Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/323830343a353463633a3a2f33322d3332203d3e20323638363730.roa
File:                     323830343a353463633a3a2f33322d3332203d3e20323638363730.roa (raw, json)
Hash identifier:          Y/17w0nIl2YV/m8N33U4kO8wumosWd16dspppZ7FHKE=
Subject key identifier:   C2:4F:4F:E8:CB:BD:EA:21:E1:A8:7B:66:FE:F8:A8:09:41:E2:96:43
Certificate issuer:       /CN=909FE779ECD4DD20FE330FB466BF49482B50B00C
Certificate serial:       12F6EFB450DA06C867E5747BAA1DB0DD4B0D774F
Authority key identifier: 90:9F:E7:79:EC:D4:DD:20:FE:33:0F:B4:66:BF:49:48:2B:50:B0:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/909FE779ECD4DD20FE330FB466BF49482B50B00C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/323830343a353463633a3a2f33322d3332203d3e20323638363730.roa
Signing time:             Wed 27 Oct 2021 20:39:17 +0000
ROA not before:           Wed 27 Oct 2021 20:34:17 +0000
ROA not after:            Wed 26 Oct 2022 20:39:17 +0000
asID:                     268670
IP address blocks:        2804:54cc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:f6:ef:b4:50:da:06:c8:67:e5:74:7b:aa:1d:b0:dd:4b:0d:77:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=909FE779ECD4DD20FE330FB466BF49482B50B00C
        Validity
            Not Before: Oct 27 20:34:17 2021 GMT
            Not After : Oct 26 20:39:17 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:f5:78:a4:d4:7c:ac:d1:35:f0:db:11:53:f9:
                    fd:6a:ba:34:9b:a5:b4:91:c5:0b:0d:e3:b7:63:ac:
                    72:48:35:6b:78:5a:41:fc:f1:93:7b:be:01:33:4e:
                    b1:20:15:0c:12:ef:37:3b:a8:4e:6c:74:1f:8a:e0:
                    8a:57:cc:c3:2f:f1:98:72:ef:af:4b:9e:99:f9:c5:
                    1f:dd:b5:c0:3f:96:69:f6:be:aa:4f:6e:d4:f7:00:
                    b3:7e:5f:30:96:ee:9e:6d:4d:96:4c:6d:e7:a8:a0:
                    9d:7b:03:da:00:48:24:35:44:5d:1a:2a:82:17:51:
                    57:83:5e:89:b5:21:58:78:b0:bf:85:d7:b6:65:c7:
                    a7:42:f5:b5:8f:91:ce:d1:3e:8c:ad:b5:82:14:56:
                    02:b6:b6:c7:40:d0:4f:51:8f:23:cd:83:52:2b:2a:
                    22:c8:48:40:d8:72:7e:5c:c1:34:66:4f:40:ef:6d:
                    56:8a:27:29:d3:79:ef:24:89:a6:3f:39:04:02:44:
                    2f:bc:03:f5:20:3e:61:6a:e1:cb:bf:a1:b9:b1:5d:
                    50:b7:ac:38:10:0f:17:b8:62:c9:a3:fa:20:64:8a:
                    88:4a:8b:b3:3a:c8:04:14:70:1a:a8:c6:db:6a:d3:
                    4a:c2:55:45:47:d5:ea:e6:f6:17:31:63:54:65:f1:
                    c1:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:4F:4F:E8:CB:BD:EA:21:E1:A8:7B:66:FE:F8:A8:09:41:E2:96:43
            X509v3 Authority Key Identifier:
                keyid:90:9F:E7:79:EC:D4:DD:20:FE:33:0F:B4:66:BF:49:48:2B:50:B0:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/909FE779ECD4DD20FE330FB466BF49482B50B00C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/909FE779ECD4DD20FE330FB466BF49482B50B00C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9rFbKoycy9w6yB2fKvKmUkuGRR3vDpkNN9qxu4ofFT9/0/323830343a353463633a3a2f33322d3332203d3e20323638363730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54cc::/32

    Signature Algorithm: sha256WithRSAEncryption
         77:de:8f:a2:50:0a:75:52:3a:b6:8d:f7:16:cc:44:2e:9a:e4:
         d6:c5:fd:da:d9:74:af:5e:ca:f9:77:11:29:d6:a6:ce:ae:b9:
         d6:86:29:86:43:e5:c8:84:1d:0c:6c:de:af:3d:1c:18:82:e0:
         d2:a0:ca:e8:c2:7b:57:ae:b3:a8:43:e0:60:d8:2a:3c:ff:ce:
         5b:2f:fc:8e:60:bf:02:2c:c0:51:96:89:12:53:40:df:2e:bf:
         cd:98:6f:d2:0b:f9:d4:1f:a3:ac:99:07:3f:7a:2e:8e:99:c9:
         25:e4:48:d4:8d:39:44:86:d1:38:dd:e8:b1:5e:b1:d4:cc:64:
         6e:b2:97:38:60:43:e9:38:c6:df:43:df:6e:bb:66:e2:60:26:
         ba:6c:3d:aa:91:c6:4e:5f:e6:c2:33:0c:e6:63:3c:f4:b1:60:
         c6:fd:42:79:c1:75:d6:9a:34:b7:70:7b:7e:e2:54:62:e7:25:
         c3:f2:02:2b:2a:85:71:52:44:ce:41:4b:c8:a3:df:0d:12:0d:
         1d:c0:56:e4:4e:80:18:ba:fb:b8:ee:d5:64:e1:a4:4e:76:6e:
         1d:e9:d3:84:36:bb:79:d2:53:d2:d3:eb:f5:d1:7c:76:e8:6e:
         b0:ef:45:e1:26:94:ea:a7:25:ad:8c:25:91:e3:d5:43:2b:53:
         35:6e:61:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org