Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/323830343a323130343a3a2f33322d3332203d3e20323634353237.roa
File:                     323830343a323130343a3a2f33322d3332203d3e20323634353237.roa (raw, json)
Hash identifier:          Gq8/2AYhKXHSHCyCKbqJbta44FqYk7GQygqQPnG3jCA=
Subject key identifier:   3D:46:60:9C:33:D0:23:FD:8A:A7:87:42:22:AB:2B:E1:20:64:37:F4
Certificate issuer:       /CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
Certificate serial:       677AC0F45728DCC4B800641657AFD1F6ACB4AF20
Authority key identifier: 8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/323830343a323130343a3a2f33322d3332203d3e20323634353237.roa
Signing time:             Wed 29 Nov 2023 13:00:00 +0000
ROA not before:           Wed 29 Nov 2023 12:55:00 +0000
ROA not after:            Wed 27 Nov 2024 13:00:00 +0000
asID:                     264527
IP address blocks:        2804:2104::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:7a:c0:f4:57:28:dc:c4:b8:00:64:16:57:af:d1:f6:ac:b4:af:20
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C00F31BC45687EF6BA82B7C0B79EF422248F616
        Validity
            Not Before: Nov 29 12:55:00 2023 GMT
            Not After : Nov 27 13:00:00 2024 GMT
        Subject: CN=3082010A0282010100BCD881D49614DBEF746A83666EC046D3098DD522791FA457E9CA80CC0C8793F498B7EA684CC38B9DAB6AF4CBD5887D7FAD1E591FAA52A268EB04E7E599D801422E3113436D861A5F5F2786659C94A6B8CE8257B12A6933B47A0295EE818EB66266CE0B377A2E2D29DB27C6F40015AA3047BFEE572C47B6A20E3EE1569EDD8491D9D6A26597C69992EE5FF15D0EB1D7A588CC8B50B585564EB4CBFF37DEDF3494D1A1224CEAB7291C68F1D6A9C40E126019AE4D7E1B5263240C05DD9FA419630D857DE76C5512038648E2144AA1FF0789685456593882A5F4974FAEDF8F47F61E0A77FBA1137DB66C4A9057AE1691402BAE307E607CF72A187C350F0B1F4800130203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:d8:81:d4:96:14:db:ef:74:6a:83:66:6e:c0:
                    46:d3:09:8d:d5:22:79:1f:a4:57:e9:ca:80:cc:0c:
                    87:93:f4:98:b7:ea:68:4c:c3:8b:9d:ab:6a:f4:cb:
                    d5:88:7d:7f:ad:1e:59:1f:aa:52:a2:68:eb:04:e7:
                    e5:99:d8:01:42:2e:31:13:43:6d:86:1a:5f:5f:27:
                    86:65:9c:94:a6:b8:ce:82:57:b1:2a:69:33:b4:7a:
                    02:95:ee:81:8e:b6:62:66:ce:0b:37:7a:2e:2d:29:
                    db:27:c6:f4:00:15:aa:30:47:bf:ee:57:2c:47:b6:
                    a2:0e:3e:e1:56:9e:dd:84:91:d9:d6:a2:65:97:c6:
                    99:92:ee:5f:f1:5d:0e:b1:d7:a5:88:cc:8b:50:b5:
                    85:56:4e:b4:cb:ff:37:de:df:34:94:d1:a1:22:4c:
                    ea:b7:29:1c:68:f1:d6:a9:c4:0e:12:60:19:ae:4d:
                    7e:1b:52:63:24:0c:05:dd:9f:a4:19:63:0d:85:7d:
                    e7:6c:55:12:03:86:48:e2:14:4a:a1:ff:07:89:68:
                    54:56:59:38:82:a5:f4:97:4f:ae:df:8f:47:f6:1e:
                    0a:77:fb:a1:13:7d:b6:6c:4a:90:57:ae:16:91:40:
                    2b:ae:30:7e:60:7c:f7:2a:18:7c:35:0f:0b:1f:48:
                    00:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:46:60:9C:33:D0:23:FD:8A:A7:87:42:22:AB:2B:E1:20:64:37:F4
            X509v3 Authority Key Identifier:
                keyid:8C:00:F3:1B:C4:56:87:EF:6B:A8:2B:7C:0B:79:EF:42:22:48:F6:16

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C00F31BC45687EF6BA82B7C0B79EF422248F616.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Audr7ok3D1apBCTLJp4SKckCSAJNMAqcdLKzGYHPfNFy/0/323830343a323130343a3a2f33322d3332203d3e20323634353237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2104::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:ff:0e:49:00:88:46:d3:a5:2a:6b:2a:f6:af:d6:a5:c1:b3:
         7f:56:c1:11:bd:44:d6:95:30:f6:da:db:12:aa:5d:22:14:14:
         ab:b2:33:41:45:22:be:83:9d:8c:10:77:6b:11:cd:d1:4e:16:
         52:28:4a:2d:02:45:45:01:75:f3:d8:d2:86:60:4f:85:08:e3:
         86:6b:c6:da:52:31:ea:fa:44:00:5f:dd:c2:5b:d9:f8:10:ba:
         53:29:33:12:e2:35:c0:d2:38:56:e1:89:65:cc:17:9d:14:5e:
         de:d7:11:01:b3:a4:f8:ad:6f:70:04:fa:12:72:29:cf:42:af:
         cb:6b:60:5b:75:82:03:d1:01:b8:3b:59:0e:49:cf:23:a8:eb:
         92:dd:94:ad:43:1b:e7:1e:8e:2e:69:b2:66:3c:30:d9:b4:08:
         d5:5b:2b:e5:cf:17:f6:45:b5:7e:a6:10:fd:b2:98:47:72:7c:
         a5:81:5c:16:ee:fe:15:96:61:6f:be:90:a8:0e:18:8c:fc:96:
         31:39:e0:df:d5:96:29:1c:49:95:ad:4f:2d:4f:36:27:5e:51:
         2d:56:f7:cf:85:bc:d4:d3:af:86:0b:3d:8e:ae:fc:a4:94:9f:
         cc:a4:f8:42:72:08:ca:09:c5:0d:15:5f:1a:f3:14:50:e5:4e:
         0c:8c:07:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:36 2024 by rpki-client on console-ams.rpki-client.org