Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/0/323830343a323762383a3a2f33322d3335203d3e20323633393138.roa
File:                     323830343a323762383a3a2f33322d3335203d3e20323633393138.roa (raw, json)
Hash identifier:          H/4GzoNiiDN0KB1io1fwrYQF6fM02v+ITfkPq8WOtXQ=
Subject key identifier:   EC:82:35:AF:BA:DB:4E:6A:77:31:9E:FA:53:E7:AA:90:7E:1E:47:5B
Certificate issuer:       /CN=AB49A4379BEF7213EEA326989186DC4319EF4C4B
Certificate serial:       7ACB0FC5927C016C3419F0504AAD53C80D1A9041
Authority key identifier: AB:49:A4:37:9B:EF:72:13:EE:A3:26:98:91:86:DC:43:19:EF:4C:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB49A4379BEF7213EEA326989186DC4319EF4C4B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/0/323830343a323762383a3a2f33322d3335203d3e20323633393138.roa
Signing time:             Tue 10 Oct 2023 21:00:01 +0000
ROA not before:           Tue 10 Oct 2023 20:55:01 +0000
ROA not after:            Tue 08 Oct 2024 21:00:01 +0000
asID:                     263918
IP address blocks:        2804:27b8::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:cb:0f:c5:92:7c:01:6c:34:19:f0:50:4a:ad:53:c8:0d:1a:90:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AB49A4379BEF7213EEA326989186DC4319EF4C4B
        Validity
            Not Before: Oct 10 20:55:01 2023 GMT
            Not After : Oct  8 21:00:01 2024 GMT
        Subject: CN=3082010A0282010100CC019E0C9AF80AA7F480A562E9D352A5852C87AC16BB0E7077788FF1C8C4ECB58C8FCD417782B00B75F424022D23FDEFAFA999B5FF4B2D0EA8175A23D9AEDD5260323C854F89D80DB51A384210F9B35FCA97382F8783F4C4359834CB0E030D1B9910F0D3CD8F03BF4CC85F5F79AF6F528D2D2111700507D180DC4373192345C911A07DB7B48684C27800986DED538151E867FDD9AD245C8829DBF6234E44810F976992AC14A62743C0B1F346A712D43233509276BDBE41A37AE76C3BCC5D020FFEAA36C477B3492E961DB3970EF2B7649B5C8FF42D461917D3E9A11C5A776D20FFED24E08680B1A44180E1F1327BF0CA728036D485748CA8FC0C8533B5108D970203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:01:9e:0c:9a:f8:0a:a7:f4:80:a5:62:e9:d3:
                    52:a5:85:2c:87:ac:16:bb:0e:70:77:78:8f:f1:c8:
                    c4:ec:b5:8c:8f:cd:41:77:82:b0:0b:75:f4:24:02:
                    2d:23:fd:ef:af:a9:99:b5:ff:4b:2d:0e:a8:17:5a:
                    23:d9:ae:dd:52:60:32:3c:85:4f:89:d8:0d:b5:1a:
                    38:42:10:f9:b3:5f:ca:97:38:2f:87:83:f4:c4:35:
                    98:34:cb:0e:03:0d:1b:99:10:f0:d3:cd:8f:03:bf:
                    4c:c8:5f:5f:79:af:6f:52:8d:2d:21:11:70:05:07:
                    d1:80:dc:43:73:19:23:45:c9:11:a0:7d:b7:b4:86:
                    84:c2:78:00:98:6d:ed:53:81:51:e8:67:fd:d9:ad:
                    24:5c:88:29:db:f6:23:4e:44:81:0f:97:69:92:ac:
                    14:a6:27:43:c0:b1:f3:46:a7:12:d4:32:33:50:92:
                    76:bd:be:41:a3:7a:e7:6c:3b:cc:5d:02:0f:fe:aa:
                    36:c4:77:b3:49:2e:96:1d:b3:97:0e:f2:b7:64:9b:
                    5c:8f:f4:2d:46:19:17:d3:e9:a1:1c:5a:77:6d:20:
                    ff:ed:24:e0:86:80:b1:a4:41:80:e1:f1:32:7b:f0:
                    ca:72:80:36:d4:85:74:8c:a8:fc:0c:85:33:b5:10:
                    8d:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:82:35:AF:BA:DB:4E:6A:77:31:9E:FA:53:E7:AA:90:7E:1E:47:5B
            X509v3 Authority Key Identifier:
                keyid:AB:49:A4:37:9B:EF:72:13:EE:A3:26:98:91:86:DC:43:19:EF:4C:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/0/AB49A4379BEF7213EEA326989186DC4319EF4C4B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AB49A4379BEF7213EEA326989186DC4319EF4C4B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9nAecW6K5ucz7ZdS3Hztykz9XvWXTmHVupvhJF9bcaqm/0/323830343a323762383a3a2f33322d3335203d3e20323633393138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5e:9d:d4:1b:94:33:c4:b0:14:51:e5:8e:ca:41:6b:d2:1a:63:
         dd:09:11:92:45:b2:b4:6f:dd:3a:f2:2b:24:86:6b:9b:f2:c0:
         8c:00:95:14:71:77:aa:b9:b4:48:cb:c0:df:00:a3:f7:08:8e:
         43:32:f3:74:e7:1a:3c:7e:3b:e4:5c:f4:fb:1d:65:28:24:83:
         fb:47:a6:6a:44:d6:71:87:a4:2d:b5:ad:09:bc:35:85:4e:29:
         33:3f:4b:91:86:f1:eb:d2:58:2f:8b:02:d0:45:07:76:c3:58:
         19:b8:70:c6:60:63:f1:a2:b4:a9:56:14:fd:54:d5:14:78:e9:
         14:af:02:53:79:d5:0f:67:5c:39:99:8a:bf:79:7c:9c:c5:62:
         b4:a0:5c:9a:48:4d:68:9d:4c:87:18:bf:b1:21:d0:68:33:4b:
         c2:82:61:2f:b6:dd:93:11:60:7f:6b:8d:61:f2:80:b1:c2:b6:
         4a:d6:96:21:00:62:c5:6c:a9:8a:19:ec:92:20:7e:76:1a:85:
         a7:74:87:3f:c6:b9:ad:ba:a8:1f:0b:c6:26:87:45:d0:e7:00:
         6b:b9:56:2d:46:18:1c:83:2c:ae:e7:9a:f6:ef:55:36:ba:fe:
         94:5e:d5:4a:19:67:3c:f6:be:8b:62:4f:99:cd:23:82:37:e7:
         f5:33:fe:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:12 2024 by rpki-client on console-ams.rpki-client.org