Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230303a3a2f34382d3438203d3e20323632363137.roa
File:                     323830343a3930633a3230303a3a2f34382d3438203d3e20323632363137.roa (raw, json)
Hash identifier:          GDxCP4VqW+j5tHsaXQKP9vSZkqleToy3a6+MQcZrwZo=
Subject key identifier:   20:82:52:9C:DA:EF:37:6E:96:3A:8E:6D:57:C2:6B:E7:91:0B:A2:49
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       7883166EF1D482F8B3B2AD244EE3BBA49819ABA4
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230303a3a2f34382d3438203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:15 +0000
ROA not before:           Thu 03 Aug 2023 13:04:15 +0000
ROA not after:            Thu 01 Aug 2024 13:09:15 +0000
asID:                     262617
IP address blocks:        2804:90c:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:83:16:6e:f1:d4:82:f8:b3:b2:ad:24:4e:e3:bb:a4:98:19:ab:a4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:15 2023 GMT
            Not After : Aug  1 13:09:15 2024 GMT
        Subject: CN=2082529CDAEF376E963A8E6D57C26BE7910BA249
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:63:f1:47:de:bc:f6:40:6e:3b:a3:49:39:e1:
                    d7:64:b8:44:cb:be:a4:09:f7:32:76:b4:77:26:09:
                    1b:47:bb:20:6e:c9:15:c4:4f:8e:70:72:43:43:67:
                    d7:9b:e5:13:76:b8:a8:8a:1e:cd:79:96:fa:03:18:
                    b9:32:18:2a:20:29:4a:6d:8c:dd:8a:25:e1:7b:e0:
                    01:16:4f:23:4a:7e:b5:98:1b:ee:1f:9c:30:02:b7:
                    8c:f7:96:e1:dc:20:8b:09:31:a4:6d:b6:e5:a2:2e:
                    d1:09:a8:c9:44:63:01:93:f0:8c:8c:49:a8:d4:c0:
                    63:f6:27:24:0e:11:07:0d:e7:fd:be:d3:2a:a2:89:
                    06:1d:6c:c4:16:25:8a:5f:09:f6:e0:97:35:09:50:
                    b2:ec:8e:9a:81:ff:2c:30:c5:e2:63:41:25:95:27:
                    26:8a:31:87:1c:07:b0:0a:e5:90:8e:1c:73:fb:44:
                    41:47:f8:10:5a:28:05:21:85:63:3d:12:56:c9:af:
                    78:96:b4:14:86:da:08:6a:fe:31:01:61:ce:54:67:
                    41:ac:b4:d5:57:a4:39:50:de:48:d7:12:69:c5:98:
                    30:af:6e:78:09:ac:25:b9:1e:2c:3c:6d:c6:ef:c6:
                    71:e5:1b:9d:08:c9:32:8a:e0:f9:9a:b6:ec:41:2b:
                    b0:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                20:82:52:9C:DA:EF:37:6E:96:3A:8E:6D:57:C2:6B:E7:91:0B:A2:49
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a3230303a3a2f34382d3438203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         8e:97:3d:b5:3f:a0:6d:35:30:8f:ba:07:27:64:44:ce:aa:4a:
         f0:89:1c:fc:fe:6a:cf:b6:e1:d5:80:e6:46:9b:73:02:93:ec:
         89:a8:4a:e9:73:27:a8:dc:42:ad:ea:e2:05:15:ff:b7:10:92:
         71:a9:47:96:98:0c:ce:e8:25:36:c8:46:cb:15:b3:01:15:2b:
         eb:55:66:8a:5e:9d:1c:4a:f8:cf:95:4f:b1:ec:46:f0:4b:25:
         57:4d:95:c8:d0:fc:b2:11:cb:ad:12:ee:29:13:ef:a0:dd:76:
         1e:91:04:79:55:25:74:5e:bf:62:ad:2d:45:77:18:6f:28:04:
         7d:fa:55:ce:89:6b:e5:ce:33:c6:52:2b:ad:70:b0:09:de:3b:
         46:14:26:c9:9f:f2:ee:6c:0d:21:9d:00:39:b9:56:7a:a5:88:
         98:fa:41:a5:ba:ff:98:72:cb:33:83:42:ae:77:30:27:f5:7f:
         94:ae:a6:7b:d3:d1:94:70:7e:cb:3f:24:d5:33:61:58:37:87:
         c5:64:06:f8:e2:2b:71:a6:0a:b6:82:d7:10:1a:7a:f8:e6:4d:
         28:bb:1b:a6:0f:bb:06:a0:0f:b8:18:59:b0:26:01:ee:db:9e:
         ee:0b:76:56:42:f5:6a:6b:fe:57:ff:bd:fc:83:72:88:29:6b:
         c8:7c:92:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org