Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/323830343a313762633a3a2f33322d3332203d3e203532373339.roa
File:                     323830343a313762633a3a2f33322d3332203d3e203532373339.roa (raw, json)
Hash identifier:          fK7Z7VcluBIhH39dilXBIKWAfKrbU/PIjd4j9mKlKV4=
Subject key identifier:   17:F3:A8:2C:55:B1:71:CB:21:F8:60:EF:E9:8E:E5:57:C1:41:2C:42
Certificate issuer:       /CN=862009D4161A11807908B0E9BCD73252750A152D
Certificate serial:       7218F5FDA8884619A4DBA05C982814760D71D61C
Authority key identifier: 86:20:09:D4:16:1A:11:80:79:08:B0:E9:BC:D7:32:52:75:0A:15:2D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862009D4161A11807908B0E9BCD73252750A152D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/323830343a313762633a3a2f33322d3332203d3e203532373339.roa
Signing time:             Thu 12 Jan 2023 18:53:44 +0000
ROA not before:           Thu 12 Jan 2023 18:48:44 +0000
ROA not after:            Thu 11 Jan 2024 18:53:44 +0000
asID:                     52739
IP address blocks:        2804:17bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:18:f5:fd:a8:88:46:19:a4:db:a0:5c:98:28:14:76:0d:71:d6:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=862009D4161A11807908B0E9BCD73252750A152D
        Validity
            Not Before: Jan 12 18:48:44 2023 GMT
            Not After : Jan 11 18:53:44 2024 GMT
        Subject: CN=17F3A82C55B171CB21F860EFE98EE557C1412C42
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c3:e9:43:93:31:b1:64:5e:d8:32:de:5d:85:
                    3c:41:37:50:ba:96:b6:43:5b:c4:23:32:79:c2:d8:
                    a2:4f:5b:60:de:25:e1:2c:6c:40:be:df:f5:69:39:
                    5c:b8:5a:52:d0:f0:12:b3:9b:8b:bf:07:a9:35:91:
                    14:8c:48:00:51:94:ef:e9:4a:c4:8f:51:0c:4a:50:
                    1a:df:36:0a:e0:d7:77:61:54:02:62:eb:a9:3b:7b:
                    94:1d:bf:71:9e:d6:72:be:c7:0e:b2:5f:7d:d3:01:
                    ca:81:ce:c3:ae:69:d1:4b:d5:cd:33:f5:9a:d4:5b:
                    16:66:3f:a3:8f:42:e8:19:21:33:65:d8:61:95:6e:
                    23:dd:89:53:a3:65:54:66:d7:e8:70:fc:70:cf:d7:
                    90:be:7f:09:e9:03:02:21:9e:74:0b:94:3a:b3:f8:
                    c5:b8:4a:00:85:de:bd:c8:87:79:4a:70:25:92:7e:
                    60:46:b4:10:bf:01:e6:b9:56:be:ef:1c:e4:4d:e7:
                    54:74:be:85:9d:19:77:c7:e4:8f:92:18:4f:87:da:
                    5f:1b:fb:b8:67:5c:2e:13:39:2c:48:ac:ff:a0:22:
                    5e:df:4a:0a:c2:69:ab:4c:69:e1:fc:a0:3f:4f:1f:
                    81:32:d7:b8:65:0e:12:91:38:65:4c:8b:59:88:ae:
                    7b:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                17:F3:A8:2C:55:B1:71:CB:21:F8:60:EF:E9:8E:E5:57:C1:41:2C:42
            X509v3 Authority Key Identifier:
                keyid:86:20:09:D4:16:1A:11:80:79:08:B0:E9:BC:D7:32:52:75:0A:15:2D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/862009D4161A11807908B0E9BCD73252750A152D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/862009D4161A11807908B0E9BCD73252750A152D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DSkMMv8ur2KThNtdCbFfbUTeRQUC5aBTPxrbDo2VvvLW/0/323830343a313762633a3a2f33322d3332203d3e203532373339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:17bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:1a:86:cd:e8:70:80:5b:48:1a:d8:4a:cb:38:8c:32:63:9c:
         7f:20:a0:17:49:92:37:fd:90:e3:87:c5:6c:c2:04:78:0b:e8:
         31:05:a9:91:ee:f2:cc:08:41:1a:e9:86:63:3a:0e:9c:67:9a:
         f2:8b:fa:fd:bb:bc:5d:c6:41:a0:e0:a0:ee:05:24:e6:15:fe:
         d3:8c:9e:91:6f:0d:32:a6:8c:16:33:10:14:12:45:a1:5b:3e:
         dc:df:e4:18:12:c5:7c:ca:b8:74:0d:8f:51:d2:1c:60:b1:ae:
         64:b8:b5:bf:7f:35:b9:bf:e7:4e:e4:36:a5:d1:bf:c9:8b:03:
         f6:b2:5c:e2:ad:54:7f:dd:c5:38:51:f5:f2:b8:9c:4e:d6:ec:
         b4:45:7d:f8:24:02:54:b4:83:20:35:0a:14:f5:ba:54:91:41:
         be:d5:00:d2:37:a6:92:9b:79:9f:4b:7e:7b:92:11:c6:53:a7:
         41:8c:5d:64:e0:f7:f3:56:7e:58:b1:3c:c4:17:44:11:85:d7:
         88:01:e2:08:46:1d:5a:66:08:ce:45:d3:b6:1d:27:fc:f3:18:
         fc:f1:d7:54:5e:8b:ca:fc:bb:b2:7b:4f:48:97:a7:20:be:f9:
         9d:9e:a8:93:f7:a5:84:e3:d4:55:45:ef:5f:3b:59:d4:f3:d1:
         4f:f5:e2:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org