Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/0/323830343a323036343a3a2f33322d3438203d3e20323632343333.roa
File:                     323830343a323036343a3a2f33322d3438203d3e20323632343333.roa (raw, json)
Hash identifier:          zmvhYCUJZYQLwnjMaA1nnfbYvV8Uu3rujetMGXlb8dw=
Subject key identifier:   D6:19:C0:7A:5C:42:07:CA:A5:74:A5:38:C2:AE:08:A4:5F:40:87:44
Certificate issuer:       /CN=A8A221B1EF3CEEBAB46E7ED8BE2E167FA721C65B
Certificate serial:       23185EA2AD49CAB1685FCED9B443C1AEF28497DF
Authority key identifier: A8:A2:21:B1:EF:3C:EE:BA:B4:6E:7E:D8:BE:2E:16:7F:A7:21:C6:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8A221B1EF3CEEBAB46E7ED8BE2E167FA721C65B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/0/323830343a323036343a3a2f33322d3438203d3e20323632343333.roa
Signing time:             Thu 30 Nov 2023 13:28:06 +0000
ROA not before:           Thu 30 Nov 2023 13:23:06 +0000
ROA not after:            Thu 28 Nov 2024 13:28:06 +0000
asID:                     262433
IP address blocks:        2804:2064::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            23:18:5e:a2:ad:49:ca:b1:68:5f:ce:d9:b4:43:c1:ae:f2:84:97:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A8A221B1EF3CEEBAB46E7ED8BE2E167FA721C65B
        Validity
            Not Before: Nov 30 13:23:06 2023 GMT
            Not After : Nov 28 13:28:06 2024 GMT
        Subject: CN=D619C07A5C4207CAA574A538C2AE08A45F408744
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:ea:ee:8c:2b:d3:31:63:85:42:dc:59:48:d5:
                    71:15:36:13:49:ef:36:fd:cb:61:b2:9a:85:f1:d4:
                    f0:97:f5:17:c0:23:96:52:e3:39:04:60:fe:9b:4e:
                    0f:ae:a7:8f:5a:6b:1a:07:d5:13:1c:00:42:43:97:
                    79:f1:34:51:b9:fb:72:d3:c1:d4:21:5d:92:51:0b:
                    ae:38:09:e0:e7:e8:0e:a5:5e:a6:2c:03:1f:62:7e:
                    95:50:3c:ab:dd:2e:73:16:10:58:de:0c:b9:bc:70:
                    f0:1a:50:15:5f:05:71:e0:9d:3e:ee:c5:24:aa:3c:
                    c1:59:b6:15:f9:1b:c0:91:16:9e:fe:6d:cf:3d:90:
                    a3:55:21:6a:3c:57:91:cf:2d:d3:c2:07:f4:41:49:
                    22:55:6c:b5:cc:98:c9:2e:29:7f:88:40:d9:6c:db:
                    37:a8:80:ea:c0:57:8d:b8:59:04:b5:2f:43:a5:a5:
                    95:e9:80:34:9d:34:26:33:26:1e:74:f5:11:fc:f2:
                    0d:28:8a:ae:19:3d:76:2e:3f:0c:59:6a:9d:ca:05:
                    bd:5e:27:85:36:d1:e7:a4:a6:25:f3:e8:fb:fa:eb:
                    63:65:26:37:db:ff:27:39:82:83:26:f1:01:14:a6:
                    66:85:2b:61:ec:f7:fa:4c:a1:34:5b:2d:b1:9d:c5:
                    e6:f9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:19:C0:7A:5C:42:07:CA:A5:74:A5:38:C2:AE:08:A4:5F:40:87:44
            X509v3 Authority Key Identifier:
                keyid:A8:A2:21:B1:EF:3C:EE:BA:B4:6E:7E:D8:BE:2E:16:7F:A7:21:C6:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/0/A8A221B1EF3CEEBAB46E7ED8BE2E167FA721C65B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A8A221B1EF3CEEBAB46E7ED8BE2E167FA721C65B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BcH9omw5UXJCXE1tnrtRWS1hy1Fzu1dFdtTUBG2RUKLg/0/323830343a323036343a3a2f33322d3438203d3e20323632343333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2064::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:7b:44:ac:d2:3e:93:51:ee:bd:c4:1c:70:78:cf:8f:f8:b5:
         fd:12:52:05:3c:85:0b:6d:a2:79:a9:e4:06:fc:66:ec:21:05:
         7c:43:64:c7:a8:a4:9f:6b:b9:43:e3:0f:cf:f9:a4:24:95:27:
         89:9b:0f:c3:ec:bf:35:66:80:55:22:83:58:0e:13:8e:08:b6:
         66:f5:91:1e:be:75:6c:de:05:ff:ce:c5:71:d0:3e:19:ad:20:
         14:75:4a:82:6e:8a:93:77:87:46:45:2a:02:4e:d3:53:c6:b4:
         a4:d2:ef:c6:15:9a:57:51:58:8c:41:bf:b1:d4:f4:6c:72:02:
         49:dc:da:ba:f0:61:5e:dd:4c:4d:bc:23:34:01:0d:61:c9:aa:
         2d:22:ea:8a:75:8d:32:64:bd:ef:ab:be:64:30:70:f8:ea:f8:
         19:21:2d:f5:8f:8a:d3:35:38:d0:29:4f:8f:f1:5f:1d:27:b0:
         6d:88:01:f5:a7:f0:de:36:1a:a4:c9:96:69:b3:9c:39:e9:1f:
         2f:fd:dd:4e:12:35:8f:05:d8:11:ee:7b:28:ff:81:00:36:4d:
         3b:bc:1e:5d:13:f7:ca:b9:d2:97:ab:1c:19:ba:67:01:62:40:
         56:31:43:a2:3e:0e:c0:30:27:62:0d:ea:f6:83:c4:41:2f:4b:
         d4:c7:6c:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:20 2024 by rpki-client on console-fra.rpki-client.org