Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a663030303a3a2f33362d3336203d3e20323633363431.roa
File:                     323830343a313039343a663030303a3a2f33362d3336203d3e20323633363431.roa (raw, json)
Hash identifier:          ThLvnm/IuqvUFWKpwDSrKQWdvkLxztpRQ+Yz1Hq2QS0=
Subject key identifier:   DD:88:3C:05:07:02:97:DA:5F:8A:33:7B:EA:00:F7:53:04:CD:15:7D
Certificate issuer:       /CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
Certificate serial:       1FD4FFFC639E971AD2611144724D83549BD6E94F
Authority key identifier: 8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a663030303a3a2f33362d3336203d3e20323633363431.roa
Signing time:             Tue 05 Dec 2023 15:44:34 +0000
ROA not before:           Tue 05 Dec 2023 15:39:34 +0000
ROA not after:            Tue 03 Dec 2024 15:44:34 +0000
asID:                     263641
IP address blocks:        2804:1094:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d4:ff:fc:63:9e:97:1a:d2:61:11:44:72:4d:83:54:9b:d6:e9:4f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328
        Validity
            Not Before: Dec  5 15:39:34 2023 GMT
            Not After : Dec  3 15:44:34 2024 GMT
        Subject: CN=DD883C05070297DA5F8A337BEA00F75304CD157D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:89:0e:ac:c0:0b:62:e3:c1:0e:b4:c5:26:1e:
                    57:dc:bf:88:a0:c2:89:83:6e:4a:6e:b5:d0:d2:c3:
                    84:3e:b3:a5:31:a1:b4:bc:a1:7a:c1:fa:57:0b:38:
                    f9:e9:3b:8c:72:d6:15:a6:67:fc:55:5a:38:f3:a8:
                    e3:78:52:3a:51:2e:31:4b:ec:ce:a9:69:9f:24:22:
                    de:8b:36:05:7c:41:a1:23:2f:30:d9:72:2f:7e:c6:
                    c0:cd:c1:16:bf:40:42:d4:3f:96:63:09:fd:71:62:
                    f3:8e:ee:35:d8:20:f5:ca:ae:00:62:75:01:56:fd:
                    94:d7:42:7f:5a:4c:4c:b2:70:7f:e3:d7:a5:04:b5:
                    3f:d8:3d:57:61:2d:15:94:2e:f2:a8:66:6e:82:4c:
                    78:b5:9d:33:28:ed:8b:0f:0a:43:6f:de:57:5e:21:
                    bf:f1:e3:f4:bb:53:eb:49:95:55:50:a2:7b:06:04:
                    00:98:a9:d7:15:87:0e:f0:38:84:0a:b8:c4:9d:ea:
                    e6:e9:77:88:47:70:81:d2:af:13:b1:9a:f5:bc:e1:
                    5a:2f:1a:35:38:c4:e0:af:17:72:d4:df:95:44:0d:
                    42:55:52:8a:21:fb:90:d6:42:78:1a:d2:d3:8f:9b:
                    06:a2:1a:a4:14:23:e6:d2:d4:c6:7b:5e:07:e1:97:
                    7a:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:88:3C:05:07:02:97:DA:5F:8A:33:7B:EA:00:F7:53:04:CD:15:7D
            X509v3 Authority Key Identifier:
                keyid:8A:EF:03:34:1A:6E:C5:A7:8A:A8:B2:E9:2D:9B:9A:D0:58:C3:C3:28

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8AEF03341A6EC5A78AA8B2E92D9B9AD058C3C328.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CJvwxBKMoqPE5unzKF6Rxsu1cBxa5PZAFbPpuSHFxfka/0/323830343a313039343a663030303a3a2f33362d3336203d3e20323633363431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1094:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         aa:8e:06:bc:4c:61:35:fa:ad:52:32:8d:d7:8a:3f:6a:94:c4:
         00:ca:56:07:b1:6d:f1:84:7c:47:ba:d3:8d:4e:46:68:06:0a:
         e5:74:bb:8b:f0:63:52:e7:3e:da:ec:27:04:7e:0d:52:fd:fd:
         ab:1c:0d:7b:e9:46:79:2a:78:56:26:1d:a5:58:a0:6a:2b:8f:
         24:03:54:34:50:59:4d:19:3f:4c:e1:03:3a:24:d8:a5:fa:2e:
         03:e2:af:86:e9:35:32:59:07:bd:5d:00:f6:f4:3e:7e:a1:a6:
         26:55:df:c5:47:85:03:ca:de:2c:59:14:e9:2f:7b:96:86:5a:
         88:39:b5:db:a3:53:d6:9a:a7:82:13:b5:d9:95:f3:89:36:79:
         1a:4a:d1:bc:4b:28:56:2d:34:49:9c:72:c3:ee:77:c0:9c:39:
         2c:a3:f5:52:62:1d:3e:8a:60:ea:eb:b1:c2:8c:88:0d:9f:22:
         da:7e:b3:8c:d5:84:db:08:0a:57:6e:a4:25:99:62:66:18:92:
         3e:05:bb:ee:5b:97:75:15:fb:9f:12:29:07:e7:1c:4f:5d:81:
         a0:68:34:ff:3d:f6:f2:c6:3d:de:8d:dc:37:cc:6a:22:88:6f:
         f4:cf:7f:69:e3:94:64:6f:ba:e7:ad:d5:3e:10:aa:cc:3f:e2:
         17:91:83:59
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org