Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a303a3134373a3a2f36342d3634203d3e20323632343933.roa
File:                     323830343a6665633a303a3134373a3a2f36342d3634203d3e20323632343933.roa (raw, json)
Hash identifier:          X8jnYCwfODPk11WL6Vpp4qgbtk8rPuZAysi3hZhT6gM=
Subject key identifier:   50:59:18:7D:2B:B1:6B:24:E2:38:1A:A8:DB:DA:26:21:E2:58:7B:7C
Certificate issuer:       /CN=0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD
Certificate serial:       290D511F3FA6B5F03315B1204011EC4D5B5A5FF5
Authority key identifier: 0D:F8:C6:48:F4:3D:15:1F:7E:0B:2A:65:3C:71:74:F8:8F:FC:EB:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a303a3134373a3a2f36342d3634203d3e20323632343933.roa
Signing time:             Fri 10 Mar 2023 12:54:00 +0000
ROA not before:           Fri 10 Mar 2023 12:49:00 +0000
ROA not after:            Fri 08 Mar 2024 12:54:00 +0000
asID:                     262493
IP address blocks:        2804:fec:0:147::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:0d:51:1f:3f:a6:b5:f0:33:15:b1:20:40:11:ec:4d:5b:5a:5f:f5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD
        Validity
            Not Before: Mar 10 12:49:00 2023 GMT
            Not After : Mar  8 12:54:00 2024 GMT
        Subject: CN=3082010A0282010100D831B025CC4C802BA788A989B321DF31E194ADC6BFC17AFFD602C4D89D1E6F1C2B8E0B75EB1900F3AD2D3ECA6C5DC175ADD1B145E47D3DC8715E2A068652DE7DC7FEA69D90D2117841800D4C8601F1BA08B3D25F99E0B9048639AAA7E3D1319E9FE3E4FFF0F517D07CC161A92C126B298F0BECD5FB8E029B08F7A67D588108231F18F4DED8FD7648A9010CB2F0A57E2CFAF6FA2A7285ACBC7162EA0852D14E48F9657D107F3CF2CF1A5B78D9E5ADF996C0EE4EEF897D04A957B8454E931AADEF3CD94622B13F28B0D515353BD9A2475E03C2394C8EEA50F44CA8C3FE9FADF56F0C506F84A0EEB2430FE064D8642A1E7CE41F93606EEF49AEF28F3CD0DB1DC1BD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:31:b0:25:cc:4c:80:2b:a7:88:a9:89:b3:21:
                    df:31:e1:94:ad:c6:bf:c1:7a:ff:d6:02:c4:d8:9d:
                    1e:6f:1c:2b:8e:0b:75:eb:19:00:f3:ad:2d:3e:ca:
                    6c:5d:c1:75:ad:d1:b1:45:e4:7d:3d:c8:71:5e:2a:
                    06:86:52:de:7d:c7:fe:a6:9d:90:d2:11:78:41:80:
                    0d:4c:86:01:f1:ba:08:b3:d2:5f:99:e0:b9:04:86:
                    39:aa:a7:e3:d1:31:9e:9f:e3:e4:ff:f0:f5:17:d0:
                    7c:c1:61:a9:2c:12:6b:29:8f:0b:ec:d5:fb:8e:02:
                    9b:08:f7:a6:7d:58:81:08:23:1f:18:f4:de:d8:fd:
                    76:48:a9:01:0c:b2:f0:a5:7e:2c:fa:f6:fa:2a:72:
                    85:ac:bc:71:62:ea:08:52:d1:4e:48:f9:65:7d:10:
                    7f:3c:f2:cf:1a:5b:78:d9:e5:ad:f9:96:c0:ee:4e:
                    ef:89:7d:04:a9:57:b8:45:4e:93:1a:ad:ef:3c:d9:
                    46:22:b1:3f:28:b0:d5:15:35:3b:d9:a2:47:5e:03:
                    c2:39:4c:8e:ea:50:f4:4c:a8:c3:fe:9f:ad:f5:6f:
                    0c:50:6f:84:a0:ee:b2:43:0f:e0:64:d8:64:2a:1e:
                    7c:e4:1f:93:60:6e:ef:49:ae:f2:8f:3c:d0:db:1d:
                    c1:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:59:18:7D:2B:B1:6B:24:E2:38:1A:A8:DB:DA:26:21:E2:58:7B:7C
            X509v3 Authority Key Identifier:
                keyid:0D:F8:C6:48:F4:3D:15:1F:7E:0B:2A:65:3C:71:74:F8:8F:FC:EB:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0DF8C648F43D151F7E0B2A653C7174F88FFCEBCD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EMP3xmb5MSVgamrJizsB3bPR9wcMDi9RndrvpYhhsQd4/0/323830343a6665633a303a3134373a3a2f36342d3634203d3e20323632343933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fec:0:147::/64

    Signature Algorithm: sha256WithRSAEncryption
         63:fe:7a:bb:69:5b:0a:81:3e:0f:98:d6:15:df:7a:c9:8c:5d:
         21:61:2b:7c:24:6b:58:07:fa:4c:49:fa:60:7a:34:53:db:fd:
         ba:dd:ec:cd:79:94:9f:18:ed:4c:8c:76:e1:97:24:37:c8:0d:
         86:9d:f1:17:9b:cf:35:f9:ab:84:e9:ab:fe:5b:9a:7d:ff:70:
         42:9d:54:66:6b:77:db:de:33:c2:cd:58:19:fd:40:c4:77:ba:
         c2:98:65:e4:61:d8:6d:ab:a2:30:4a:97:e2:79:25:0d:ae:f0:
         69:c4:1b:b5:8b:a2:16:26:d1:a2:a3:02:49:45:a2:35:f6:48:
         c1:f6:3e:52:f1:a5:67:46:5f:d9:3c:df:16:78:f7:9b:71:7e:
         37:73:eb:32:9a:b1:08:d3:71:c6:07:05:e9:6e:e2:51:23:7d:
         84:09:49:81:c2:47:8d:b6:86:70:23:96:c8:b5:e6:c5:b3:4e:
         24:da:de:c4:6a:01:3a:ca:b4:4d:b8:fc:ff:94:f1:ef:10:fd:
         cc:7d:3b:ac:ed:4f:d7:d0:14:f7:ca:e1:a6:93:f4:c0:32:80:
         57:38:49:24:c6:7d:a6:b6:8b:8c:4c:0d:c4:f5:c9:e4:e9:5d:
         1f:41:1e:c2:31:24:ae:2d:a3:b6:78:2a:25:dd:6f:33:4b:cc:
         08:77:03:fa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org