Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a3a2f33342d3334203d3e20323731323538.roa
File:                     323830343a373861633a3a2f33342d3334203d3e20323731323538.roa (raw, json)
Hash identifier:          3vQk7eN+Ki16saxNWEvIXIsx1lcHqeGIwAK5xf90dPQ=
Subject key identifier:   3D:C9:B1:E3:E1:1A:92:A8:FE:BA:B4:59:81:2D:83:93:53:EF:E9:1A
Certificate issuer:       /CN=F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B
Certificate serial:       04C32E5BAD95D0F639ACCC7240221D8E7EDE4F3C
Authority key identifier: F0:F5:1C:40:B2:34:DF:30:4F:48:E1:DC:19:EF:7B:B2:0D:FB:1A:5B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a3a2f33342d3334203d3e20323731323538.roa
Signing time:             Fri 25 Aug 2023 02:29:24 +0000
ROA not before:           Fri 25 Aug 2023 02:24:24 +0000
ROA not after:            Fri 23 Aug 2024 02:29:24 +0000
asID:                     271258
IP address blocks:        2804:78ac::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:c3:2e:5b:ad:95:d0:f6:39:ac:cc:72:40:22:1d:8e:7e:de:4f:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B
        Validity
            Not Before: Aug 25 02:24:24 2023 GMT
            Not After : Aug 23 02:29:24 2024 GMT
        Subject: CN=3DC9B1E3E11A92A8FEBAB459812D839353EFE91A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1e:ac:9d:e8:ff:5e:e0:85:2d:26:7c:ad:28:
                    2c:35:bb:43:ef:fb:92:65:30:18:8f:cf:78:aa:fc:
                    0e:23:32:81:96:69:e2:d3:99:bb:05:02:15:a2:6e:
                    11:ac:de:dc:09:13:f9:23:6b:eb:a9:66:fc:29:2a:
                    15:d1:0e:a9:e4:7e:82:da:82:ae:04:36:33:7a:a3:
                    c4:c9:44:18:90:90:95:b4:61:d7:4a:dc:d0:14:8b:
                    d7:f4:97:21:e8:a5:3d:e9:f0:92:31:1b:f8:b9:21:
                    92:22:7a:3f:e4:63:93:43:9d:a3:90:59:03:46:cf:
                    f7:1c:33:b4:82:f7:73:67:f9:e2:e6:6a:b3:ab:2d:
                    a1:87:66:74:50:93:95:8e:a9:3d:09:c5:a9:d9:d0:
                    cd:f6:5e:44:b4:61:5a:9c:2b:ea:12:a5:d4:1a:c0:
                    22:5f:82:25:cb:04:e3:e7:89:d4:a8:62:ad:8b:ce:
                    b7:03:2c:54:ed:77:8d:41:05:c2:d2:9d:05:e4:d1:
                    ed:45:c8:3e:c6:01:a0:a1:7e:d7:66:41:ec:d7:51:
                    cd:bf:7f:b9:7a:47:44:df:e2:e4:34:1a:a9:6f:18:
                    d3:8a:7f:0c:b5:f2:1c:ce:77:a2:93:6c:2a:fe:8f:
                    ce:26:e2:ee:9b:54:16:19:73:34:41:3f:ab:f7:14:
                    6a:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:C9:B1:E3:E1:1A:92:A8:FE:BA:B4:59:81:2D:83:93:53:EF:E9:1A
            X509v3 Authority Key Identifier:
                keyid:F0:F5:1C:40:B2:34:DF:30:4F:48:E1:DC:19:EF:7B:B2:0D:FB:1A:5B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F0F51C40B234DF304F48E1DC19EF7BB20DFB1A5B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DAwcSTGJWEC9RwWPot2oiR5uHZNpiJYnYwhW5EuuiwJ1/0/323830343a373861633a3a2f33342d3334203d3e20323731323538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78ac::/34

    Signature Algorithm: sha256WithRSAEncryption
         99:43:9c:3c:1d:97:08:8b:00:0d:df:db:af:4e:82:a4:07:7d:
         60:9f:19:50:be:48:c7:51:79:53:75:e1:c1:1c:3f:3c:74:25:
         e1:b5:40:54:39:fb:8e:79:bf:16:4d:82:91:f3:f5:42:3b:be:
         4e:ca:17:0f:cd:60:a0:c8:4d:9c:f2:8a:73:2c:a3:f8:aa:a2:
         6f:ed:b1:51:1b:53:10:d0:47:43:6e:c2:fa:67:ac:8e:77:66:
         6c:2e:61:31:04:c5:fd:83:21:a6:44:83:9f:e0:0e:11:3d:cf:
         5b:c4:08:11:28:32:08:7e:fd:2a:cd:ed:8e:af:58:89:95:af:
         d9:26:30:6f:f2:78:ff:d8:41:90:0d:55:67:8c:ab:40:41:8e:
         c9:72:f2:72:8b:b7:93:43:75:f8:39:df:cd:86:6b:ef:c1:95:
         e3:3a:32:bb:21:e5:45:78:ae:f2:ab:2c:65:1f:68:8a:49:69:
         5c:0b:7b:14:af:4e:0d:68:76:76:33:36:7a:15:7d:a4:8f:80:
         90:04:8d:36:f7:99:43:17:40:42:3d:bd:4f:f2:72:71:fb:c4:
         05:30:1b:b7:38:9b:2f:79:d7:cf:bd:e5:7b:b1:f3:a9:d7:d1:
         05:a1:43:74:3c:d3:5e:ef:b7:d5:7e:bd:e7:af:7a:f0:35:d0:
         e8:a2:f0:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org