Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a383030303a3a2f33342d3334203d3e20323637353735.roa
File:                     323830343a343338343a383030303a3a2f33342d3334203d3e20323637353735.roa (raw, json)
Hash identifier:          voecGLqYvjuJBewV4R4T9IW88W4yJ5MXevmug9SSedk=
Subject key identifier:   36:B3:33:D9:F6:65:23:9F:FD:87:AF:8E:E8:C9:FB:96:F0:5C:1F:70
Certificate issuer:       /CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
Certificate serial:       4B9151CCF006464367B9B516FD3CD447CDA21578
Authority key identifier: 8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a383030303a3a2f33342d3334203d3e20323637353735.roa
Signing time:             Thu 11 Jan 2024 18:03:47 +0000
ROA not before:           Thu 11 Jan 2024 17:58:47 +0000
ROA not after:            Thu 09 Jan 2025 18:03:47 +0000
asID:                     267575
IP address blocks:        2804:4384:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:91:51:cc:f0:06:46:43:67:b9:b5:16:fd:3c:d4:47:cd:a2:15:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124
        Validity
            Not Before: Jan 11 17:58:47 2024 GMT
            Not After : Jan  9 18:03:47 2025 GMT
        Subject: CN=36B333D9F665239FFD87AF8EE8C9FB96F05C1F70
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:ac:65:91:6d:4f:a6:03:8f:5c:67:ce:3e:77:
                    eb:a3:db:31:87:c1:9c:08:58:2d:6a:70:5d:22:ac:
                    53:73:44:0e:bd:4f:e9:11:18:81:48:34:49:a5:f9:
                    ae:54:7b:b9:7a:b5:45:d9:87:8d:8a:db:fb:15:58:
                    c1:71:dd:bb:b1:36:46:65:55:49:fa:30:9d:20:ca:
                    5e:8e:bb:d0:55:60:99:7d:27:76:a0:4a:d9:02:b4:
                    07:19:2c:36:1b:ad:91:95:95:b7:ae:1e:68:9b:fc:
                    b8:60:de:cc:6b:2a:44:59:ca:e4:cd:d7:e1:7b:b1:
                    f6:3c:f4:6e:63:0e:0d:78:16:13:ca:13:63:e4:a3:
                    62:c2:85:5c:d6:fa:1b:f2:b2:1e:f8:b9:3c:78:40:
                    a5:9f:77:96:07:c8:2b:40:01:c2:c7:40:27:a0:f4:
                    80:b2:ce:4e:bf:22:bc:a5:0d:4b:2f:c4:c3:87:e3:
                    1f:23:e5:4d:62:b3:a6:44:8e:b6:54:9d:db:f6:4a:
                    c0:cc:62:5d:b6:12:67:88:78:ce:1b:1d:6c:4d:14:
                    0f:b3:1c:e5:a6:71:bd:0a:31:3e:33:90:66:d9:a1:
                    0d:42:6b:c0:fb:aa:67:d3:f7:e7:50:7d:7f:43:a9:
                    1b:41:1a:ea:aa:db:0c:64:e8:e3:7a:50:45:61:99:
                    9e:d9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:B3:33:D9:F6:65:23:9F:FD:87:AF:8E:E8:C9:FB:96:F0:5C:1F:70
            X509v3 Authority Key Identifier:
                keyid:8C:01:56:E4:43:A0:D7:BA:2C:6B:CD:C2:68:B9:BB:5D:A4:1F:A1:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C0156E443A0D7BA2C6BCDC268B9BB5DA41FA124.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ESgdVrxnwVPbtQhk65kLYGw5ZJA397g6fCDPyazMmuR7/0/323830343a343338343a383030303a3a2f33342d3334203d3e20323637353735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4384:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:fb:8b:a6:1b:5e:87:38:3d:cf:c0:f4:9f:e4:5e:b7:e7:55:
         ff:ad:1b:2c:6b:7c:8c:00:57:ec:9c:7a:77:55:5d:2b:7e:8d:
         8b:2a:1e:15:16:c3:56:a7:81:3c:06:ad:89:4d:eb:c9:dd:a5:
         13:86:30:f3:e6:6a:6b:7b:f4:4e:7b:92:01:34:12:21:c6:e0:
         70:1e:ee:ca:09:04:3e:25:42:c4:ac:d5:5a:94:92:34:65:15:
         04:2f:e3:fa:7e:6d:dc:f1:8a:37:87:ee:0c:3c:49:14:f4:32:
         53:35:c3:1f:63:e6:89:7e:8e:50:d7:a4:22:1f:d7:d4:a3:a8:
         73:e9:74:21:a1:e9:dd:5e:ee:f9:0e:64:83:6c:af:1f:c5:71:
         b3:8d:05:eb:b2:2a:fa:46:ed:5b:53:3c:5d:2f:00:aa:b2:af:
         ea:81:1f:61:4c:68:ec:2f:52:91:7e:c3:e0:fd:29:fa:88:5b:
         f9:c3:c9:56:e5:14:b5:a6:8a:73:f2:7c:47:90:63:a6:66:a0:
         3c:8c:71:bf:bf:b9:84:a7:26:99:bc:8c:8e:22:da:d0:21:8b:
         6f:9b:4f:5e:b7:f7:96:f7:80:76:5d:7c:30:74:8d:49:b8:d9:
         3f:67:90:8f:09:e0:82:cc:c6:87:59:67:e3:eb:37:c3:29:a9:
         f8:5e:b2:e6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org