Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/323830343a386563303a383030303a3a2f33332d3333203d3e203532353837.roa
File:                     323830343a386563303a383030303a3a2f33332d3333203d3e203532353837.roa (raw, json)
Hash identifier:          TvD6A/g3Jq1FAEV1K6jnp5tOt2P8BYdYFDdXiwM8e1g=
Subject key identifier:   CD:CF:8C:B9:82:FE:D0:6B:0A:A4:59:0C:35:34:16:B4:2F:47:B8:77
Certificate issuer:       /CN=78588D531B2F637866CA4E230867722DEA2BE617
Certificate serial:       03962C20F68682CC538641DD08E07A2131BC1DE9
Authority key identifier: 78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/323830343a386563303a383030303a3a2f33332d3333203d3e203532353837.roa
Signing time:             Sat 17 Feb 2024 12:01:44 +0000
ROA not before:           Sat 17 Feb 2024 11:56:44 +0000
ROA not after:            Sat 15 Feb 2025 12:01:44 +0000
asID:                     52587
IP address blocks:        2804:8ec0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:96:2c:20:f6:86:82:cc:53:86:41:dd:08:e0:7a:21:31:bc:1d:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=78588D531B2F637866CA4E230867722DEA2BE617
        Validity
            Not Before: Feb 17 11:56:44 2024 GMT
            Not After : Feb 15 12:01:44 2025 GMT
        Subject: CN=CDCF8CB982FED06B0AA4590C353416B42F47B877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:db:f1:55:37:99:7f:ff:12:2e:95:1b:43:b2:
                    6b:0d:3b:8e:8c:8e:5c:f0:10:9e:7d:b8:0d:0f:e4:
                    59:48:b8:f3:fd:33:c7:ed:8a:00:06:02:8e:ed:34:
                    8f:38:a9:c5:0a:90:e8:14:5b:84:77:60:77:b5:3f:
                    d4:d1:06:ad:29:dd:05:9a:aa:ef:46:2e:38:43:0f:
                    2b:3a:c4:2f:9f:f6:ca:8a:09:00:2d:a2:09:7e:ea:
                    eb:de:5d:d1:c7:1e:00:1d:bb:96:51:ef:fb:07:39:
                    0a:aa:e9:25:e9:6d:a0:3d:d5:14:03:93:a5:d2:61:
                    e5:88:87:0d:b5:22:35:8f:eb:43:62:38:b2:43:79:
                    92:59:2b:43:5e:38:84:c4:3c:7a:e5:df:c1:c0:f7:
                    44:82:2b:de:cb:47:96:79:06:7e:d1:47:e1:44:63:
                    91:23:df:87:e6:20:17:52:91:e8:12:1f:58:83:f2:
                    25:72:f6:93:33:34:4d:94:a9:59:36:d0:30:55:e5:
                    89:94:53:36:dd:68:63:56:0e:1c:67:44:d9:ec:9a:
                    7f:1d:b1:1f:df:18:9c:70:25:6a:06:8f:ee:e3:7f:
                    d2:f6:76:32:82:5c:fb:94:b8:75:d6:b2:bc:66:94:
                    d6:fc:9a:b2:94:17:e2:61:58:89:62:7f:7e:40:af:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CD:CF:8C:B9:82:FE:D0:6B:0A:A4:59:0C:35:34:16:B4:2F:47:B8:77
            X509v3 Authority Key Identifier:
                keyid:78:58:8D:53:1B:2F:63:78:66:CA:4E:23:08:67:72:2D:EA:2B:E6:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/78588D531B2F637866CA4E230867722DEA2BE617.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/78588D531B2F637866CA4E230867722DEA2BE617.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9rAytqZH1tiETWamj8Y81VMnR9CUpyWs7SZ5sFZwgSkM/0/323830343a386563303a383030303a3a2f33332d3333203d3e203532353837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8ec0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         95:6f:7e:fe:22:14:b7:3b:51:5a:6b:51:63:8e:c2:ec:f9:95:
         39:d6:c4:9e:25:6b:44:a1:15:98:c0:23:af:cc:be:87:08:5f:
         00:4c:c2:ae:38:2e:03:11:28:19:9e:d1:30:61:34:d4:9c:49:
         d3:62:f8:e3:fc:94:a4:1e:13:cc:46:7b:1c:24:3d:f3:95:f8:
         fd:83:4a:14:5b:31:52:4d:55:b2:39:aa:19:7e:27:bf:a6:f2:
         be:fc:56:cb:94:4d:9a:9e:b5:a3:a5:2a:8f:9d:c5:c5:ac:c9:
         bf:79:33:60:f4:31:4d:81:af:a2:6e:a8:00:2e:bf:46:55:32:
         de:64:36:af:0f:7f:14:e2:f7:3c:74:ca:64:fd:23:63:9a:e5:
         27:3a:ec:35:eb:cf:7e:0d:01:8a:30:f7:95:b2:9b:05:3f:2b:
         40:a7:7b:2b:99:4d:0c:8b:4e:fd:22:5c:b3:c5:fe:80:56:23:
         69:13:ba:ff:fa:07:82:b7:10:1d:94:f0:11:4a:8c:8b:07:25:
         a1:02:3c:02:a7:f5:46:a0:82:38:d2:7e:d3:42:5b:ae:62:35:
         c3:1e:05:5e:83:96:da:e6:90:9a:df:46:d5:ba:0a:78:b1:90:
         1f:6d:5b:d2:b2:63:ee:ff:a2:5c:ab:9d:a8:13:8e:57:97:4d:
         b5:e4:ad:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:08 2024 by rpki-client on console-fra.rpki-client.org