Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a633030303a3a2f33342d3334203d3e20323637333935.roa
File:                     323830343a346364343a633030303a3a2f33342d3334203d3e20323637333935.roa (raw, json)
Hash identifier:          KpkRe4S69oBFqe46XLvUNALgl8wzdTHvLZk5nJm4wD4=
Subject key identifier:   A1:CB:89:5C:16:83:7C:95:09:CC:54:50:DB:E6:06:28:93:7D:5E:2C
Certificate issuer:       /CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
Certificate serial:       0425C4339D6FF7C56DA798521D65151C21B1661F
Authority key identifier: 89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a633030303a3a2f33342d3334203d3e20323637333935.roa
Signing time:             Fri 23 Aug 2024 19:56:53 +0000
ROA not before:           Fri 23 Aug 2024 19:51:53 +0000
ROA not after:            Fri 22 Aug 2025 19:56:53 +0000
asID:                     267395
IP address blocks:        2804:4cd4:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:25:c4:33:9d:6f:f7:c5:6d:a7:98:52:1d:65:15:1c:21:b1:66:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=891F7710A149035BE2C13EAA45697B7BC29B0E36
        Validity
            Not Before: Aug 23 19:51:53 2024 GMT
            Not After : Aug 22 19:56:53 2025 GMT
        Subject: CN=A1CB895C16837C9509CC5450DBE60628937D5E2C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:e7:a9:c1:f6:b4:0d:6d:43:cb:22:fd:6f:0c:
                    d1:2c:ca:bf:b8:fb:5d:90:59:9f:53:d7:bb:80:81:
                    3d:53:08:62:59:f5:64:e4:7d:a7:91:f4:3a:ba:73:
                    c1:ba:46:f2:7c:54:e8:a8:38:c7:6c:50:5d:f5:0b:
                    ea:de:6f:38:db:85:bf:e5:37:07:e2:1e:b3:74:8f:
                    d5:48:72:9f:68:72:ed:c9:5b:4f:9f:db:71:da:05:
                    73:51:22:91:fc:4b:b2:2f:17:89:5b:c5:83:d9:86:
                    60:7c:5e:47:ff:09:33:b4:50:eb:3c:99:05:70:ec:
                    24:21:96:10:f7:d3:df:8b:28:ad:f7:50:3e:8b:cb:
                    a9:8d:33:cb:1c:7b:04:94:bc:25:14:64:67:ae:fd:
                    f5:58:97:3b:9d:ee:f5:d9:a9:5a:f8:27:22:c2:86:
                    54:7f:69:1e:ad:9b:65:26:22:44:56:79:3d:ac:6a:
                    b1:d8:77:d0:1d:ab:53:4c:13:a7:83:b9:ef:cf:8c:
                    43:fa:6c:01:0d:e7:6c:17:b2:a8:ca:4b:74:41:af:
                    5d:d8:ea:9f:56:d0:4b:8f:20:dc:94:34:25:4e:b7:
                    cc:db:ac:84:38:64:12:76:cc:b4:47:33:5f:f8:dd:
                    3b:ba:c5:bf:1c:8f:11:cb:46:df:95:23:a3:a9:ec:
                    12:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:CB:89:5C:16:83:7C:95:09:CC:54:50:DB:E6:06:28:93:7D:5E:2C
            X509v3 Authority Key Identifier:
                keyid:89:1F:77:10:A1:49:03:5B:E2:C1:3E:AA:45:69:7B:7B:C2:9B:0E:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/891F7710A149035BE2C13EAA45697B7BC29B0E36.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/891F7710A149035BE2C13EAA45697B7BC29B0E36.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKcPf6As8ySpSjW5neHzdyAwiuraQQ6X3kf6ya1TMVjm/0/323830343a346364343a633030303a3a2f33342d3334203d3e20323637333935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4cd4:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7b:63:54:ea:cf:0f:f4:70:3a:d2:57:eb:fa:6b:04:36:19:f7:
         81:3c:69:33:fd:ca:c6:12:04:72:0e:e7:66:e9:93:97:70:f8:
         24:cd:be:ec:3e:91:5f:dc:59:6f:45:81:25:1c:fc:05:d8:00:
         aa:a4:08:02:24:9e:df:83:2e:f8:6b:1e:c9:70:c5:58:40:d5:
         e5:e8:9f:d4:be:09:64:25:df:b4:f0:03:4f:1d:a4:a0:aa:c0:
         a7:ac:e9:60:24:67:1a:32:b2:03:33:0a:b8:1a:61:b4:4c:f9:
         0a:b6:b4:95:69:17:e8:a7:a5:d2:c6:01:a7:b1:8e:51:cd:f3:
         13:ef:cd:89:4f:e0:ca:c9:33:25:01:56:b7:de:87:a3:7d:27:
         b5:da:d3:92:02:ea:6a:27:ee:61:9f:74:3b:2f:cd:85:e8:79:
         87:1f:e9:3d:c4:fd:83:76:6b:25:1c:b3:e8:8f:a2:9b:16:75:
         9c:25:ff:2f:23:e5:5b:1b:e9:8a:8e:d8:62:6d:38:4f:d4:32:
         72:0a:44:b0:98:5f:df:07:c3:05:f3:49:0d:30:68:27:26:b7:
         2e:fe:47:12:17:8f:ed:1f:3f:58:fc:39:19:04:cd:1b:88:48:
         37:b7:36:90:96:70:3b:de:7d:4c:0f:28:e2:f5:2b:b1:3a:77:
         cd:62:83:ca
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Nov 25 14:31:16 2024 by rpki-client on console-ams.rpki-client.org