Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a343030303a3a2f33342d3334203d3e20323637353735.roa
File:                     323830343a343338343a343030303a3a2f33342d3334203d3e20323637353735.roa (raw, json)
Hash identifier:          MQo4CitbzoitzhdY/pORz8bz1oZy3uGxRaYF19w30Gw=
Subject key identifier:   8C:C3:A8:87:DC:D0:D2:93:8A:F9:1B:4C:DA:38:08:4E:72:30:33:4A
Certificate issuer:       /CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Certificate serial:       6851C63886B96675ADBB1CB6459E23384C7D270F
Authority key identifier: 8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a343030303a3a2f33342d3334203d3e20323637353735.roa
Signing time:             Thu 11 Jan 2024 18:03:46 +0000
ROA not before:           Thu 11 Jan 2024 17:58:46 +0000
ROA not after:            Thu 09 Jan 2025 18:03:46 +0000
asID:                     267575
IP address blocks:        2804:4384:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:51:c6:38:86:b9:66:75:ad:bb:1c:b6:45:9e:23:38:4c:7d:27:0f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
        Validity
            Not Before: Jan 11 17:58:46 2024 GMT
            Not After : Jan  9 18:03:46 2025 GMT
        Subject: CN=8CC3A887DCD0D2938AF91B4CDA38084E7230334A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:39:fc:94:40:53:a1:6a:fe:38:ba:a5:3c:e6:
                    fb:25:71:06:78:64:66:3b:fd:74:b0:5d:40:df:b6:
                    8e:dd:86:6d:72:6f:3b:0a:7d:44:12:8b:5e:01:7d:
                    24:fd:2d:f3:5e:7e:1e:3a:15:f8:7d:35:9b:1f:c8:
                    a9:1c:d7:55:f7:c8:6f:86:09:12:7f:d3:2a:e1:c8:
                    9d:cd:24:8e:a0:36:65:7f:81:ee:a1:d8:5c:a7:24:
                    6d:b2:f2:78:ba:05:0c:d3:e3:4e:a8:c8:ea:7b:00:
                    c5:12:db:40:0b:fa:c1:9b:cc:74:a2:8a:47:d7:5f:
                    b7:53:78:82:bb:83:32:58:18:e3:62:d9:bd:23:9f:
                    9d:97:f2:90:d2:da:17:51:23:c4:97:3d:28:86:7e:
                    ca:db:b8:25:75:eb:cd:52:38:56:8d:d3:37:a5:50:
                    4f:8d:1a:63:cb:6c:1b:d0:9d:8e:07:50:f4:30:e4:
                    20:6f:9e:b6:a5:9b:61:be:40:a2:3d:a2:68:ba:67:
                    cf:5c:1b:7b:4c:b5:c8:ec:95:05:99:6b:e7:61:41:
                    92:79:ca:cb:09:da:d0:ae:ea:11:d8:fa:02:4c:94:
                    ae:45:42:24:e2:2e:5d:09:6e:25:94:41:56:44:be:
                    ae:7b:e7:4c:0e:c8:49:20:f8:9f:dc:31:55:56:83:
                    01:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:C3:A8:87:DC:D0:D2:93:8A:F9:1B:4C:DA:38:08:4E:72:30:33:4A
            X509v3 Authority Key Identifier:
                keyid:8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a343030303a3a2f33342d3334203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4384:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         ab:e6:68:74:24:55:ee:3c:1f:5c:c9:66:37:01:61:8d:d3:bb:
         b0:b6:09:50:d6:72:69:37:26:d7:41:9c:ce:fc:e0:90:10:6e:
         e5:ba:aa:ab:29:19:f5:ed:dc:77:4c:00:cb:dc:8e:67:9a:de:
         9b:b8:d5:f7:16:02:43:2b:17:24:1a:7c:19:0c:1d:dc:6e:02:
         bb:05:a2:68:96:5f:05:3d:dd:30:d3:03:30:20:ac:c1:69:2c:
         bc:d9:25:b9:4e:79:88:47:16:16:29:70:59:3b:07:31:70:99:
         69:b3:7e:d1:55:07:cf:fe:1d:82:7d:d8:d7:24:d3:8d:8f:69:
         50:13:75:31:9b:47:ae:6e:d3:2b:79:7f:d3:6c:09:9a:4e:af:
         4c:75:f0:53:b3:d7:f4:33:36:4b:c0:0d:84:ea:55:6f:8b:14:
         2b:85:1b:44:7c:4f:6c:aa:92:69:7c:03:cf:0c:52:1d:b6:cc:
         52:b8:66:01:2a:a6:94:1d:00:ba:1b:2e:b8:b0:38:91:54:62:
         71:51:96:3b:23:bc:17:49:74:44:67:c0:89:ed:31:e4:ac:29:
         1e:d8:b0:7f:d7:68:01:eb:cf:55:af:a4:e1:c6:31:3b:dc:0c:
         22:30:77:12:d4:d7:c0:d4:7d:82:f6:79:d9:31:fe:ee:69:f0:
         ac:4f:40:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org