Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa
File:                     323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa (raw, json)
Hash identifier:          pjHSP4E2asvkHaT9cLnHgLHJ6OmcV9d4NmePmZ6IOMo=
Subject key identifier:   AE:F9:5B:7B:15:6E:FB:F2:BD:9C:3D:84:50:FE:C9:32:D7:73:F6:43
Certificate issuer:       /CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
Certificate serial:       0910180A7CB5C3409F5D846566325471E1202018
Authority key identifier: AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa
Signing time:             Sat 24 Feb 2024 03:41:53 +0000
ROA not before:           Sat 24 Feb 2024 03:36:53 +0000
ROA not after:            Sat 22 Feb 2025 03:41:53 +0000
asID:                     273606
IP address blocks:        2804:8978:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:10:18:0a:7c:b5:c3:40:9f:5d:84:65:66:32:54:71:e1:20:20:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AF57D8ABF92B4526A323E0F5712CC22330A693BB
        Validity
            Not Before: Feb 24 03:36:53 2024 GMT
            Not After : Feb 22 03:41:53 2025 GMT
        Subject: CN=AEF95B7B156EFBF2BD9C3D8450FEC932D773F643
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f3:ff:fa:8c:5b:b5:6e:7c:0a:3f:57:9c:38:
                    7a:3e:57:de:bf:5b:6c:09:e4:12:40:71:7f:48:29:
                    6b:f3:a0:22:d8:4e:61:aa:42:7c:c4:b6:4e:83:eb:
                    a9:00:9c:43:58:0f:d9:16:6b:21:38:6f:1b:c3:6d:
                    62:e6:2f:45:29:2c:e4:cb:d8:8a:2b:a7:b9:29:f9:
                    97:13:4f:a4:37:ee:4a:66:07:60:24:3f:58:17:23:
                    4c:ce:ca:fe:fc:7c:42:43:d3:d6:ad:b5:cf:b6:b9:
                    53:59:f3:49:89:93:b3:9e:95:d6:8d:04:40:31:33:
                    f9:a3:7a:d0:91:26:67:e1:f5:86:63:8f:dc:63:02:
                    27:a1:fe:20:e9:eb:92:c7:cd:6a:8a:2a:ac:80:1e:
                    20:56:9f:bc:ef:65:c6:eb:bb:6a:5a:1b:cf:60:b2:
                    9d:78:9e:53:4c:78:95:a9:22:f9:b8:6c:3d:b6:a8:
                    57:67:fc:4f:e2:76:85:9b:e5:b3:93:e4:44:1e:a6:
                    cf:72:f4:4b:ba:3f:73:22:6c:88:3b:2c:c9:d4:d4:
                    10:7f:58:64:48:3a:bb:60:5f:41:f3:c2:1b:83:a4:
                    89:86:95:f7:b5:4f:ba:34:b2:11:46:49:8b:0f:b5:
                    81:c6:f8:24:d5:09:5b:a3:5a:21:4f:77:5b:c5:b6:
                    6b:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:F9:5B:7B:15:6E:FB:F2:BD:9C:3D:84:50:FE:C9:32:D7:73:F6:43
            X509v3 Authority Key Identifier:
                keyid:AF:57:D8:AB:F9:2B:45:26:A3:23:E0:F5:71:2C:C2:23:30:A6:93:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AF57D8ABF92B4526A323E0F5712CC22330A693BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DspWXAi1x6jLwzNEeS6esTfCz6SoGYj4sv6JLDc2w3ca/0/323830343a383937383a323030303a3a2f33352d3335203d3e20323733363036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8978:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         1c:f5:c0:2e:a1:f6:3a:fc:93:56:50:c2:25:36:c4:8e:af:e9:
         df:3e:09:51:46:16:d6:72:20:4f:57:cb:b7:62:69:1c:d3:bf:
         f2:84:fe:92:93:f2:95:ad:62:78:e7:1e:62:13:c7:23:7a:06:
         76:24:c6:87:f8:eb:e0:28:3f:02:79:70:ed:c1:ad:1e:d4:92:
         dd:0c:e0:61:17:f3:3b:3e:ae:d0:9d:81:9c:ef:3e:f5:81:5a:
         b2:c2:d8:66:f6:90:e2:f9:6d:78:9d:53:69:b2:a6:87:02:f6:
         b9:57:ce:be:76:0c:68:b3:4a:5f:11:16:30:21:ad:82:5a:9c:
         6d:29:4e:46:80:ed:dc:81:2f:af:94:d0:d3:3f:77:c0:1c:f2:
         e1:f1:87:d8:4d:be:c2:2f:4c:0e:9d:48:7c:c6:88:98:43:d0:
         0e:57:24:de:0d:32:1b:7b:2f:72:ad:9e:f1:d1:fb:54:19:32:
         f2:28:84:ff:b6:1e:37:44:f0:ff:c6:3d:16:7e:c0:ff:45:b6:
         32:5e:07:c2:3f:a0:97:e0:ea:5c:8d:6c:fc:72:16:17:d4:8e:
         11:a1:ec:aa:25:d6:7b:0b:63:aa:27:8e:4e:c8:0c:1a:e1:22:
         92:73:63:44:2e:f6:16:a1:6a:d0:e8:3c:30:1a:6d:a5:bb:34:
         83:0c:d0:f3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org