Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/323830343a326563303a383030303a3a2f33332d3333203d3e20323635333634.roa
File:                     323830343a326563303a383030303a3a2f33332d3333203d3e20323635333634.roa (raw, json)
Hash identifier:          d+i1gi/8qO6fnEe6TJUQLlJ0O6F9k17QYIyFu3x4eEc=
Subject key identifier:   79:16:3A:74:74:DA:A6:66:76:63:73:F5:96:F1:08:5C:18:00:35:D1
Certificate issuer:       /CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
Certificate serial:       2CDD17388C5009C34647D5F1BE40A3A6FA9871AA
Authority key identifier: 95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/323830343a326563303a383030303a3a2f33332d3333203d3e20323635333634.roa
Signing time:             Fri 28 Jul 2023 17:42:26 +0000
ROA not before:           Fri 28 Jul 2023 17:37:26 +0000
ROA not after:            Fri 26 Jul 2024 17:42:26 +0000
asID:                     265364
IP address blocks:        2804:2ec0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:dd:17:38:8c:50:09:c3:46:47:d5:f1:be:40:a3:a6:fa:98:71:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=952A85BFC0E691CB7CE10742B5260602B9A8A0BA
        Validity
            Not Before: Jul 28 17:37:26 2023 GMT
            Not After : Jul 26 17:42:26 2024 GMT
        Subject: CN=79163A7474DAA666766373F596F1085C180035D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:f5:94:60:62:5e:1c:00:e9:5d:78:22:a1:
                    67:4c:e6:7b:2e:76:75:f4:33:94:aa:dd:5a:ef:47:
                    70:f1:a8:0f:7d:73:d4:2e:18:47:ea:8b:ac:9d:53:
                    17:24:3a:27:74:40:2b:90:17:e5:50:a4:e9:1f:46:
                    9d:ce:0d:3c:5a:d8:8b:b4:6f:d8:61:fa:0c:44:14:
                    43:c0:37:ce:6b:4f:31:66:a8:7e:dc:59:0a:50:ca:
                    ad:12:4d:fe:a8:66:89:46:05:69:4a:3e:7f:a2:49:
                    97:3c:67:3d:2f:74:e4:94:90:66:8e:cf:91:bc:d8:
                    de:55:4f:62:68:70:62:e2:f3:ff:58:e1:04:9e:d5:
                    5d:f0:f5:de:b8:7f:cd:3a:03:86:df:40:cf:24:97:
                    ca:3d:8b:f6:c3:83:e3:07:4f:9f:03:7d:42:c8:3f:
                    5f:a4:ee:2f:08:e5:a4:9c:5c:4e:37:3f:f8:a9:46:
                    0b:e9:05:dd:b6:da:5b:1d:1b:48:68:c0:74:03:f6:
                    4f:20:b5:32:76:ff:4f:ae:ab:3f:56:0b:2b:4b:b1:
                    22:ea:ea:8b:bc:4d:3b:90:c3:67:a7:ca:54:a8:9c:
                    44:46:f6:d2:ba:72:59:2f:0b:9f:6f:d6:28:96:b1:
                    45:4d:9d:f9:9c:45:85:72:e6:c3:10:5f:03:c8:df:
                    c5:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:16:3A:74:74:DA:A6:66:76:63:73:F5:96:F1:08:5C:18:00:35:D1
            X509v3 Authority Key Identifier:
                keyid:95:2A:85:BF:C0:E6:91:CB:7C:E1:07:42:B5:26:06:02:B9:A8:A0:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/952A85BFC0E691CB7CE10742B5260602B9A8A0BA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9huE2jD6Jv4vnASBGbuM9pfgFBTZ7siKkBX8bap7YnJb/0/323830343a326563303a383030303a3a2f33332d3333203d3e20323635333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ec0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         ac:75:ac:65:b0:bb:d2:68:11:0c:57:70:ed:61:61:1e:6c:31:
         30:67:43:72:dd:4a:c1:0f:7d:4b:87:fd:2b:e0:32:50:5a:f6:
         29:d1:3d:51:b8:71:b6:eb:0a:de:03:79:db:34:52:70:82:92:
         f5:a6:81:63:9d:6c:3a:e1:fc:9b:1d:08:0d:12:59:c7:0c:eb:
         1e:bd:10:9b:68:d7:6d:73:7f:f2:40:bc:35:9b:f7:fd:ce:0a:
         3c:fe:da:11:06:e2:65:f0:38:82:a2:13:4a:5d:73:c3:4c:1d:
         4c:9b:95:68:1a:81:8e:6b:9a:b4:36:a9:8c:1b:dc:5f:9f:d7:
         38:4d:58:55:b3:4e:5c:9a:70:47:ff:3c:e8:5f:27:a4:f0:4f:
         13:b9:28:f6:21:50:23:dc:9c:fb:30:35:21:c2:aa:b9:1d:74:
         cd:39:c5:fe:21:4b:2e:da:e7:4c:b6:cc:98:1f:03:37:c9:69:
         60:3a:22:cd:5a:03:75:14:ea:67:86:dc:bb:61:bb:8c:f8:2f:
         ef:a8:8d:31:98:b0:7f:54:41:03:8e:2d:82:6a:bf:64:3c:1c:
         c1:fb:b0:1e:d3:98:d3:dd:d3:8a:e1:97:18:b1:a8:17:47:41:
         c6:bd:02:6d:29:e3:63:60:87:c6:23:7c:ac:98:81:a9:45:1b:
         76:14:07:70
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org