Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/323830343a363763383a3a2f33322d3438203d3e20323639363530.roa
File:                     323830343a363763383a3a2f33322d3438203d3e20323639363530.roa (raw, json)
Hash identifier:          aMRmStom2+eNZRPp0a8FJ7aqqmRv9HAPRM/BlpImMtw=
Subject key identifier:   00:E8:A4:8B:DF:A1:24:3F:24:DB:9A:23:9F:00:7C:08:6D:F9:A3:1E
Certificate issuer:       /CN=8E28A4D0B90179F6DE269A6493B5A059256E12BF
Certificate serial:       52B5BA36B0717A6108E04616AA996B086E872697
Authority key identifier: 8E:28:A4:D0:B9:01:79:F6:DE:26:9A:64:93:B5:A0:59:25:6E:12:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E28A4D0B90179F6DE269A6493B5A059256E12BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/323830343a363763383a3a2f33322d3438203d3e20323639363530.roa
Signing time:             Sun 30 Jul 2023 01:40:43 +0000
ROA not before:           Sun 30 Jul 2023 01:35:43 +0000
ROA not after:            Sun 28 Jul 2024 01:40:43 +0000
asID:                     269650
IP address blocks:        2804:67c8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:b5:ba:36:b0:71:7a:61:08:e0:46:16:aa:99:6b:08:6e:87:26:97
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E28A4D0B90179F6DE269A6493B5A059256E12BF
        Validity
            Not Before: Jul 30 01:35:43 2023 GMT
            Not After : Jul 28 01:40:43 2024 GMT
        Subject: CN=00E8A48BDFA1243F24DB9A239F007C086DF9A31E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:33:3d:07:9d:7b:11:5b:2f:3e:7c:3e:06:68:
                    24:8b:30:18:2d:c4:06:41:ca:ee:21:96:2d:a0:0b:
                    28:7c:29:b5:6c:a8:30:14:0f:4e:fa:0d:5b:74:a2:
                    72:9a:8c:c3:88:e8:71:e8:d9:de:8c:af:f0:64:d7:
                    b3:62:c9:81:40:9f:ab:02:d8:40:b1:51:13:5e:a3:
                    d9:82:f1:62:5d:41:d5:97:9a:79:62:01:c5:c2:54:
                    8c:4f:8a:4c:c2:5b:12:58:37:1a:de:72:61:08:85:
                    49:61:d8:d1:38:ba:0b:c7:50:42:06:3b:32:2d:82:
                    22:d2:83:1a:1c:f2:56:58:6a:61:0b:34:c2:3b:90:
                    cd:59:c9:0c:ee:65:03:1a:c8:83:7f:38:fc:e4:63:
                    d9:7c:e2:22:e3:05:e2:ad:78:00:54:55:20:64:3c:
                    d1:00:b4:f6:9c:92:d1:bb:e7:7f:cb:73:00:02:4a:
                    c1:5c:c0:dd:20:84:25:f7:f5:20:7f:3e:28:5d:49:
                    cd:d2:8b:1c:bb:61:50:b2:56:f0:93:9b:c0:d0:8f:
                    97:55:56:6a:79:a0:e2:ef:c8:f6:e9:51:0a:05:e0:
                    91:dc:2c:8e:bf:70:53:b4:04:e2:77:50:09:e0:f8:
                    24:94:ec:38:bc:85:be:9b:06:31:8b:bb:ff:17:3a:
                    0f:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:E8:A4:8B:DF:A1:24:3F:24:DB:9A:23:9F:00:7C:08:6D:F9:A3:1E
            X509v3 Authority Key Identifier:
                keyid:8E:28:A4:D0:B9:01:79:F6:DE:26:9A:64:93:B5:A0:59:25:6E:12:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/8E28A4D0B90179F6DE269A6493B5A059256E12BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E28A4D0B90179F6DE269A6493B5A059256E12BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CdZLpMmsr9xpC45GGBTBVRz11GZVHoankf8Bbtjfs19u/0/323830343a363763383a3a2f33322d3438203d3e20323639363530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:8a:5e:f3:ca:4f:7f:0a:17:d0:7f:bd:8e:cf:d7:de:b9:96:
         03:65:d1:0e:34:b4:a4:7d:f8:21:9c:18:f0:e4:97:f2:5e:f7:
         a6:ca:74:10:1a:f1:d3:e3:03:05:fd:3f:55:fc:99:60:68:2c:
         b6:49:5c:a0:7b:e9:fb:4e:48:01:52:f9:17:0e:60:9f:29:da:
         3c:0b:eb:34:88:8d:a2:7a:0f:87:bc:79:f1:25:98:85:4b:e1:
         a4:3c:01:7d:2b:74:aa:ff:33:cd:4b:05:f3:75:d5:48:96:88:
         1d:71:71:0a:c8:32:1a:81:74:3a:06:d5:c8:67:3f:d2:b7:53:
         da:9a:fe:aa:4f:48:4a:80:97:16:1e:fd:35:85:da:d1:0a:af:
         1c:cd:fd:ff:b8:f9:12:a8:23:a4:ea:75:c7:08:af:9b:42:44:
         75:9c:3d:19:45:61:98:74:d5:a7:29:d3:25:75:bb:a1:28:77:
         06:bd:ff:f7:07:66:36:56:1e:bb:b2:22:05:0a:04:fa:52:31:
         30:ad:7e:4c:28:b5:0c:bd:25:4c:0f:06:11:68:2b:9c:d3:04:
         43:f8:57:4d:95:13:16:86:16:f0:c7:a0:c3:2d:f0:bd:48:24:
         11:32:b8:1d:9d:91:b9:cd:68:01:65:a4:36:b6:7d:20:8d:42:
         17:dc:3f:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org