Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/323830343a6438383a3a2f33322d3438203d3e203532363337.roa
File:                     323830343a6438383a3a2f33322d3438203d3e203532363337.roa (raw, json)
Hash identifier:          ohla9zHlPoKepxlVKcyTBamuZ5O+W4et+Sbq10MwpXM=
Subject key identifier:   D5:9D:19:0D:56:A5:DC:D8:82:49:02:8E:91:A1:0F:71:4D:EF:22:89
Certificate issuer:       /CN=9F1CCE2DC16FB55A7D239106CA91634E67D98178
Certificate serial:       53F3711859BAB427B706842D0E3150B576387BFD
Authority key identifier: 9F:1C:CE:2D:C1:6F:B5:5A:7D:23:91:06:CA:91:63:4E:67:D9:81:78
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F1CCE2DC16FB55A7D239106CA91634E67D98178.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/323830343a6438383a3a2f33322d3438203d3e203532363337.roa
Signing time:             Thu 11 Nov 2021 02:37:44 +0000
ROA not before:           Thu 11 Nov 2021 02:32:44 +0000
ROA not after:            Thu 10 Nov 2022 02:37:44 +0000
asID:                     52637
IP address blocks:        2804:d88::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:f3:71:18:59:ba:b4:27:b7:06:84:2d:0e:31:50:b5:76:38:7b:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9F1CCE2DC16FB55A7D239106CA91634E67D98178
        Validity
            Not Before: Nov 11 02:32:44 2021 GMT
            Not After : Nov 10 02:37:44 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:7d:21:38:2b:20:a7:e5:83:3c:e2:a4:6f:33:
                    79:6c:ca:08:3f:14:5f:78:c8:73:c1:46:5f:d8:db:
                    5c:5d:a2:32:24:1a:1a:1c:30:c1:cc:85:37:21:6a:
                    c3:ed:f9:37:e7:11:95:77:85:68:48:5a:9d:1e:e0:
                    8f:71:88:72:10:92:61:3c:91:b3:4e:42:e9:d5:83:
                    a6:a6:65:c1:8d:17:9a:fb:c7:c7:15:b9:4c:9b:96:
                    7f:64:20:ec:bf:fe:d5:67:e2:8f:fc:f3:1a:bf:ad:
                    1d:90:01:84:20:9e:b2:6d:aa:71:c8:77:3b:fd:f5:
                    10:53:36:d6:cb:99:83:82:a1:b9:9d:d7:83:49:aa:
                    58:ca:81:d1:9b:b1:83:af:55:95:00:6b:f4:1b:19:
                    b8:38:c9:d4:3c:04:dc:2a:d8:bf:0a:5f:b8:55:f6:
                    cc:07:37:68:a9:d3:54:df:d9:d4:07:9f:44:c7:ca:
                    fd:16:74:dd:a9:f2:80:7c:d3:6c:5d:73:96:9e:ed:
                    a6:f5:c1:80:41:8e:43:14:83:b0:d1:78:1a:02:8c:
                    c1:43:45:01:62:11:89:6c:bf:91:7f:78:b5:c8:92:
                    3e:66:c1:e1:c7:5c:e7:97:39:47:78:4a:8f:3a:e4:
                    ae:1d:f1:f9:a0:d7:81:a9:3c:b2:93:41:0d:8f:c1:
                    c9:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D5:9D:19:0D:56:A5:DC:D8:82:49:02:8E:91:A1:0F:71:4D:EF:22:89
            X509v3 Authority Key Identifier:
                keyid:9F:1C:CE:2D:C1:6F:B5:5A:7D:23:91:06:CA:91:63:4E:67:D9:81:78

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/9F1CCE2DC16FB55A7D239106CA91634E67D98178.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9F1CCE2DC16FB55A7D239106CA91634E67D98178.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzWL6DcvcB4YQ8A5ZDMp3i3LS2EWBSzh2PwrgZdDuWWB/0/323830343a6438383a3a2f33322d3438203d3e203532363337.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         8e:ba:c2:0b:eb:16:fe:44:48:13:e1:00:26:5f:75:3a:12:73:
         69:3a:11:3b:8f:83:aa:27:5a:1c:c2:54:86:70:91:39:c9:a6:
         35:2c:9a:8c:c0:1d:f0:09:10:e1:32:d0:96:4d:d9:d6:7b:02:
         8b:ce:cf:e5:68:6b:35:6a:61:10:99:33:19:1b:b9:06:5c:12:
         13:e7:3f:6a:7b:a4:0f:f9:6f:de:02:7e:27:f4:72:11:f4:49:
         36:0c:0b:26:0b:2e:5f:be:a3:53:45:ba:1c:9d:d5:c3:9b:ca:
         4b:d0:9c:97:e0:fa:e9:bb:71:67:9e:00:9d:b8:7e:c5:56:07:
         48:da:e1:80:af:4f:e2:0b:eb:1e:4d:d9:48:a9:1f:bd:a6:69:
         3f:df:34:eb:a7:ea:8e:40:dc:3f:5d:ce:28:00:21:f2:07:34:
         38:10:ef:41:87:cd:73:34:36:f4:fd:7a:fa:ff:1d:80:89:21:
         11:e6:b6:75:d1:a0:4b:d6:00:57:77:bc:36:d0:7b:0a:bd:a0:
         ac:b1:f8:f4:b4:90:64:bd:12:1c:53:ef:5f:2c:6f:74:10:5b:
         71:c1:a1:95:01:43:ce:46:0a:15:9b:52:0b:58:d1:97:51:f5:
         88:93:ee:b0:6f:e4:35:aa:1b:05:21:ed:32:9f:b4:01:70:97:
         c6:85:62:4e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:21 2024 by rpki-client on console-fra.rpki-client.org