Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/0/323830343a3334383a3a2f33322d3438203d3e203238313333.roa
File:                     323830343a3334383a3a2f33322d3438203d3e203238313333.roa (raw, json)
Hash identifier:          EOBFaqDVErf5Elm3i1yBkUA6wr6xPmxqlc369six87Y=
Subject key identifier:   93:AB:B2:05:80:1E:93:C4:FC:F3:B1:CC:F7:1C:D5:A4:BD:CC:2C:96
Certificate issuer:       /CN=D08678723E848C1EEBE8372210FC47DB5A6B5B62
Certificate serial:       12946ACD0A7727DF3136A7414028B5EB13C76EB5
Authority key identifier: D0:86:78:72:3E:84:8C:1E:EB:E8:37:22:10:FC:47:DB:5A:6B:5B:62
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D08678723E848C1EEBE8372210FC47DB5A6B5B62.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/0/323830343a3334383a3a2f33322d3438203d3e203238313333.roa
Signing time:             Wed 17 May 2023 03:45:42 +0000
ROA not before:           Wed 17 May 2023 03:40:42 +0000
ROA not after:            Wed 15 May 2024 03:45:42 +0000
asID:                     28133
IP address blocks:        2804:348::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:94:6a:cd:0a:77:27:df:31:36:a7:41:40:28:b5:eb:13:c7:6e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D08678723E848C1EEBE8372210FC47DB5A6B5B62
        Validity
            Not Before: May 17 03:40:42 2023 GMT
            Not After : May 15 03:45:42 2024 GMT
        Subject: CN=93ABB205801E93C4FCF3B1CCF71CD5A4BDCC2C96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:f0:94:75:58:67:48:6e:b5:c3:97:31:75:e9:
                    77:87:e5:03:67:d0:f6:d8:ea:e3:b3:77:83:1a:cf:
                    cc:ab:1a:3c:7d:f2:38:ce:45:9c:b9:9a:54:ff:96:
                    53:65:a3:b5:60:0d:99:a2:12:d4:fc:47:4e:11:61:
                    f6:b3:1c:4d:d7:2c:ea:b1:bd:96:54:47:92:0d:d8:
                    77:86:45:aa:8c:68:41:08:60:76:ab:03:52:32:0c:
                    9e:34:ae:f3:d5:12:80:54:57:d7:f4:67:b7:85:a0:
                    b8:3a:70:c7:f2:21:4d:e1:c5:01:ff:63:02:6c:7f:
                    c0:75:18:fd:2d:4b:73:cd:99:d2:fd:63:bc:f4:23:
                    2e:da:bc:d6:48:0b:85:49:67:59:ab:04:36:ce:d6:
                    5c:5d:62:7c:6b:7d:c4:3d:79:55:4b:51:f5:4f:6c:
                    2f:b7:a3:cb:4e:cc:b0:89:d0:d4:f9:2a:af:66:e6:
                    bc:60:e7:9b:3b:19:6d:e0:a2:2d:d6:64:dc:ca:f4:
                    75:4c:28:26:49:96:ee:02:8c:27:d9:4d:10:03:b8:
                    d1:90:f6:84:ef:9d:ef:a1:0c:91:02:83:af:61:21:
                    ce:dc:94:78:94:21:c9:cb:25:e4:9a:41:11:d5:a8:
                    a4:f7:fe:8d:4e:24:b7:8c:f3:9f:55:ae:76:fd:c6:
                    16:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                93:AB:B2:05:80:1E:93:C4:FC:F3:B1:CC:F7:1C:D5:A4:BD:CC:2C:96
            X509v3 Authority Key Identifier:
                keyid:D0:86:78:72:3E:84:8C:1E:EB:E8:37:22:10:FC:47:DB:5A:6B:5B:62

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/0/D08678723E848C1EEBE8372210FC47DB5A6B5B62.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D08678723E848C1EEBE8372210FC47DB5A6B5B62.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GEK89HK9UgscSpED6PFwoSWsfFhv2mpZy4FD7s3V4BAG/0/323830343a3334383a3a2f33322d3438203d3e203238313333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:348::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:5d:e4:71:88:72:e9:ef:05:d2:f7:05:74:72:e0:4c:3e:2f:
         65:47:c6:fa:32:4c:d5:2e:f2:ff:3a:0e:0a:17:b4:47:8f:fb:
         a1:88:4e:69:88:35:86:81:99:be:7b:ab:0d:fc:37:5d:a5:67:
         94:79:8a:13:36:95:38:f3:01:03:d7:22:de:6f:67:4c:91:d3:
         58:3e:2e:d4:d7:79:5d:30:1c:52:fb:88:a6:f7:11:a7:82:ba:
         cb:52:a3:fa:e3:65:ee:f1:d0:6b:5a:52:65:5e:73:e7:23:d4:
         9c:61:dd:d4:75:08:33:90:58:b4:3d:ef:da:6a:15:fd:3e:5a:
         24:62:65:95:eb:83:e1:c8:c5:31:52:eb:d6:58:3a:18:4d:a7:
         dd:dc:30:37:8f:5b:8d:24:de:fa:b4:e9:f0:c4:b6:fc:43:07:
         50:ca:9b:bd:37:a7:fe:ba:94:36:38:6d:82:25:7c:29:3a:30:
         7c:36:1d:da:a4:cb:a6:7c:4c:86:8d:b8:26:90:ff:e3:c3:27:
         94:da:45:ba:64:67:8d:c5:db:21:0b:75:12:d1:6a:be:06:67:
         de:f2:e6:21:85:96:c4:a6:ac:87:6e:d9:b1:c1:82:35:18:05:
         72:b0:53:1c:63:ed:ac:87:9e:0f:91:c3:3d:04:53:c2:0e:6f:
         97:7a:9c:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:14 2024 by rpki-client on console-ams.rpki-client.org