Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3a2f33332d3333203d3e203533313138.roa
File:                     323830343a3266343a3a2f33332d3333203d3e203533313138.roa (raw, json)
Hash identifier:          Bt6FoBXxLLQGo9cjBxhyoGPZhwM0ln/spIHpMA6Xg9s=
Subject key identifier:   6B:A8:25:14:04:38:E9:30:AB:55:8C:29:6C:73:0A:7D:CD:2A:F8:19
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       3B73CFC28D8BBE5ECDBDEB754B093E670A166911
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3a2f33332d3333203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 13:09:28 +0000
ROA not before:           Thu 27 Jul 2023 13:04:28 +0000
ROA not after:            Thu 25 Jul 2024 13:09:28 +0000
asID:                     53118
IP address blocks:        2804:2f4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:73:cf:c2:8d:8b:be:5e:cd:bd:eb:75:4b:09:3e:67:0a:16:69:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 13:04:28 2023 GMT
            Not After : Jul 25 13:09:28 2024 GMT
        Subject: CN=6BA825140438E930AB558C296C730A7DCD2AF819
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:cc:d7:61:fc:8b:d6:19:99:95:74:22:e7:4b:
                    0d:96:9d:70:e1:97:c5:51:ad:55:27:a0:a6:ae:a7:
                    5e:3d:44:c0:ff:99:b5:03:b7:f5:1c:82:ab:8c:07:
                    8f:5f:63:2a:ec:53:a3:84:af:41:ac:9b:be:a7:97:
                    cd:00:3a:96:ff:68:d5:d3:53:15:98:8d:38:cc:3d:
                    32:9e:66:f3:33:50:30:4f:eb:8f:2f:15:d9:ae:58:
                    21:15:75:5e:07:2b:3d:c3:94:8b:03:f1:80:94:88:
                    30:93:c4:02:59:a5:16:7a:8c:1c:90:6f:5f:40:69:
                    eb:ae:71:3f:fb:00:63:20:a6:9e:d9:65:d9:ff:fc:
                    df:0c:53:6b:3e:70:a1:bb:8d:6f:9b:7a:67:8a:47:
                    7d:3c:e3:ef:c5:93:3d:06:37:a0:32:17:29:fb:0c:
                    32:03:d4:23:45:db:41:14:aa:21:ea:03:f1:33:7c:
                    db:2c:92:04:cb:97:8e:fc:2c:8e:49:85:ea:1f:8f:
                    b0:fb:51:6c:4d:2a:e2:d8:4e:8a:3d:23:cb:2d:6a:
                    dc:b2:1f:28:ad:6e:6d:02:46:bd:a3:9c:2e:47:29:
                    9f:3d:25:19:c3:cb:50:ff:c5:aa:3e:96:28:64:f8:
                    8f:4e:72:5e:c0:ce:e5:c0:94:03:b0:5c:4d:7a:b1:
                    4c:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:A8:25:14:04:38:E9:30:AB:55:8C:29:6C:73:0A:7D:CD:2A:F8:19
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3a2f33332d3333203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f4::/33

    Signature Algorithm: sha256WithRSAEncryption
         41:c2:e2:91:a1:c4:d9:32:fe:6c:c8:19:c0:50:9a:2a:84:01:
         84:6b:00:ff:f7:6b:9f:59:f3:80:d7:a4:07:d2:2b:f6:2e:68:
         11:32:4a:18:1e:bc:84:e4:d2:18:c8:c0:19:4f:32:2d:00:62:
         ed:49:29:91:d5:a0:2b:9e:fc:25:f4:7c:3a:b5:8c:d6:93:25:
         b3:23:47:0e:0b:ad:eb:56:68:ee:57:f9:6f:9e:7c:2c:c6:c8:
         27:f4:f2:cc:7b:08:46:95:40:88:71:19:4d:f4:50:35:4b:72:
         89:cb:63:48:ce:f1:38:51:76:2e:42:a9:4f:7d:b5:82:cf:7a:
         c9:d8:84:ca:3e:a5:3f:2d:69:4f:fc:d6:04:7b:b1:d8:fe:cd:
         0b:4b:a8:91:e6:36:4e:1d:ee:5f:28:2a:6b:00:c0:0a:5e:3c:
         4f:c0:55:37:fb:b5:a1:89:1f:e0:23:5c:db:68:43:2c:63:21:
         af:e3:24:d6:6b:b5:16:4b:a1:d7:ec:41:0f:f9:f1:bb:76:16:
         37:97:6f:08:3a:7e:e4:93:7c:70:00:df:62:a8:5b:63:ff:31:
         f0:5a:0a:1c:2b:34:64:c8:98:9c:3a:38:1d:c3:0b:95:78:13:
         5a:68:18:b4:6b:b8:41:c8:80:ea:c8:f2:ec:c1:53:35:2f:07:
         92:c8:4f:12
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org