Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CA5bTN1bg8NaTDTRvC5TJKaG5VbHfj7KWo5spXi7PfRA/0/323830343a333662383a3a2f33322d3334203d3e20323636333637.roa
File:                     323830343a333662383a3a2f33322d3334203d3e20323636333637.roa (raw, json)
Hash identifier:          hu5lhswXTv+jkpU1G6j1iV5b6lpzcmKxivb9E6Q3FSM=
Subject key identifier:   CB:B8:D7:D7:E5:25:DE:EF:AB:94:50:05:2B:39:D2:37:5F:05:92:BC
Certificate issuer:       /CN=8E5E5AD0490CF8A5410FF3D76A15F50ACEF8C854
Certificate serial:       6CC912067480A9FACE36B68AA2D38FB35A2267D9
Authority key identifier: 8E:5E:5A:D0:49:0C:F8:A5:41:0F:F3:D7:6A:15:F5:0A:CE:F8:C8:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E5E5AD0490CF8A5410FF3D76A15F50ACEF8C854.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CA5bTN1bg8NaTDTRvC5TJKaG5VbHfj7KWo5spXi7PfRA/0/323830343a333662383a3a2f33322d3334203d3e20323636333637.roa
Signing time:             Tue 20 Sep 2022 18:30:04 +0000
ROA not before:           Tue 20 Sep 2022 18:25:04 +0000
ROA not after:            Tue 19 Sep 2023 18:30:04 +0000
asID:                     266367
IP address blocks:        2804:36b8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6c:c9:12:06:74:80:a9:fa:ce:36:b6:8a:a2:d3:8f:b3:5a:22:67:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E5E5AD0490CF8A5410FF3D76A15F50ACEF8C854
        Validity
            Not Before: Sep 20 18:25:04 2022 GMT
            Not After : Sep 19 18:30:04 2023 GMT
        Subject: CN=CBB8D7D7E525DEEFAB9450052B39D2375F0592BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:ac:54:8e:94:d4:ab:73:1a:30:d6:28:98:11:
                    f0:6f:64:de:ad:69:2d:43:cc:9b:a8:8f:41:f5:34:
                    b5:fa:6d:8d:2b:f9:54:70:f7:3f:b9:af:c2:2b:bb:
                    ad:dd:44:62:63:53:e2:e3:df:d6:b8:92:00:f1:db:
                    0d:7e:3d:b8:d8:96:c5:fc:b7:52:61:49:4e:f8:4f:
                    43:4c:16:64:eb:32:e5:37:29:0e:68:35:7d:80:57:
                    e9:cc:4c:cd:8e:97:dc:27:b8:51:21:23:70:c7:ea:
                    5c:10:60:b2:ff:d5:c2:14:71:f4:4f:34:18:00:d1:
                    36:8f:2f:10:19:44:f0:ca:06:00:fc:15:68:da:44:
                    dc:51:51:50:6d:32:57:16:b7:47:b1:f5:ee:a9:03:
                    84:31:d5:b5:61:cb:8c:74:75:47:ea:83:70:6f:4f:
                    59:50:c4:9e:bf:4f:f3:0c:cf:19:b4:73:21:2b:62:
                    fe:6e:dc:5b:e9:48:b4:f7:18:36:1d:a3:bc:cf:ff:
                    3e:c4:1d:aa:ca:28:8a:09:05:d8:97:60:03:f9:3a:
                    dc:e9:5d:b1:19:8d:92:80:5e:c7:60:b3:c3:75:67:
                    ef:52:f3:0f:99:7c:e4:a4:ed:ea:76:08:da:5e:8d:
                    03:21:ed:ef:a6:81:87:c5:a0:cf:f7:a4:8b:87:73:
                    bf:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:B8:D7:D7:E5:25:DE:EF:AB:94:50:05:2B:39:D2:37:5F:05:92:BC
            X509v3 Authority Key Identifier:
                keyid:8E:5E:5A:D0:49:0C:F8:A5:41:0F:F3:D7:6A:15:F5:0A:CE:F8:C8:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CA5bTN1bg8NaTDTRvC5TJKaG5VbHfj7KWo5spXi7PfRA/0/8E5E5AD0490CF8A5410FF3D76A15F50ACEF8C854.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E5E5AD0490CF8A5410FF3D76A15F50ACEF8C854.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CA5bTN1bg8NaTDTRvC5TJKaG5VbHfj7KWo5spXi7PfRA/0/323830343a333662383a3a2f33322d3334203d3e20323636333637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:36b8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9c:50:36:09:08:fd:08:ee:05:da:6d:40:a3:19:ad:4c:a4:d9:
         5a:c5:ec:73:39:29:fa:61:1a:70:7f:07:ab:da:29:f9:b0:7c:
         90:4b:b9:1f:82:74:17:50:17:65:68:0c:72:f7:bf:04:4b:99:
         88:09:4a:4a:f3:f1:c9:28:b7:70:3f:0b:76:3f:a6:0a:6b:52:
         4d:aa:06:e9:00:39:15:12:53:d7:79:46:3f:73:57:57:4d:d0:
         4d:8c:e8:85:46:11:9e:e6:cf:49:94:07:d1:09:60:6b:18:e9:
         83:24:74:29:88:35:8a:65:e3:42:c7:32:41:93:f6:06:6f:b2:
         81:de:b0:de:ea:72:9e:f1:64:44:53:ea:e3:bd:5a:17:5b:29:
         75:60:9e:2d:80:ad:9a:19:77:7d:ba:ce:9f:76:36:d5:99:cc:
         61:2d:a0:bd:7a:c2:ec:7e:7d:b8:ac:bd:d7:c3:21:11:66:70:
         b2:cf:6c:42:11:10:8a:e1:91:b2:de:62:29:dc:9c:ec:a7:86:
         1a:bc:e5:8e:c7:f4:55:9c:58:a6:59:ce:e7:83:ee:33:35:0d:
         c1:8e:f3:f3:56:96:a6:76:3c:5d:00:e9:e1:a9:5c:cd:13:7b:
         9a:69:e8:2e:89:21:24:bc:33:4c:60:8a:7f:02:23:ad:16:5a:
         34:f1:60:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org