Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/323830343a353935343a383030303a3a2f33332d3333203d3e20323638313833.roa
File:                     323830343a353935343a383030303a3a2f33332d3333203d3e20323638313833.roa (raw, json)
Hash identifier:          EdCm08yer9eq3zYaEHqFrwE4apQy+acBqfgjJKN8QqU=
Subject key identifier:   40:45:EB:1C:FF:A5:D2:2F:DD:09:5D:6E:D8:E4:F1:0A:C1:CB:B4:C7
Certificate issuer:       /CN=86806D9BD12A677347ED32D286F9803B86B05A33
Certificate serial:       3ACB0FD68C6916BFC8045AC2CA5053FC83E29DE2
Authority key identifier: 86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/323830343a353935343a383030303a3a2f33332d3333203d3e20323638313833.roa
Signing time:             Mon 04 Mar 2024 22:25:21 +0000
ROA not before:           Mon 04 Mar 2024 22:20:21 +0000
ROA not after:            Mon 03 Mar 2025 22:25:21 +0000
asID:                     268183
IP address blocks:        2804:5954:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:cb:0f:d6:8c:69:16:bf:c8:04:5a:c2:ca:50:53:fc:83:e2:9d:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=86806D9BD12A677347ED32D286F9803B86B05A33
        Validity
            Not Before: Mar  4 22:20:21 2024 GMT
            Not After : Mar  3 22:25:21 2025 GMT
        Subject: CN=4045EB1CFFA5D22FDD095D6ED8E4F10AC1CBB4C7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:9b:c8:5d:15:09:c1:a6:d9:13:9e:ef:71:50:
                    c4:1b:4c:92:38:3e:e9:b4:66:a8:a0:15:88:73:df:
                    e2:33:2c:c8:03:24:cf:fe:1e:2c:d8:a0:a8:c0:86:
                    1f:cb:87:bb:03:5a:df:28:c4:85:c0:28:38:f6:e1:
                    3f:ce:82:70:8e:b2:2b:64:72:26:b6:da:1f:74:4a:
                    18:0e:d2:d4:4f:91:11:8a:5a:c3:69:19:d4:23:9d:
                    67:2d:f3:62:95:c4:8c:af:9f:d2:48:ee:74:39:fb:
                    2a:99:6e:1c:06:b6:5f:c8:83:38:d7:2f:e2:57:46:
                    0b:3a:e3:73:a1:20:cb:b0:32:46:8a:97:96:b8:1a:
                    f4:8c:44:19:4b:89:2e:3d:19:f5:1b:56:78:4a:1d:
                    74:92:ef:c9:47:a7:d8:a6:02:fc:57:71:a5:4b:85:
                    df:4d:9c:6d:43:e6:c2:02:00:7c:03:f9:0a:75:c9:
                    7b:a6:9d:ac:6e:3b:b5:6b:96:d2:58:8c:13:4a:59:
                    57:c0:0c:1f:5e:cb:9b:a2:bb:d9:20:32:b8:c3:79:
                    3d:fb:ae:01:0a:a0:4f:3f:07:1a:53:68:af:4a:fe:
                    f9:37:cb:95:7b:ac:f8:fd:0e:52:eb:e9:b8:dd:43:
                    55:58:7e:3c:cf:e1:9e:c5:01:d3:32:e2:22:b5:e8:
                    b7:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                40:45:EB:1C:FF:A5:D2:2F:DD:09:5D:6E:D8:E4:F1:0A:C1:CB:B4:C7
            X509v3 Authority Key Identifier:
                keyid:86:80:6D:9B:D1:2A:67:73:47:ED:32:D2:86:F9:80:3B:86:B0:5A:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/86806D9BD12A677347ED32D286F9803B86B05A33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/86806D9BD12A677347ED32D286F9803B86B05A33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ADQwYAvwuEybXCcogy7ULmq5bfaABD6hjRxTZwqtcau/0/323830343a353935343a383030303a3a2f33332d3333203d3e20323638313833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5954:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0d:aa:46:8b:40:28:1a:be:a7:d6:7e:32:27:88:83:c0:c9:60:
         fd:65:84:1c:56:41:72:c0:8a:b6:50:38:23:c2:55:a8:09:b6:
         5e:c2:76:9b:59:23:22:2f:15:f3:81:4e:5d:92:57:eb:ad:d3:
         17:20:47:f0:bd:48:bf:53:cb:71:b0:f7:68:75:ec:61:00:5a:
         d7:1b:9b:38:06:9f:c8:86:ac:2a:5e:e9:53:22:27:35:2b:ac:
         f5:a1:4c:66:52:96:f9:a8:9f:68:84:54:52:a4:6d:26:6b:08:
         fb:59:c3:f9:40:4f:ea:3f:18:68:47:9a:47:5e:7e:2e:16:ad:
         07:fe:53:8c:e1:fc:55:97:15:c2:ee:91:98:4f:83:c3:64:62:
         c9:bf:28:56:5f:8a:ad:91:0e:a9:ce:bf:34:e3:25:18:3c:3b:
         ba:86:d1:da:2f:ff:82:30:65:d1:c9:d0:d4:e7:9c:48:f3:6f:
         ec:fe:fe:ae:9f:b6:42:6c:ea:55:72:d8:ba:85:f8:e6:29:e8:
         fe:10:f8:c2:dd:cf:2d:0b:ef:de:5d:66:71:b2:52:f8:4d:1a:
         28:1d:5a:ef:e2:b2:28:ae:e8:49:c2:88:f0:cc:a8:2e:9f:89:
         8d:f9:de:9f:c0:ed:ba:67:cd:80:db:80:7b:e2:86:29:7a:b2:
         5f:c8:04:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org