Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/323830343a346662633a3a2f33322d3332203d3e20323638333436.roa
File:                     323830343a346662633a3a2f33322d3332203d3e20323638333436.roa (raw, json)
Hash identifier:          kXnjM43cCdu6Nz1D3hs9IbOlvDqu1UZxzAekWzklhrk=
Subject key identifier:   D2:48:DC:CD:10:CC:66:8F:88:22:B5:DC:8C:AE:04:4A:C2:70:EB:9C
Certificate issuer:       /CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
Certificate serial:       45643B8EC8BA3C7E253E2D1C26083D60C869BBAA
Authority key identifier: 0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/323830343a346662633a3a2f33322d3332203d3e20323638333436.roa
Signing time:             Mon 22 May 2023 19:23:59 +0000
ROA not before:           Mon 22 May 2023 19:18:59 +0000
ROA not after:            Mon 20 May 2024 19:23:59 +0000
asID:                     268346
IP address blocks:        2804:4fbc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:64:3b:8e:c8:ba:3c:7e:25:3e:2d:1c:26:08:3d:60:c8:69:bb:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0A4290FC91304B5BF80991BEBA06F918C4FAF5AF
        Validity
            Not Before: May 22 19:18:59 2023 GMT
            Not After : May 20 19:23:59 2024 GMT
        Subject: CN=D248DCCD10CC668F8822B5DC8CAE044AC270EB9C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:1c:c0:34:1c:bf:5d:85:55:df:95:b7:9d:91:
                    68:d3:24:0e:04:4d:b4:64:34:2a:23:1b:f8:d6:a1:
                    89:ac:a1:af:80:75:16:b7:89:a8:67:43:6d:c1:f3:
                    db:ea:8b:db:cd:2a:2b:78:d1:4d:29:c1:75:3a:c2:
                    22:6f:26:2a:90:0e:8b:00:66:71:15:14:c0:9f:e6:
                    4a:4b:ab:35:e5:77:84:3d:2e:91:ac:d5:92:b0:d8:
                    9c:f2:43:3c:2e:98:c4:91:17:73:fc:aa:d4:8b:59:
                    d0:02:ac:34:36:e7:66:33:27:6f:49:9b:5c:0c:40:
                    64:c8:d8:f9:76:91:67:ac:a8:90:22:b3:0a:bf:df:
                    ab:20:25:74:c7:19:cc:bc:40:5e:3f:a0:04:d6:80:
                    7b:04:8b:32:de:38:66:22:8d:3a:0e:bb:13:a5:00:
                    41:0c:d8:a9:6a:36:21:90:af:a0:c5:91:1d:40:fa:
                    bb:99:83:24:b4:54:58:76:33:3b:39:8e:16:52:84:
                    bb:7e:ce:14:bf:6f:36:26:1c:de:68:b2:3f:a2:2f:
                    b7:a3:0c:42:db:6f:ff:13:30:66:c1:d7:60:4f:81:
                    f6:8d:cd:20:37:ef:ee:9a:92:57:ad:13:12:a4:fe:
                    53:36:3c:a5:18:72:0a:2c:26:3f:f8:1a:84:b4:42:
                    8f:cf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:48:DC:CD:10:CC:66:8F:88:22:B5:DC:8C:AE:04:4A:C2:70:EB:9C
            X509v3 Authority Key Identifier:
                keyid:0A:42:90:FC:91:30:4B:5B:F8:09:91:BE:BA:06:F9:18:C4:FA:F5:AF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0A4290FC91304B5BF80991BEBA06F918C4FAF5AF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D17Z9LGhDwZrjnULS2eK8LLCVswms5jmgYsD6H6eBLZh/0/323830343a346662633a3a2f33322d3332203d3e20323638333436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4fbc::/32

    Signature Algorithm: sha256WithRSAEncryption
         46:e7:80:fc:e9:2f:30:1c:85:fc:f2:82:e2:ce:b6:ba:e8:ba:
         14:d1:d2:86:3b:f7:b6:aa:ae:73:1d:99:d8:a4:4e:c5:0e:41:
         3d:43:b6:81:6e:6b:ca:76:ef:a4:f3:65:29:ac:86:02:62:d0:
         6d:58:a0:e8:34:83:98:7b:12:8f:11:8b:d8:a6:e1:a7:ec:34:
         68:6f:16:27:15:3d:db:3f:96:44:3e:c9:8b:4a:79:8b:57:2a:
         03:18:4e:4a:6f:c3:84:57:92:0f:16:48:29:59:f6:62:60:f2:
         8e:14:71:ba:6e:d3:6f:cb:a5:94:e0:53:df:ab:98:be:6e:50:
         cb:d3:ee:5d:04:00:f8:58:d0:25:b5:5a:2f:52:6a:6c:ce:68:
         13:51:35:f5:9e:83:40:c3:99:51:11:58:92:c9:b3:eb:cd:0f:
         5f:aa:08:53:ae:a6:c2:02:9a:05:a6:c6:81:14:90:d0:26:29:
         c1:7f:bb:0f:e8:95:7d:5f:24:29:e0:85:c9:9f:32:27:0c:06:
         cf:a5:bd:c1:90:91:63:3d:6e:a9:2f:8e:c5:03:59:3c:15:49:
         27:3c:90:08:8b:c3:50:e1:4e:2d:4b:34:ec:7c:93:5d:aa:e5:
         03:3b:07:89:e4:42:de:e3:73:da:a9:42:3f:44:fc:78:66:70:
         99:91:96:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org