Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/323830343a6538303a3a2f33322d3438203d3e20323632363736.roa
File:                     323830343a6538303a3a2f33322d3438203d3e20323632363736.roa (raw, json)
Hash identifier:          HOq1cggynsjIdOmNNvRIxN62CTv2KMXJO/+szxLYokA=
Subject key identifier:   98:90:8F:C0:62:B6:12:BD:D8:C1:B7:55:C1:54:CE:07:5F:72:EF:74
Certificate issuer:       /CN=17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE
Certificate serial:       07C253BE370197CF030149B1E5FEBA5E1E0FA501
Authority key identifier: 17:BB:9C:BC:3B:FA:B3:BF:19:B4:BD:6E:9C:8F:D2:E2:B2:B3:5A:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/323830343a6538303a3a2f33322d3438203d3e20323632363736.roa
Signing time:             Wed 27 Mar 2024 13:11:16 +0000
ROA not before:           Wed 27 Mar 2024 13:06:16 +0000
ROA not after:            Wed 26 Mar 2025 13:11:16 +0000
asID:                     262676
IP address blocks:        2804:e80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:c2:53:be:37:01:97:cf:03:01:49:b1:e5:fe:ba:5e:1e:0f:a5:01
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE
        Validity
            Not Before: Mar 27 13:06:16 2024 GMT
            Not After : Mar 26 13:11:16 2025 GMT
        Subject: CN=98908FC062B612BDD8C1B755C154CE075F72EF74
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:cb:1f:fc:98:49:aa:d5:84:3f:c4:90:33:82:
                    12:8c:8f:02:78:3d:a8:d1:30:c3:e0:3e:02:19:6b:
                    85:73:77:33:c3:1e:7b:39:33:1d:50:41:33:05:48:
                    df:a0:ba:c3:0a:8f:a0:4d:c0:b8:00:30:fd:a5:d0:
                    f9:36:61:fb:21:d7:48:b5:fd:65:db:74:95:d9:8a:
                    b1:28:05:c5:76:aa:86:17:84:27:49:19:68:f8:17:
                    e6:2d:73:2f:3d:2c:c5:d0:22:95:ad:7d:43:7e:97:
                    b9:f0:98:db:58:58:d1:84:11:3e:de:3b:59:26:cd:
                    dc:0c:12:d3:d5:94:99:84:28:43:68:56:82:de:61:
                    ab:27:5c:93:f8:ed:7e:02:61:f2:dc:58:4e:b7:2d:
                    a6:d8:65:d6:17:44:5a:f1:5b:67:cf:7f:86:11:fa:
                    f5:88:9d:a3:4b:3d:81:92:7e:12:ab:82:ea:28:92:
                    af:18:56:ce:58:7e:9f:ac:dd:3b:c3:55:5f:62:fb:
                    e7:ce:d6:80:4d:6e:c8:40:6f:31:12:51:a8:00:2b:
                    13:28:bc:08:a9:b5:a5:63:f8:60:b7:d4:b6:0a:c3:
                    5c:d1:98:86:9e:26:57:84:b9:2c:d9:86:21:94:a8:
                    f5:33:7b:39:3c:ff:6e:be:14:fb:8e:17:9b:dd:34:
                    76:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                98:90:8F:C0:62:B6:12:BD:D8:C1:B7:55:C1:54:CE:07:5F:72:EF:74
            X509v3 Authority Key Identifier:
                keyid:17:BB:9C:BC:3B:FA:B3:BF:19:B4:BD:6E:9C:8F:D2:E2:B2:B3:5A:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/17BB9CBC3BFAB3BF19B4BD6E9C8FD2E2B2B35AAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiixDErD8wACotHDvCSXbrfVy35urk7aFHNW7rRmfPrm/0/323830343a6538303a3a2f33322d3438203d3e20323632363736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e80::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:ad:5f:75:3f:d1:9f:57:e0:1a:22:8a:16:11:57:7d:39:be:
         09:0c:ca:0e:62:a2:e6:6a:46:38:1f:21:aa:67:17:e7:39:d7:
         c3:18:80:08:e1:3e:ca:97:7e:bc:36:3a:e7:cb:2b:d5:e8:5b:
         63:d5:84:f7:fa:05:7e:85:21:6b:38:65:fc:2e:4e:56:6c:47:
         76:38:bd:61:05:fd:24:b0:3c:3d:03:ce:0b:bd:35:7a:3f:f4:
         3c:e0:77:b5:88:5b:39:e8:e9:16:f8:cc:76:bf:52:79:2d:eb:
         be:7d:44:28:59:48:a1:d7:3b:6e:65:19:6a:78:d4:1c:f0:ba:
         57:81:0f:e0:6a:37:66:30:6a:d6:36:80:7c:29:57:d6:7d:ac:
         d2:3e:06:4a:ac:5f:97:5d:f2:84:7e:5f:24:e3:f8:90:b2:07:
         37:92:a0:6d:5f:46:9c:ef:8e:d6:d8:54:7f:59:e8:84:7f:00:
         14:9d:aa:b6:dd:45:3e:06:8b:7f:4c:c7:be:3d:da:1a:06:6f:
         41:2c:aa:95:f7:66:9a:c9:21:34:5a:8f:7d:02:8a:52:93:c1:
         9e:6e:9a:2a:ad:a6:f8:a2:5c:71:a9:1f:ad:63:e4:91:e7:a3:
         f4:42:3e:22:f1:18:6e:5f:96:d7:14:2e:5f:9c:43:36:dc:ec:
         19:7e:96:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org