Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a3838343a3a2f33322d3430203d3e203238313938.roa
File:                     323830343a3838343a3a2f33322d3430203d3e203238313938.roa (raw, json)
Hash identifier:          6hL/YYFmesT/YWPr4FKnCJU2qTSSMUgsyE905EAFOwg=
Subject key identifier:   C6:63:3D:FA:72:63:40:21:D3:BB:44:C5:14:D4:6E:91:0A:3E:08:77
Certificate issuer:       /CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
Certificate serial:       79CE6158B05D635443B7CBFF4A8C0DA472E69667
Authority key identifier: 73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a3838343a3a2f33322d3430203d3e203238313938.roa
Signing time:             Mon 21 Aug 2023 20:32:23 +0000
ROA not before:           Mon 21 Aug 2023 20:27:23 +0000
ROA not after:            Mon 19 Aug 2024 20:32:23 +0000
asID:                     28198
IP address blocks:        2804:884::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:ce:61:58:b0:5d:63:54:43:b7:cb:ff:4a:8c:0d:a4:72:e6:96:67
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=73C1893E55F64514DBFC3B6B801C16D0360913FE
        Validity
            Not Before: Aug 21 20:27:23 2023 GMT
            Not After : Aug 19 20:32:23 2024 GMT
        Subject: CN=C6633DFA72634021D3BB44C514D46E910A3E0877
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f8:54:4e:55:d8:4e:23:ca:7d:5a:31:fb:d7:e6:
                    f4:a7:0f:57:85:88:e8:fc:bf:56:3b:ff:63:33:49:
                    79:d5:d1:36:c7:17:c4:13:e4:cc:51:72:91:e0:b0:
                    86:f9:9d:39:d6:a0:b0:26:a3:bb:a8:1d:1e:e7:83:
                    58:97:8f:e2:ed:b3:28:2f:0c:ab:e6:aa:b3:b5:1a:
                    d1:75:8e:89:b1:c5:6b:c7:72:67:6f:64:40:69:c7:
                    8b:fd:5c:b5:65:2b:21:1b:aa:af:47:06:58:8b:21:
                    06:d3:71:87:91:5d:59:df:0b:2f:fb:ae:09:7b:87:
                    3e:82:15:66:38:c3:0f:c8:27:02:6d:ec:4c:89:57:
                    4b:95:56:d1:d7:26:02:be:c9:44:89:98:d4:43:90:
                    58:ff:57:d1:4c:ce:01:30:f8:d3:a1:1d:db:cf:99:
                    cc:4b:fd:01:f0:1b:1c:6a:c2:7b:9b:90:76:a1:1e:
                    dc:89:2d:8c:7b:b2:12:d7:e5:32:61:62:40:e9:45:
                    b1:1d:6b:ef:a9:d3:89:48:a9:d5:e6:79:24:87:6d:
                    af:45:f3:c2:12:97:56:c6:5d:a8:94:40:8a:72:41:
                    25:a7:57:f0:f2:34:51:81:c3:f4:1a:d8:09:29:23:
                    ab:8d:b7:36:f7:ea:28:a9:48:41:07:b9:4c:d1:b8:
                    4f:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:63:3D:FA:72:63:40:21:D3:BB:44:C5:14:D4:6E:91:0A:3E:08:77
            X509v3 Authority Key Identifier:
                keyid:73:C1:89:3E:55:F6:45:14:DB:FC:3B:6B:80:1C:16:D0:36:09:13:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/73C1893E55F64514DBFC3B6B801C16D0360913FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BBb6avfqZz5wEfQ6dAiaNG5GqCUc9Z4Mgwf2YpdTLfLm/0/323830343a3838343a3a2f33322d3430203d3e203238313938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:884::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:d5:87:22:e3:d2:3c:be:d3:2e:f0:e5:cf:e3:21:1c:c1:0a:
         ea:fe:31:7c:ff:79:6c:15:24:d7:ca:7a:0c:a9:27:ff:aa:96:
         df:b4:86:59:69:ae:07:bb:3e:ff:11:c1:0e:eb:e2:cd:5b:b2:
         a0:95:42:c7:67:de:ab:7d:23:8d:16:b8:47:d4:fd:f2:59:d6:
         d7:c4:3a:4b:5d:e5:d6:01:b6:cb:6b:c0:55:0d:c2:5a:50:ca:
         6a:ce:ea:2d:65:2c:84:7e:44:6a:5d:90:ad:db:23:da:27:fc:
         41:8a:27:0e:96:ba:11:a7:03:1b:ab:69:b6:8c:fa:61:d1:94:
         5a:83:65:53:24:e0:6a:27:5a:5b:b8:69:e7:7e:1c:87:24:c0:
         7c:53:f0:5d:c8:01:a3:88:cf:b3:e1:0c:50:82:d4:29:5c:46:
         11:23:c1:29:f4:e0:aa:96:9d:75:82:11:13:d0:ba:86:39:58:
         18:f0:1d:6a:e3:ab:6a:4c:47:8b:8c:90:bb:06:57:dd:c5:ab:
         8d:9e:8d:64:8b:f1:02:04:44:d6:f5:dd:b5:d9:04:39:b4:b1:
         3b:88:17:8e:0b:e3:db:a7:a1:56:cb:e4:9b:8e:c7:7c:44:fe:
         27:f3:5c:15:f4:62:19:38:21:7c:33:5e:e7:6d:0e:52:ca:97:
         90:0d:0b:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:50 2024 by rpki-client on console-ams.rpki-client.org