Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/323830343a326135303a3a2f33322d3332203d3e20323632383139.roa
File:                     323830343a326135303a3a2f33322d3332203d3e20323632383139.roa (raw, json)
Hash identifier:          Q8lzJO8j1YwyYw2AvwmMFVnYDx/84xslnXOBe9MdL9A=
Subject key identifier:   C7:51:28:75:A8:45:91:03:37:63:C2:1B:50:7E:21:F1:0D:DE:CE:01
Certificate issuer:       /CN=CF608992965DC7DE08820B93FC270DCED15124BC
Certificate serial:       7845F488ABA54AAC4FA550D7BFFADBC12939BA04
Authority key identifier: CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/323830343a326135303a3a2f33322d3332203d3e20323632383139.roa
Signing time:             Wed 09 Nov 2022 20:10:53 +0000
ROA not before:           Wed 09 Nov 2022 20:05:53 +0000
ROA not after:            Wed 08 Nov 2023 20:10:53 +0000
asID:                     262819
IP address blocks:        2804:2a50::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:45:f4:88:ab:a5:4a:ac:4f:a5:50:d7:bf:fa:db:c1:29:39:ba:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CF608992965DC7DE08820B93FC270DCED15124BC
        Validity
            Not Before: Nov  9 20:05:53 2022 GMT
            Not After : Nov  8 20:10:53 2023 GMT
        Subject: CN=C7512875A84591033763C21B507E21F10DDECE01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:7f:35:6a:97:ca:e3:08:c1:2a:ce:86:fe:39:
                    36:c9:2e:12:3f:e9:6e:5a:05:d9:27:52:00:3c:c0:
                    e0:72:11:57:63:8b:66:88:96:63:41:0b:90:76:c4:
                    c9:67:74:c0:a6:c5:db:2c:61:d3:9d:81:f9:83:29:
                    56:b4:7a:20:4b:95:ec:06:d4:fb:99:d8:01:1b:9f:
                    77:4a:81:ab:67:83:37:68:9b:7b:b3:80:de:7b:e1:
                    44:df:4e:c7:ac:3e:07:94:0c:89:12:1c:02:c2:c3:
                    f6:a8:83:39:2a:df:1e:0c:fb:b4:18:44:09:5c:eb:
                    b7:aa:55:f5:7c:b6:0a:85:e0:74:ac:b7:1c:99:17:
                    70:21:6d:e7:7d:c5:25:65:c5:62:64:5e:f4:19:da:
                    7e:fc:56:c5:1b:c6:ec:ef:9f:c9:87:62:ea:d9:1e:
                    74:ba:a8:37:ec:2d:0d:d1:5d:89:a9:6a:1d:94:d3:
                    5e:26:cd:84:8e:37:c6:50:1c:5c:ee:7e:b0:9d:1b:
                    37:67:3b:ae:0e:6f:b1:c7:de:81:ba:98:b3:bb:1a:
                    a6:f1:db:fd:bf:26:31:04:46:db:3b:1f:e2:83:13:
                    2b:e4:51:b2:46:6b:48:06:ff:4c:f9:a6:df:8d:a2:
                    6d:5a:38:b1:d0:76:98:75:35:70:0b:da:4d:08:87:
                    6f:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:51:28:75:A8:45:91:03:37:63:C2:1B:50:7E:21:F1:0D:DE:CE:01
            X509v3 Authority Key Identifier:
                keyid:CF:60:89:92:96:5D:C7:DE:08:82:0B:93:FC:27:0D:CE:D1:51:24:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/CF608992965DC7DE08820B93FC270DCED15124BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CF608992965DC7DE08820B93FC270DCED15124BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9iMKA5kriC56yZbkoNZdnfUqqmkNvkS9MmZtJnw4F2Wy/0/323830343a326135303a3a2f33322d3332203d3e20323632383139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a50::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:c8:0b:e3:74:64:a1:7e:8b:ce:1d:1b:90:a8:3f:0e:8b:86:
         7f:e1:02:10:b9:01:d9:bc:f9:70:24:32:c1:76:5c:4c:fa:31:
         dc:03:09:e0:fb:a7:6d:7e:47:92:a1:15:e3:42:69:61:af:53:
         4a:c4:e8:4a:ab:1b:c8:04:bc:5d:c7:41:82:72:77:9c:24:f3:
         6c:27:3b:bf:74:0d:5c:44:ca:fb:8e:a6:88:40:58:79:39:c6:
         51:de:d7:69:f7:41:1e:16:ae:23:ee:61:bf:be:5d:ce:67:ff:
         9c:d5:c7:f4:10:40:da:c1:49:0c:7d:ab:e9:dc:24:10:78:d0:
         de:f5:3d:43:1d:53:67:77:0d:48:78:68:d7:f4:f3:11:5b:de:
         f9:0d:2d:15:96:2f:2c:07:e3:30:2d:bf:48:ae:1d:80:11:2f:
         f5:12:ab:be:0e:c6:45:fd:89:78:2f:4f:de:e4:81:d8:bf:38:
         dc:28:b9:47:e8:15:a0:bd:5c:93:25:68:4b:a7:7f:3c:80:bb:
         60:60:28:5e:91:53:09:a2:8b:ae:c6:50:4c:ea:96:10:37:16:
         af:85:b9:c4:c5:2d:b7:c5:12:57:16:fc:d6:28:df:c6:9a:d4:
         89:e9:ce:c0:64:32:e1:05:39:16:48:26:9b:7c:f9:3a:c8:32:
         93:24:c3:b1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org