Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/323830343a383135633a383030303a3a2f33332d3333203d3e20323732343439.roa
File:                     323830343a383135633a383030303a3a2f33332d3333203d3e20323732343439.roa (raw, json)
Hash identifier:          E5rebaf/BeXkluGj+arqNzI/W+04QbyzZAb6UoWzGiA=
Subject key identifier:   06:37:D5:B6:5C:AC:CD:8C:95:C1:8F:34:13:A5:32:75:9E:33:C8:AC
Certificate issuer:       /CN=8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB
Certificate serial:       495BE66E2EDBC13AED926F800CD5412F878969C1
Authority key identifier: 8D:EA:A3:66:A5:02:5F:2C:71:8D:F5:BD:C1:5A:5D:48:79:1A:D3:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/323830343a383135633a383030303a3a2f33332d3333203d3e20323732343439.roa
Signing time:             Tue 23 May 2023 17:14:02 +0000
ROA not before:           Tue 23 May 2023 17:09:02 +0000
ROA not after:            Tue 21 May 2024 17:14:02 +0000
asID:                     272449
IP address blocks:        2804:815c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:5b:e6:6e:2e:db:c1:3a:ed:92:6f:80:0c:d5:41:2f:87:89:69:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB
        Validity
            Not Before: May 23 17:09:02 2023 GMT
            Not After : May 21 17:14:02 2024 GMT
        Subject: CN=0637D5B65CACCD8C95C18F3413A532759E33C8AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:b6:47:20:d6:66:b6:ef:73:76:c8:bf:99:94:
                    8c:83:a7:08:3a:d5:77:47:bb:15:ca:d3:31:46:87:
                    d1:c3:c9:10:17:e6:43:f0:7a:92:d5:d2:b2:03:80:
                    94:00:9b:85:ee:2f:fb:a1:ab:21:49:d8:5b:86:85:
                    34:e6:8a:bc:34:9d:5d:2e:36:75:54:3e:c0:cb:87:
                    3f:f0:7b:91:fa:52:d2:a9:75:2d:df:db:78:fe:82:
                    28:8e:ef:ac:b0:25:a0:1b:19:36:0c:69:9c:8a:dc:
                    c6:cc:aa:1d:d9:cd:c0:84:9e:3b:fa:1d:65:01:40:
                    d0:85:c8:dc:87:55:50:b6:77:36:b1:2c:79:58:0b:
                    b9:da:e2:82:67:94:44:28:ec:48:66:55:6d:bf:db:
                    97:00:98:a6:6b:d2:be:bd:18:89:b5:0d:e4:6f:10:
                    e8:8a:a7:09:6d:3d:4b:c5:ac:77:77:80:a1:8b:84:
                    97:59:69:7d:73:8d:a2:ad:3c:eb:38:5a:8d:c7:6b:
                    cb:c4:b8:73:a0:d3:4c:21:3f:91:7d:d1:6a:f1:1e:
                    42:78:c7:cf:81:74:d7:3e:3d:f5:1f:bd:ec:fa:9b:
                    95:f1:94:1c:a1:70:a0:9d:ed:e8:2b:9c:78:3a:9e:
                    1d:9d:99:e5:45:ed:c6:be:92:30:d5:27:55:86:e6:
                    e0:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:37:D5:B6:5C:AC:CD:8C:95:C1:8F:34:13:A5:32:75:9E:33:C8:AC
            X509v3 Authority Key Identifier:
                keyid:8D:EA:A3:66:A5:02:5F:2C:71:8D:F5:BD:C1:5A:5D:48:79:1A:D3:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DEAA366A5025F2C718DF5BDC15A5D48791AD3FB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9r5RggKk5WyYsUkqy9TxbdaBCyMZ57wyhVxzYTdEhEPS/0/323830343a383135633a383030303a3a2f33332d3333203d3e20323732343439.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:815c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         25:66:9b:a0:04:fa:a5:9a:0e:f1:15:b8:33:f9:90:a9:1b:80:
         c5:17:96:30:2f:aa:9b:d1:60:1e:51:27:53:f4:93:5e:4e:88:
         aa:b8:5d:ea:9e:e3:48:f5:95:46:87:eb:af:3c:3d:c9:c1:27:
         1c:6e:02:b5:fd:87:cb:b7:44:37:7a:81:8d:35:ad:08:04:af:
         93:44:f9:18:20:8c:ef:54:50:9b:d1:a9:3b:70:64:4a:09:86:
         95:db:2a:3a:a8:18:44:ef:ff:a0:f5:27:ec:42:6e:f9:f5:d1:
         5b:9a:b0:3c:a1:d1:45:cd:b5:dc:29:79:8a:86:6a:cd:0b:01:
         23:4b:7e:1e:5d:26:bc:ac:27:0e:c8:2f:5c:bd:05:22:2e:ef:
         94:2d:5f:88:8b:93:ce:97:72:03:ab:e6:90:3f:d7:80:ac:dc:
         af:d4:78:28:7f:bc:65:4d:f1:6a:b9:a5:d4:0a:8f:ec:5a:77:
         49:be:3f:e3:63:ac:ec:d5:c6:07:46:a9:63:fd:5a:58:59:2a:
         41:7a:5d:64:b0:fe:26:95:f1:fd:c9:67:19:21:48:ba:cf:5e:
         ed:be:a2:ae:af:3e:44:b1:28:4d:75:56:10:33:84:64:ea:ac:
         e3:e1:9d:f3:4c:f5:16:2e:c3:ab:d9:4a:6e:50:9d:c8:d2:b3:
         37:68:68:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org