Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/323830343a363538383a3a2f33322d3338203d3e20323639343937.roa
File:                     323830343a363538383a3a2f33322d3338203d3e20323639343937.roa (raw, json)
Hash identifier:          A9O1LTOO2XlI6omfweat2uZUgnrrdBuhWhy8VrwAUcM=
Subject key identifier:   F1:EC:2B:59:36:97:BB:17:06:51:9D:56:88:AC:74:AB:03:E9:53:5E
Certificate issuer:       /CN=8FB8EB4670E84D415F01818C8F113802A04EF0AA
Certificate serial:       74EA09094DA36AE8A6FE8F94E7CFA1966EBC633D
Authority key identifier: 8F:B8:EB:46:70:E8:4D:41:5F:01:81:8C:8F:11:38:02:A0:4E:F0:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FB8EB4670E84D415F01818C8F113802A04EF0AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/323830343a363538383a3a2f33322d3338203d3e20323639343937.roa
Signing time:             Fri 08 Jul 2022 14:00:01 +0000
ROA not before:           Fri 08 Jul 2022 13:55:01 +0000
ROA not after:            Sat 08 Jul 2023 14:00:01 +0000
asID:                     269497
IP address blocks:        2804:6588::/32 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:ea:09:09:4d:a3:6a:e8:a6:fe:8f:94:e7:cf:a1:96:6e:bc:63:3d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FB8EB4670E84D415F01818C8F113802A04EF0AA
        Validity
            Not Before: Jul  8 13:55:01 2022 GMT
            Not After : Jul  8 14:00:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:28:78:1e:68:42:b2:40:c3:77:92:9a:fd:24:
                    f3:33:bd:86:ea:10:aa:2e:c8:c2:db:c2:71:d0:c5:
                    72:3f:ff:f0:72:26:c4:04:1c:9e:c4:69:27:21:1c:
                    a8:11:11:cc:13:d3:53:b0:fc:b4:3a:54:ce:a4:31:
                    09:f9:87:2c:82:3f:7c:75:f3:0c:b2:fb:a9:96:12:
                    42:33:a6:2b:89:4d:c9:c0:3b:85:12:65:ca:0f:93:
                    22:81:88:82:24:71:ac:77:fb:18:4e:6c:21:4e:e1:
                    b0:d8:e3:9d:23:ee:a3:f2:8d:8e:00:24:6b:e5:62:
                    62:66:d6:6d:9a:25:00:9e:84:15:0d:e7:fb:7c:5b:
                    dd:fb:a0:ce:79:34:df:de:25:a7:b2:bd:f5:e4:b3:
                    a0:d9:69:f9:e2:48:c5:41:45:8d:ba:bb:17:83:7e:
                    0a:44:03:be:0d:f2:1f:81:1f:2b:3d:fa:f8:51:9a:
                    a0:0d:21:38:f7:fa:77:d2:9e:81:73:63:45:71:7f:
                    a8:df:20:fd:81:7c:39:10:12:39:90:84:f0:33:18:
                    4b:04:18:76:0c:2d:c4:4d:38:96:f6:fa:7a:c6:2a:
                    de:36:3e:cf:07:cf:28:fd:31:02:34:39:da:fb:92:
                    0c:7a:84:dc:38:86:bc:c4:e4:fd:79:6d:cb:82:d5:
                    f2:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:EC:2B:59:36:97:BB:17:06:51:9D:56:88:AC:74:AB:03:E9:53:5E
            X509v3 Authority Key Identifier:
                keyid:8F:B8:EB:46:70:E8:4D:41:5F:01:81:8C:8F:11:38:02:A0:4E:F0:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/8FB8EB4670E84D415F01818C8F113802A04EF0AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FB8EB4670E84D415F01818C8F113802A04EF0AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BsQHRqpK5pZcDVYuq3uHt2EHgaifTTzc24gorit3Vjeg/0/323830343a363538383a3a2f33322d3338203d3e20323639343937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6588::/32

    Signature Algorithm: sha256WithRSAEncryption
         5f:f7:ce:8e:36:3e:02:aa:04:9d:ed:69:03:30:1c:19:83:af:
         27:a0:d8:45:ab:ea:5a:23:e7:71:75:26:d3:06:02:5c:c7:7a:
         51:e1:2c:cb:bb:f5:af:66:01:cb:cd:06:02:60:e1:36:ab:c3:
         e8:5c:76:91:9b:bc:19:b5:db:97:ab:d2:40:ad:63:87:53:80:
         f1:7c:d0:80:bc:3e:1b:1b:4b:3e:cd:fd:be:36:48:c5:64:5e:
         10:9f:65:ef:eb:94:8f:18:fb:23:d5:fa:b8:b4:d0:9f:23:d8:
         07:ba:e1:55:b1:f5:30:04:b3:c9:6d:0e:85:54:5e:d8:5b:53:
         8d:76:f5:68:a2:00:c3:77:f7:86:33:2d:07:c1:d4:f7:3d:59:
         9e:16:92:63:c6:9d:4c:98:2b:d0:91:2c:af:df:a4:cd:80:35:
         e6:d6:d0:1a:55:03:e1:b4:82:45:32:fe:59:8d:36:43:33:8c:
         12:db:86:3b:26:31:44:79:a2:9a:75:f5:b8:d3:82:a4:89:33:
         d8:0e:1b:2d:e2:5e:a8:9f:d9:5f:47:e5:34:95:ab:9f:0d:2b:
         e1:33:96:35:de:a5:af:d8:62:98:09:ef:d1:ee:8f:1f:a9:9d:
         88:db:ad:09:8f:d3:99:72:82:e0:98:1b:ac:3b:4a:d1:7f:ce:
         09:0e:48:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org