Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/1/323830343a353039383a3a2f33322d313238203d3e20323638333938.roa
File:                     323830343a353039383a3a2f33322d313238203d3e20323638333938.roa (raw, json)
Hash identifier:          Mr+TQzsaLIOVUnj8XGcdPfD0ZQUokwFifIhiwKxq3Qc=
Subject key identifier:   37:3A:4B:1D:3A:D4:97:F7:3A:D4:1F:D9:45:F7:C6:99:0D:61:0B:A2
Certificate issuer:       /CN=DB89E1AE22F7E5B46B524F3DE0084929870FEA3F
Certificate serial:       1D706ECA12ADD1C85B919DDEC2DE7E5E73A4B570
Authority key identifier: DB:89:E1:AE:22:F7:E5:B4:6B:52:4F:3D:E0:08:49:29:87:0F:EA:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/1/323830343a353039383a3a2f33322d313238203d3e20323638333938.roa
Signing time:             Wed 10 Apr 2024 16:33:06 +0000
ROA not before:           Wed 10 Apr 2024 16:28:06 +0000
ROA not after:            Wed 09 Apr 2025 16:33:06 +0000
asID:                     268398
IP address blocks:        2804:5098::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:70:6e:ca:12:ad:d1:c8:5b:91:9d:de:c2:de:7e:5e:73:a4:b5:70
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DB89E1AE22F7E5B46B524F3DE0084929870FEA3F
        Validity
            Not Before: Apr 10 16:28:06 2024 GMT
            Not After : Apr  9 16:33:06 2025 GMT
        Subject: CN=373A4B1D3AD497F73AD41FD945F7C6990D610BA2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:b7:fb:21:49:d7:9c:29:39:fd:1f:bb:98:f8:
                    bd:55:17:63:25:ca:58:a2:6b:ed:1f:da:f4:da:91:
                    7c:9d:05:6d:1f:95:1e:aa:8a:6e:0b:45:5e:95:ec:
                    8b:a1:c0:b8:ab:df:19:e8:5e:db:e8:66:c8:72:d7:
                    cc:b6:63:84:c8:ef:1d:f7:25:00:35:fb:f2:86:6e:
                    4a:22:08:12:de:e0:d1:48:98:eb:4b:19:c0:64:80:
                    15:d1:7a:03:17:b3:10:68:9a:75:0e:a3:02:4c:ec:
                    6b:b2:53:1c:94:c2:18:6b:86:48:5b:db:d7:b6:19:
                    3b:fe:1b:c6:54:c6:e6:41:6d:e5:e8:e8:94:40:de:
                    74:40:8b:9d:a5:29:05:10:4a:0e:c8:10:b9:0d:6a:
                    c4:3a:47:16:87:f1:ca:70:da:87:0e:ec:c6:f6:69:
                    54:7e:c9:0b:88:30:fb:06:85:e5:53:33:22:ab:eb:
                    34:4f:db:d7:f6:08:4c:e2:89:8a:e4:5a:53:71:75:
                    9b:84:2c:1c:01:ab:8b:89:c9:84:2b:a7:05:57:c3:
                    b5:00:0a:64:64:56:7e:45:ac:e9:9a:da:c5:80:03:
                    37:2e:48:3f:20:71:f3:3a:72:3f:be:77:f6:f3:63:
                    2f:ff:ef:c4:89:35:8b:3c:22:07:1b:78:e8:95:5e:
                    db:fb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:3A:4B:1D:3A:D4:97:F7:3A:D4:1F:D9:45:F7:C6:99:0D:61:0B:A2
            X509v3 Authority Key Identifier:
                keyid:DB:89:E1:AE:22:F7:E5:B4:6B:52:4F:3D:E0:08:49:29:87:0F:EA:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/1/DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DB89E1AE22F7E5B46B524F3DE0084929870FEA3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AARu3XKw7aHn4cC6RrVeJf2AQhSEdMhcbhup82k73FJY/1/323830343a353039383a3a2f33322d313238203d3e20323638333938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5098::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:02:70:67:39:ae:2e:38:d8:4a:e5:cf:5b:de:9b:72:cf:53:
         35:d0:c7:c8:0d:ae:8d:b1:19:c7:83:79:52:0b:69:04:a3:07:
         87:59:8b:ca:68:3c:6b:da:3f:32:4c:d4:ce:32:3b:cb:e1:05:
         d0:61:b1:2d:7d:21:4b:4c:6d:cf:82:1e:82:23:bd:c0:09:42:
         0e:0f:dd:31:c2:0a:f2:b9:db:2a:79:78:37:99:e5:ed:73:68:
         fb:de:6c:cd:e6:7f:f3:03:1d:0b:6e:1d:d7:bf:04:9e:04:99:
         9e:ec:b9:14:57:3a:17:c2:dd:54:d8:c7:03:c7:da:6f:3b:4b:
         73:77:2d:1e:9a:c2:8a:11:9a:66:92:7f:b8:ed:be:22:13:35:
         ca:a4:01:f5:f9:e5:fe:2f:2e:59:dd:ee:c9:f1:b0:ad:7c:07:
         b0:a3:18:b8:8a:2c:8a:78:cb:96:4b:a7:c8:41:8f:37:e0:1a:
         23:e5:3b:a4:68:c1:87:ae:59:f7:8f:a7:58:9f:be:69:93:e7:
         07:e6:d8:f4:f6:8d:36:9d:01:b8:00:26:d4:a9:39:68:da:56:
         6a:51:42:32:d8:56:f1:59:6b:19:05:3a:2b:6a:dd:b6:63:f2:
         07:20:de:80:d9:3b:40:d4:8e:d2:bc:84:f1:97:52:23:af:b9:
         81:48:ce:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org