Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/323830343a323130383a3a2f33322d313238203d3e20323634353238.roa
File:                     323830343a323130383a3a2f33322d313238203d3e20323634353238.roa (raw, json)
Hash identifier:          tISm6VfE8TpjLWIC/8WF+C+KtNfrZSCvwYmaN5JDIs0=
Subject key identifier:   97:BA:D0:D5:09:EC:45:46:F6:14:65:C9:A1:7F:91:E8:D2:8C:E5:68
Certificate issuer:       /CN=8FF87EDB9468A99F9D101093DB5A1114C028F32C
Certificate serial:       0E8C1C5BABBA46DDEC655AC6B6DF69D3D3B4C861
Authority key identifier: 8F:F8:7E:DB:94:68:A9:9F:9D:10:10:93:DB:5A:11:14:C0:28:F3:2C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/323830343a323130383a3a2f33322d313238203d3e20323634353238.roa
Signing time:             Mon 12 Feb 2024 18:38:54 +0000
ROA not before:           Mon 12 Feb 2024 18:33:54 +0000
ROA not after:            Mon 10 Feb 2025 18:38:54 +0000
asID:                     264528
IP address blocks:        2804:2108::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:8c:1c:5b:ab:ba:46:dd:ec:65:5a:c6:b6:df:69:d3:d3:b4:c8:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FF87EDB9468A99F9D101093DB5A1114C028F32C
        Validity
            Not Before: Feb 12 18:33:54 2024 GMT
            Not After : Feb 10 18:38:54 2025 GMT
        Subject: CN=97BAD0D509EC4546F61465C9A17F91E8D28CE568
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:3d:3c:53:38:eb:43:c2:5d:f8:21:2a:b5:a5:
                    d6:f4:c7:cc:22:17:56:d9:47:72:e9:25:38:2f:82:
                    88:89:8b:32:01:b9:ee:8b:9d:b3:ec:ad:de:c5:52:
                    31:d3:10:66:22:6f:42:39:cb:69:50:a3:3b:f8:b5:
                    76:87:a1:de:1b:e5:6c:1d:cd:c5:3e:c4:86:a6:0e:
                    06:02:47:42:fd:ed:64:08:bd:4b:f8:f6:7f:66:9c:
                    e9:a4:2f:3a:20:fb:0c:b9:fb:80:19:32:3b:cf:ec:
                    47:0c:81:61:29:5f:03:78:9c:36:97:e9:1e:df:fb:
                    66:97:4e:50:35:c6:70:8c:b8:54:b0:eb:a2:46:61:
                    29:0a:50:3b:8e:b4:13:ea:e2:62:f2:ea:f9:b7:d5:
                    dc:8c:b8:8f:77:5c:c2:2b:d3:10:56:68:45:b9:49:
                    48:7c:16:54:96:7e:c4:fe:eb:7b:84:8b:51:2b:db:
                    f7:dc:5d:2e:14:0d:68:ec:1e:cb:95:81:fd:30:ce:
                    13:3b:dc:74:d0:31:6a:7a:d2:13:03:c1:8c:9e:3e:
                    79:5a:78:a0:b1:52:90:24:e6:12:39:95:73:71:3e:
                    72:72:43:ff:cb:cf:0a:64:1e:07:9f:c5:16:19:ae:
                    fc:f7:c4:fd:b4:9a:ef:7b:3a:ec:5e:49:0d:e6:6c:
                    6e:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:BA:D0:D5:09:EC:45:46:F6:14:65:C9:A1:7F:91:E8:D2:8C:E5:68
            X509v3 Authority Key Identifier:
                keyid:8F:F8:7E:DB:94:68:A9:9F:9D:10:10:93:DB:5A:11:14:C0:28:F3:2C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FF87EDB9468A99F9D101093DB5A1114C028F32C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BGSePrnMXjvpMiPAGrfesHmzo4L18133VDKeAPQUJJo8/0/323830343a323130383a3a2f33322d313238203d3e20323634353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2108::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:8c:c0:fb:17:79:e0:da:b5:57:37:f1:6c:db:e7:10:38:71:
         1b:29:c9:b6:78:68:cb:46:a0:09:34:ac:91:39:67:3e:01:a8:
         10:65:66:ac:b6:00:c6:b4:4f:7d:87:fa:68:cf:13:da:40:e5:
         45:83:87:bf:81:5d:17:e4:ae:89:10:85:21:ed:70:2d:43:be:
         af:ea:34:c9:c2:7d:a6:9b:c8:87:70:4a:04:d6:77:dc:49:cd:
         2c:88:b9:d6:8a:c0:ca:51:b3:07:cb:bf:05:1e:67:68:94:c8:
         c6:a0:88:dd:f0:66:ec:7b:cb:3b:ac:11:8c:6c:c7:0d:77:e5:
         f3:6c:5f:1a:64:1e:32:3a:ef:8c:a0:46:c1:15:27:20:66:5e:
         ff:c2:fa:0a:ba:aa:4c:90:47:c5:e3:d2:cc:13:b0:e1:b5:52:
         37:33:a4:99:5d:e7:53:5d:04:3a:18:a2:64:5d:96:60:71:29:
         80:b7:71:6a:65:d6:ca:2f:fc:d8:77:bb:e1:b8:4e:66:ea:c0:
         4e:65:73:c0:2d:13:90:61:b1:cb:23:96:03:cf:46:fe:ae:c9:
         9d:4b:e0:87:32:d9:f1:c5:9b:29:47:55:ae:7b:aa:5b:fa:7c:
         de:ea:7a:18:fe:47:55:f3:2f:2b:ee:10:e4:8a:ca:cf:00:33:
         e1:7a:09:82
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org