6:1E:C1:B1:AA:5A:BE:5F:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/A8F61861E70F74FA63C371E61EC1B1AA5ABE5F6E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8F61861E70F74FA63C371E61EC1B1AA5ABE5F6E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HEr1tvMVpru5gU2otVZjuPX5Q8EyZjqU7dyRpGbUPHP/0/323830343a346664303a3a2f33322d3332203d3e20323638333531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         71:10:f9:5b:ee:8a:0e:bd:3e:a9:6d:fc:7f:ff:2d:72:a5:a9:
         e3:8f:1a:67:81:b0:4e:4f:7b:5f:31:ec:e6:51:37:58:d1:13:
         e3:30:15:e4:5e:e0:ce:96:96:e7:bd:08:31:8a:e6:d8:7b:a4:
         6c:e4:95:ae:67:12:0e:1c:84:33:5a:38:9b:d6:e9:5e:95:3f:
         c3:36:be:57:75:99:cc:f9:eb:55:31:15:78:f5:ad:d6:cd:10:
         e3:a9:54:bc:af:25:6f:ef:6d:48:b2:c0:fa:33:a7:d1:05:f3:
         f5:73:09:7a:b6:f0:69:00:7f:82:8f:3b:9d:c4:ab:ab:2a:31:
         fb:b3:6f:74:91:f9:cb:22:b8:88:7f:21:06:0f:d6:ad:61:2c:
         da:fa:e8:69:90:fd:45:5c:69:ca:d3:6e:97:6d:95:77:80:ae:
         04:7a:20:60:d3:73:c1:53:b3:f1:4f:3c:44:07:ba:f3:b0:42:
         d6:98:62:e0:ff:c1:66:8c:d2:ee:c6:32:d9:df:bb:85:17:86:
         f8:23:43:d1:2f:c7:ae:44:e5:e7:1a:cb:a8:19:7a:b1:be:a8:
         73:51:7d:e9:c5:97:45:6a:3d:be:04:48:64:c4:8d:85:e8:d5:
         af:d1:9b:a8:c4:a3:ce:a0:71:e4:c6:72:e6:00:b0:c3:d3:e8:
         fe:e7:ca:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:07 2024 by rpki-client on console-ams.rpki-client.org