Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a666666383a3a2f34352d3435203d3e20323637333339.roa
File:                     323830343a346266343a666666383a3a2f34352d3435203d3e20323637333339.roa (raw, json)
Hash identifier:          TgEVmlQIZFX3tow7a9d2iP8p+vnbhJiB9+uYzvhJ+3I=
Subject key identifier:   B0:57:6E:6A:22:EC:71:F3:D7:D3:EA:E4:D1:F3:90:6A:55:2A:C5:74
Certificate issuer:       /CN=A09087E55846274477AB0E4597FD754DB0509203
Certificate serial:       4EEC4D23B80F6A44E2F725359CE7B9A2F5B83935
Authority key identifier: A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a666666383a3a2f34352d3435203d3e20323637333339.roa
Signing time:             Sun 09 Jul 2023 04:08:15 +0000
ROA not before:           Sun 09 Jul 2023 04:03:15 +0000
ROA not after:            Sun 07 Jul 2024 04:08:15 +0000
asID:                     267339
IP address blocks:        2804:4bf4:fff8::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:ec:4d:23:b8:0f:6a:44:e2:f7:25:35:9c:e7:b9:a2:f5:b8:39:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A09087E55846274477AB0E4597FD754DB0509203
        Validity
            Not Before: Jul  9 04:03:15 2023 GMT
            Not After : Jul  7 04:08:15 2024 GMT
        Subject: CN=B0576E6A22EC71F3D7D3EAE4D1F3906A552AC574
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:8a:46:c8:a7:5a:62:36:7f:a2:db:42:93:f6:
                    ea:03:d3:b7:36:a7:c2:b6:d1:1f:3e:cb:17:98:2b:
                    d4:bd:bb:c0:ae:78:6d:08:1b:b5:f9:b5:3f:84:86:
                    05:2c:c0:b0:3d:11:38:1c:92:f0:93:e4:50:76:7f:
                    7b:f5:dc:7a:ed:60:6a:55:ec:79:33:f0:28:64:83:
                    07:f9:1d:88:46:b8:f4:c1:18:81:27:47:81:3a:f8:
                    4f:41:00:c0:38:16:c6:62:9c:8d:6b:04:c1:71:de:
                    1f:e9:14:2a:66:78:31:2b:1f:f3:a7:c2:80:3c:71:
                    0a:01:23:8a:c5:53:e7:2b:af:6a:d3:c8:44:c1:cd:
                    04:0c:2e:a0:13:80:5e:a0:d9:0f:a8:7a:73:41:d8:
                    4b:63:06:fa:ea:60:ef:5b:e0:9c:89:55:ca:34:b5:
                    06:09:f0:11:2c:bd:35:6c:5c:b6:d1:d7:ed:ce:f4:
                    5d:e4:8a:c0:92:c9:8f:96:67:36:63:c9:99:cb:64:
                    b2:2c:11:47:d3:fc:3f:dd:f7:9f:fe:b6:36:a4:79:
                    25:45:60:d7:56:2e:d9:c4:76:6a:45:07:8a:26:b5:
                    ac:8e:a5:24:52:d0:71:be:77:00:21:12:c4:5b:ff:
                    79:fc:5b:dc:87:e3:cd:25:a7:ab:56:77:36:41:f6:
                    69:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B0:57:6E:6A:22:EC:71:F3:D7:D3:EA:E4:D1:F3:90:6A:55:2A:C5:74
            X509v3 Authority Key Identifier:
                keyid:A0:90:87:E5:58:46:27:44:77:AB:0E:45:97:FD:75:4D:B0:50:92:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/A09087E55846274477AB0E4597FD754DB0509203.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A09087E55846274477AB0E4597FD754DB0509203.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AoBbwqxX91Dexh1TTqzx9X9ZoFC4T5TL48b2qRSroDYW/0/323830343a346266343a666666383a3a2f34352d3435203d3e20323637333339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bf4:fff8::/45

    Signature Algorithm: sha256WithRSAEncryption
         44:49:53:b1:7d:83:f2:72:f0:c2:30:24:af:06:5b:d5:49:f2:
         01:eb:74:ff:c0:4b:d5:32:d6:3b:33:4f:2f:0e:a5:1f:59:41:
         aa:80:df:5e:a9:c1:11:f0:aa:1e:1c:d3:a1:c2:33:dc:83:22:
         ac:e7:47:73:b4:0f:8d:fd:03:0a:ba:64:6c:91:d4:ab:bc:ca:
         29:ae:4a:12:97:71:3d:14:43:2d:6c:11:c3:65:f1:fd:ff:ea:
         27:85:58:73:bc:19:2d:ab:13:e2:00:1e:da:18:21:50:dd:f0:
         86:34:71:bc:a8:3b:cd:4e:b9:d4:59:f2:5e:19:4a:73:a6:4a:
         36:69:56:86:db:6c:6e:ff:20:ae:cf:cb:49:e4:cd:01:71:94:
         93:75:3f:bc:12:a0:81:99:90:0f:03:dc:fb:91:d3:27:18:3a:
         c4:9c:83:90:a0:13:6f:d5:d8:9d:51:ba:07:80:9e:90:21:57:
         9b:7f:8f:cc:67:64:7a:9d:87:5a:55:4a:08:ef:f4:f6:87:8d:
         5b:7d:cc:c9:75:8a:b3:52:68:1a:9a:58:77:fb:29:27:2e:1a:
         0c:aa:52:85:be:3d:7b:0b:61:1e:5a:cc:b3:4d:06:f1:69:35:
         c6:bc:b6:9e:8d:df:3c:5b:0f:6a:94:28:19:31:0b:6f:34:62:
         68:e1:58:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:13 2024 by rpki-client on console-fra.rpki-client.org