Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/0/323830343a346439383a3a2f33322d3438203d3e20323638323037.roa
File:                     323830343a346439383a3a2f33322d3438203d3e20323638323037.roa (raw, json)
Hash identifier:          +osmE7DnTSTvJDbsQjEyGVNziBbORUBBg2o/ux6f7WA=
Subject key identifier:   82:97:34:A5:0C:38:D3:25:6E:FE:9D:62:53:57:99:3C:F4:9C:80:D7
Certificate issuer:       /CN=A5B88878269A9B64D8ED41A0CACF23833976726C
Certificate serial:       6340C3B44BF815226C96D8A241DEAF1702A62D02
Authority key identifier: A5:B8:88:78:26:9A:9B:64:D8:ED:41:A0:CA:CF:23:83:39:76:72:6C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B88878269A9B64D8ED41A0CACF23833976726C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/0/323830343a346439383a3a2f33322d3438203d3e20323638323037.roa
Signing time:             Sun 12 Feb 2023 23:40:27 +0000
ROA not before:           Sun 12 Feb 2023 23:35:27 +0000
ROA not after:            Sun 11 Feb 2024 23:40:27 +0000
asID:                     268207
IP address blocks:        2804:4d98::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:40:c3:b4:4b:f8:15:22:6c:96:d8:a2:41:de:af:17:02:a6:2d:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A5B88878269A9B64D8ED41A0CACF23833976726C
        Validity
            Not Before: Feb 12 23:35:27 2023 GMT
            Not After : Feb 11 23:40:27 2024 GMT
        Subject: CN=829734A50C38D3256EFE9D625357993CF49C80D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2d:ec:e0:ee:10:41:77:ac:52:18:68:46:60:
                    f0:fc:1c:9f:f4:83:46:5c:ef:e0:a8:67:42:3e:c9:
                    2b:73:05:c3:8d:21:4c:e4:6c:2a:ce:f7:5a:71:4c:
                    2f:6a:dc:2f:55:5c:0b:72:14:cf:b9:24:f4:40:6b:
                    2e:fe:74:71:ce:7a:eb:23:87:5f:ab:71:2e:2a:26:
                    09:13:98:ce:8c:2c:16:2d:7b:05:9f:76:20:72:36:
                    05:30:25:24:7c:bb:54:4c:1d:d4:59:8b:93:ae:fe:
                    dc:e1:1e:58:cc:91:7c:dc:4b:e5:fd:5c:29:41:9b:
                    ce:32:e8:b9:88:84:b8:9d:d8:fc:d6:ad:17:7b:19:
                    e2:d4:7a:8f:8e:74:c6:ac:24:3e:94:ed:59:08:fd:
                    93:0f:7a:84:d6:79:7c:da:72:d8:f2:71:f5:4d:34:
                    27:4a:a3:45:61:b9:68:cc:e4:ed:02:03:75:04:86:
                    56:ae:f2:0b:56:34:8e:a9:69:08:c2:1d:cf:b2:9a:
                    56:bd:0d:ea:3f:a2:1a:9e:ba:9e:41:49:9e:5e:ab:
                    3e:d2:6e:f4:eb:34:4b:2d:5f:c5:96:a6:34:a5:66:
                    29:8f:4d:b9:14:48:e3:fe:62:52:b6:af:bc:9b:0f:
                    ac:04:0c:5d:e0:17:64:8b:f3:53:54:fd:31:f7:4c:
                    b6:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:97:34:A5:0C:38:D3:25:6E:FE:9D:62:53:57:99:3C:F4:9C:80:D7
            X509v3 Authority Key Identifier:
                keyid:A5:B8:88:78:26:9A:9B:64:D8:ED:41:A0:CA:CF:23:83:39:76:72:6C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/0/A5B88878269A9B64D8ED41A0CACF23833976726C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A5B88878269A9B64D8ED41A0CACF23833976726C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3p9tkchdAPvpJ9Soqyp9qZHGm9cS94LRa1H9gkxYLAS/0/323830343a346439383a3a2f33322d3438203d3e20323638323037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d98::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:8c:d1:b9:c3:1c:12:f1:28:c7:e1:7b:82:3b:d5:08:ce:de:
         2b:28:2b:86:88:54:33:12:9d:46:45:07:0b:95:12:1e:17:ec:
         e4:d3:00:9a:4b:0a:89:09:b7:02:e8:40:56:68:d7:51:df:d8:
         1c:3f:c1:33:9a:b2:dc:e6:4e:a9:57:bd:96:d3:8b:d9:1a:2f:
         6c:cd:96:de:d1:5f:20:1f:8b:ca:fe:6a:f9:32:3f:7a:f9:0a:
         fc:ae:4f:dd:8d:6c:b8:d7:08:52:d5:4c:72:27:13:3e:fe:3c:
         7f:7e:e0:6e:1d:4f:1d:e5:79:e6:a1:e8:76:34:96:ca:04:49:
         f8:ae:b7:6f:83:84:66:54:99:0b:b1:9a:55:cc:e9:5d:af:68:
         17:5b:5d:4e:80:b1:c6:11:50:dd:65:e9:ee:cb:b3:0c:9f:f5:
         bc:11:e8:d1:c6:32:ed:09:47:3d:96:7c:35:2c:8d:81:55:65:
         fb:d3:87:1a:89:af:08:69:34:8e:47:47:66:23:ea:cc:e0:e7:
         83:0a:19:14:72:89:66:75:39:d5:aa:8f:09:1c:97:f6:ac:2c:
         9d:42:16:3b:7d:4f:27:05:6c:8f:9a:bf:4a:c7:dc:26:cd:d6:
         39:d4:b6:c8:76:e3:d7:25:64:ad:94:c4:3d:2f:9e:59:be:45:
         48:bf:ce:a0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:09 2024 by rpki-client on console-ams.rpki-client.org