Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/0/323830343a333634343a3a2f33322d3430203d3e20323636333338.roa
File:                     323830343a333634343a3a2f33322d3430203d3e20323636333338.roa (raw, json)
Hash identifier:          KuR+FdM1Sut/ghFzO46Gs5cHkj3Ej3hhkasw67+S+J8=
Subject key identifier:   A8:23:26:99:FD:71:02:CC:BC:DE:DC:9D:7E:A9:5E:5F:70:92:88:48
Certificate issuer:       /CN=8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5
Certificate serial:       4E06690832BA5D377923C7097B37FF996B09241C
Authority key identifier: 8F:24:F4:01:F7:CE:9F:43:05:EE:7F:5E:EE:78:60:B4:0E:10:2C:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/0/323830343a333634343a3a2f33322d3430203d3e20323636333338.roa
Signing time:             Mon 15 May 2023 18:00:00 +0000
ROA not before:           Mon 15 May 2023 17:55:00 +0000
ROA not after:            Wed 15 May 2024 18:00:00 +0000
asID:                     266338
IP address blocks:        2804:3644::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:06:69:08:32:ba:5d:37:79:23:c7:09:7b:37:ff:99:6b:09:24:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5
        Validity
            Not Before: May 15 17:55:00 2023 GMT
            Not After : May 15 18:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:28:05:12:3a:33:88:40:bc:48:55:8a:0e:dd:
                    a3:50:f5:60:62:c9:7c:f2:03:82:35:b7:3a:e2:7c:
                    9f:0d:88:3b:83:fb:6c:49:17:e4:49:67:22:c4:e9:
                    5c:3d:37:0f:d5:d5:11:8e:9e:da:10:49:04:4b:85:
                    4d:4d:3c:24:ed:b1:67:15:b7:bd:8e:8b:a2:8b:9f:
                    d6:2e:5f:b5:c0:4a:b8:76:e1:9a:8e:8a:cc:73:ce:
                    c9:d4:43:67:b4:b2:e0:d9:7e:e6:11:b9:04:31:3c:
                    8f:c8:ad:9e:35:ed:e0:0a:a4:ee:34:6b:3e:54:05:
                    88:cc:7c:0b:d9:a2:cc:72:d8:76:60:81:04:b7:04:
                    e1:ab:67:47:b1:43:4a:43:25:85:8e:fc:f6:2e:31:
                    a8:74:63:92:56:08:9e:a4:62:70:2a:a8:83:11:ec:
                    9c:5f:ef:dc:1b:82:ce:20:47:40:cb:cf:a4:ac:b9:
                    0e:e6:ec:24:c5:f2:cc:8c:ab:b4:fd:31:0e:48:15:
                    fe:78:1a:c6:b7:4c:a3:04:29:de:11:bb:c7:1d:e6:
                    20:ff:ef:7d:97:5a:f9:30:f3:1c:6c:a9:bf:6f:40:
                    5e:ca:9c:bc:df:a2:de:3a:42:de:fb:a7:f2:12:7a:
                    2a:4e:88:10:5d:00:c1:c6:08:75:74:37:b7:ef:54:
                    1b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:23:26:99:FD:71:02:CC:BC:DE:DC:9D:7E:A9:5E:5F:70:92:88:48
            X509v3 Authority Key Identifier:
                keyid:8F:24:F4:01:F7:CE:9F:43:05:EE:7F:5E:EE:78:60:B4:0E:10:2C:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/0/8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8F24F401F7CE9F4305EE7F5EEE7860B40E102CC5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CM61YX48Fxvq9UTK57aGQ5ZfhK1j8pjiohpUKNpekH55/0/323830343a333634343a3a2f33322d3430203d3e20323636333338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3644::/32

    Signature Algorithm: sha256WithRSAEncryption
         1d:e3:34:4a:6e:6e:36:11:d9:30:6c:28:49:f3:b7:5f:ce:f9:
         b6:f7:32:76:4a:0c:34:5f:f7:b7:3f:c4:c2:69:1b:f1:15:94:
         de:13:25:b8:bd:d4:20:96:09:75:5a:22:2a:6d:08:54:91:5a:
         38:85:f4:21:a9:25:31:e5:6c:cb:32:fa:78:40:0c:61:e1:c6:
         33:ef:96:64:7a:9b:08:5e:cd:40:e4:e8:59:3b:9d:54:0b:81:
         cb:aa:85:75:b1:78:e1:4c:b2:1e:66:fd:c9:1b:db:45:61:7f:
         99:04:57:5f:7d:aa:81:f4:3e:1d:50:01:12:5b:7f:92:05:c0:
         4e:9c:42:36:59:96:41:4f:a6:14:11:8c:a0:85:2d:8c:6f:d9:
         ca:ba:a1:40:5d:58:b9:48:50:75:db:19:1d:1c:3f:72:95:de:
         ec:05:56:9f:80:d9:46:d4:0f:5d:48:fe:b8:07:fc:42:0f:41:
         e4:6f:b5:11:97:e0:ae:f7:e2:d1:d7:6e:b9:1b:3d:ab:8e:75:
         a8:f3:bc:80:ea:8b:3e:d8:1f:49:f7:e0:46:b6:c1:1f:dd:07:
         c1:c7:8a:6b:24:84:dc:dc:45:ce:1b:fc:f9:35:67:b5:86:91:
         05:df:44:02:fc:ac:6c:d8:fb:2a:c5:7d:e4:75:88:0a:8e:4e:
         a5:a6:11:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org