Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a666130303a3a2f34302d3430203d3e20323632363137.roa
File:                     323830343a3930633a666130303a3a2f34302d3430203d3e20323632363137.roa (raw, json)
Hash identifier:          8fCa+ajulOlhiJzxuoOYHizndy8f/PXk18xNs/38pfM=
Subject key identifier:   81:49:D6:22:3C:83:C8:3A:93:B7:46:0B:90:3B:82:C1:84:23:B2:DC
Certificate issuer:       /CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
Certificate serial:       3ED4936846D6D2D7D7EFB25C922E990F0CB32104
Authority key identifier: B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a666130303a3a2f34302d3430203d3e20323632363137.roa
Signing time:             Thu 03 Aug 2023 13:09:01 +0000
ROA not before:           Thu 03 Aug 2023 13:04:01 +0000
ROA not after:            Thu 01 Aug 2024 13:09:01 +0000
asID:                     262617
IP address blocks:        2804:90c:fa00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:d4:93:68:46:d6:d2:d7:d7:ef:b2:5c:92:2e:99:0f:0c:b3:21:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B9AF267F9B247FB0CFB37F232B5BD0889B96B102
        Validity
            Not Before: Aug  3 13:04:01 2023 GMT
            Not After : Aug  1 13:09:01 2024 GMT
        Subject: CN=8149D6223C83C83A93B7460B903B82C18423B2DC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:5a:ea:a3:5b:9a:03:42:f2:3e:93:69:26:69:
                    06:7a:a5:ae:e7:e9:c4:38:d0:ad:30:52:70:cd:95:
                    ae:b1:68:d2:a8:c0:91:90:b3:98:a7:76:fd:69:65:
                    ab:cd:af:d2:76:73:7a:b3:6b:32:5c:63:7d:74:b2:
                    85:4f:9f:32:44:28:c9:e0:fd:e5:bc:07:20:41:82:
                    9d:5a:60:60:0d:a4:d1:7b:01:9e:12:7a:b0:8c:d6:
                    7c:ca:28:1d:3c:92:5b:69:b4:00:47:e4:d5:06:bb:
                    68:15:82:b1:f5:7f:5c:82:44:17:31:fa:6c:56:8b:
                    d4:6b:16:ef:67:2b:f4:14:f4:62:c4:f3:16:03:c6:
                    40:0c:8c:5f:b6:36:d5:a6:98:84:98:ab:1b:bb:d1:
                    b0:82:b9:69:c9:67:1a:80:c4:54:b3:d0:39:54:23:
                    0b:84:bb:24:e8:83:2c:0c:38:da:4b:2a:bf:d6:53:
                    9c:e6:ed:8c:cc:5a:63:63:ef:e5:8d:03:29:eb:09:
                    4c:af:58:42:ae:f5:db:b4:68:e9:15:94:d7:17:3e:
                    7f:92:b6:fa:16:40:cd:f4:5d:6a:a4:c1:47:5e:19:
                    37:dd:2c:08:a5:db:6a:32:6c:0f:63:ed:fd:5b:1f:
                    12:11:37:24:00:ed:9e:a7:ad:21:61:94:de:a9:bb:
                    40:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:49:D6:22:3C:83:C8:3A:93:B7:46:0B:90:3B:82:C1:84:23:B2:DC
            X509v3 Authority Key Identifier:
                keyid:B9:AF:26:7F:9B:24:7F:B0:CF:B3:7F:23:2B:5B:D0:88:9B:96:B1:02

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B9AF267F9B247FB0CFB37F232B5BD0889B96B102.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DkQEt78w4vWDPZWBJtYqJw6w4bSXP4zC8Kigd1pocHk5/0/323830343a3930633a666130303a3a2f34302d3430203d3e20323632363137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:90c:fa00::/40

    Signature Algorithm: sha256WithRSAEncryption
         82:3d:38:b6:10:9e:7d:d3:64:7b:e7:e1:1f:e7:00:0e:7d:f8:
         83:6b:be:00:3d:5e:79:f3:a6:1e:cb:22:ce:8b:4d:af:13:d8:
         8d:df:0f:ac:a7:ee:b1:5e:d2:53:8c:8f:95:76:ab:33:c8:14:
         9c:d6:97:4e:0b:b5:e0:b0:68:4d:5b:d6:7b:06:02:61:7f:0a:
         c3:c8:aa:73:4a:fd:cd:54:fa:3b:c5:e3:e0:78:85:33:e5:7b:
         4b:67:24:cf:a1:f1:05:96:a8:23:75:cb:99:9a:fe:85:12:fc:
         79:c5:70:6a:83:31:b9:c3:c8:3f:3e:f1:ed:98:ed:b8:b2:bb:
         04:c6:01:c5:19:6b:c5:57:e7:4d:bc:0f:32:ea:92:cf:d3:3a:
         3b:2d:1a:32:e9:14:d8:a8:ef:50:4c:77:64:3b:3e:15:cc:76:
         17:01:ca:d4:15:64:16:01:3b:16:74:7b:33:51:7b:7a:b9:99:
         c3:94:99:1f:c0:e6:6b:19:88:72:21:8b:a1:b3:ca:65:aa:3f:
         06:d4:db:75:ab:9b:b3:1b:8f:9b:b5:98:91:89:2d:e3:fe:82:
         e8:fb:db:b4:19:b5:c0:50:c3:16:f6:ec:91:d0:e5:78:1e:56:
         5f:c6:70:cb:d3:45:89:08:44:5b:f6:9b:9d:fa:3b:7d:eb:59:
         46:85:4e:74
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org