Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a3a2f33322d3332203d3e20323633363431.roa
File:                     323830343a313039343a3a2f33322d3332203d3e20323633363431.roa (raw, json)
Hash identifier:          ke7wrP7Ghwbsm8TBY0nEUnVi9O2jrfCmGE+Zb93Nsc4=
Subject key identifier:   89:8D:D5:B6:C3:7F:E9:B7:78:67:A4:CB:CC:57:1C:20:C3:46:23:55
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       7D2FB9C0DB4EC9C0C00DC10903BC247C7CFF4928
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a3a2f33322d3332203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:35 +0000
ROA not before:           Tue 05 Dec 2023 15:39:35 +0000
ROA not after:            Tue 03 Dec 2024 15:44:35 +0000
asID:                     263641
IP address blocks:        2804:1094::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:2f:b9:c0:db:4e:c9:c0:c0:0d:c1:09:03:bc:24:7c:7c:ff:49:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:35 2023 GMT
            Not After : Dec  3 15:44:35 2024 GMT
        Subject: CN=898DD5B6C37FE9B77867A4CBCC571C20C3462355
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:96:b2:78:b1:c1:2e:a0:97:c2:e7:14:55:f6:1f:
                    03:d5:55:d2:c5:2e:be:6a:5e:09:ad:6f:fe:a2:b3:
                    97:3a:95:c2:78:1f:8e:95:42:bc:e0:a9:66:d5:36:
                    b0:ca:21:23:7d:20:3a:01:ec:70:50:67:00:89:0b:
                    67:81:a4:6f:eb:83:6d:24:92:99:a2:35:df:48:cd:
                    4e:49:2d:d7:12:96:dd:10:b1:27:90:0e:82:7f:15:
                    b7:41:bc:af:b9:e4:e0:b8:86:3f:8b:27:1b:cd:f8:
                    8b:85:4f:45:ff:6b:ea:47:bd:93:dc:94:c3:74:02:
                    4c:6d:f5:a9:77:26:80:e2:24:fd:97:e8:4b:c7:f7:
                    8f:2f:50:3e:3c:6c:69:2c:0f:ff:69:c1:11:4b:19:
                    f7:3e:3e:2a:90:12:28:db:aa:bb:0b:36:10:84:6e:
                    4c:85:5f:90:dd:13:d8:61:fe:14:c2:6e:43:9d:70:
                    c6:4f:47:24:2e:f5:54:87:a4:be:f9:17:d3:39:4a:
                    cd:3a:4c:e6:06:bf:e8:ff:9e:56:ef:ae:c8:95:47:
                    b3:45:2a:eb:e9:6c:24:eb:22:14:16:8b:17:6d:f8:
                    98:8d:55:ba:5b:e1:02:1d:b8:ee:81:1a:ca:df:74:
                    cc:e3:e3:e0:35:72:ca:7a:93:e7:de:93:67:b4:d7:
                    e6:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                89:8D:D5:B6:C3:7F:E9:B7:78:67:A4:CB:CC:57:1C:20:C3:46:23:55
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a3a2f33322d3332203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094::/32

    Signature Algorithm: sha256WithRSAEncryption
         40:5a:46:83:dc:9c:9f:e9:08:83:4b:1d:23:a2:66:07:ff:34:
         33:d1:07:50:aa:9e:9d:5d:2d:02:19:c8:56:14:d5:97:8b:f8:
         54:d4:1b:91:a5:67:d3:25:97:e8:87:e6:af:70:92:e0:04:4e:
         0b:e1:8f:3f:95:84:0b:16:04:fd:de:6b:05:42:45:a8:9a:0d:
         d2:83:6d:e7:69:10:c4:67:f1:85:47:8d:10:03:00:d8:1f:ba:
         6b:6a:28:09:27:c3:29:bc:b8:d5:e7:24:a4:8b:ef:2a:ef:37:
         65:c1:cc:fe:32:da:1c:45:d2:0e:c7:83:9b:49:80:33:8b:65:
         30:02:55:b3:b9:21:e6:cf:96:73:bc:bf:20:97:bb:8c:9f:e9:
         5e:61:87:12:59:26:c6:68:f3:3e:8d:6d:a6:2c:d4:f1:35:c8:
         72:11:b2:5c:17:bf:04:b0:04:8f:28:8b:1f:0d:80:81:04:b5:
         f3:30:d4:33:be:ba:52:f7:d6:a0:5d:a7:3b:16:4e:08:46:85:
         38:89:5a:93:b4:ed:84:cf:c6:15:53:15:92:4a:76:e6:fc:b0:
         fc:74:6e:e4:5b:96:52:b3:e7:ae:58:41:0d:8f:d4:41:2b:44:
         3e:42:b4:f8:66:b3:b3:e2:ea:39:1a:87:79:e0:cf:05:0d:e9:
         68:ac:96:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org