Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HVGkzMNAHWdDSC7wkG1x1s8P5TCkmADBWKhQAFRU6rUf/0/323830343a323030633a383930303a3a2f34302d3430203d3e20323632383135.roa
File:                     323830343a323030633a383930303a3a2f34302d3430203d3e20323632383135.roa (raw, json)
Hash identifier:          QBaKqqps9n+2Yu7XEwHaM/Fr9H0inASlHScpm/rQiCc=
Subject key identifier:   7F:9F:1B:7A:3D:80:EB:6C:D1:23:EA:C4:60:C8:36:5D:3A:44:44:4F
Certificate issuer:       /CN=88302569EC11019CB5C5DBAAE2157D23DAB3B4B1
Certificate serial:       195C67AFC414DB2CB533C3A708AA9B7D3FAEAA0D
Authority key identifier: 88:30:25:69:EC:11:01:9C:B5:C5:DB:AA:E2:15:7D:23:DA:B3:B4:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88302569EC11019CB5C5DBAAE2157D23DAB3B4B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HVGkzMNAHWdDSC7wkG1x1s8P5TCkmADBWKhQAFRU6rUf/0/323830343a323030633a383930303a3a2f34302d3430203d3e20323632383135.roa
Signing time:             Mon 19 Sep 2022 21:33:41 +0000
ROA not before:           Mon 19 Sep 2022 21:28:41 +0000
ROA not after:            Mon 18 Sep 2023 21:33:41 +0000
asID:                     262815
IP address blocks:        2804:200c:8900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:5c:67:af:c4:14:db:2c:b5:33:c3:a7:08:aa:9b:7d:3f:ae:aa:0d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=88302569EC11019CB5C5DBAAE2157D23DAB3B4B1
        Validity
            Not Before: Sep 19 21:28:41 2022 GMT
            Not After : Sep 18 21:33:41 2023 GMT
        Subject: CN=7F9F1B7A3D80EB6CD123EAC460C8365D3A44444F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:fe:e6:03:88:85:4e:26:9a:8f:b9:64:4a:05:
                    d3:48:4f:c0:54:a8:64:44:a1:2b:dd:90:8d:69:60:
                    2b:c0:0f:d3:d5:59:fb:0b:4f:60:16:19:4c:5d:80:
                    d9:f1:1d:ab:51:b0:f3:ec:03:9f:5b:d8:17:db:2d:
                    cf:c0:c7:3c:3a:ce:c3:30:23:48:98:ae:c0:c6:9c:
                    01:64:d6:ba:98:7f:7e:45:01:bc:0a:44:0a:a6:d5:
                    0a:17:b5:eb:7e:fd:90:ae:b4:e3:01:75:7d:67:ea:
                    d2:98:31:cf:7c:14:3f:62:9c:73:4f:3c:ac:58:fa:
                    00:93:5e:3b:a8:23:15:09:4f:1c:2f:4b:a1:8c:fa:
                    07:2d:eb:86:52:73:92:c9:41:58:6f:a0:b6:34:98:
                    54:d0:23:46:e7:ec:83:89:b0:b8:5b:ba:08:32:be:
                    7c:a8:4e:9b:28:e7:95:3e:44:b9:03:fd:6b:02:9a:
                    98:6a:f9:d6:b7:40:b8:6a:e5:dd:ab:4f:28:e7:2c:
                    e6:fd:63:19:19:e9:50:16:48:ba:24:15:86:5b:72:
                    22:c6:32:a6:db:f9:18:15:4b:6a:9b:a9:ab:0f:f9:
                    b0:a3:68:45:fa:1f:26:07:69:dd:68:6c:d6:5d:b6:
                    86:11:2e:e9:c8:31:a8:6a:0c:8b:0a:4d:60:cc:f1:
                    36:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:9F:1B:7A:3D:80:EB:6C:D1:23:EA:C4:60:C8:36:5D:3A:44:44:4F
            X509v3 Authority Key Identifier:
                keyid:88:30:25:69:EC:11:01:9C:B5:C5:DB:AA:E2:15:7D:23:DA:B3:B4:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HVGkzMNAHWdDSC7wkG1x1s8P5TCkmADBWKhQAFRU6rUf/0/88302569EC11019CB5C5DBAAE2157D23DAB3B4B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/88302569EC11019CB5C5DBAAE2157D23DAB3B4B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HVGkzMNAHWdDSC7wkG1x1s8P5TCkmADBWKhQAFRU6rUf/0/323830343a323030633a383930303a3a2f34302d3430203d3e20323632383135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:200c:8900::/40

    Signature Algorithm: sha256WithRSAEncryption
         2a:a2:0d:bf:44:aa:d0:ba:2a:47:85:44:e2:9e:b2:09:a5:d4:
         27:0a:51:00:f7:bb:e0:9c:c4:d0:65:8a:32:cd:c4:34:74:ad:
         87:da:b6:81:43:a3:00:6c:09:2c:a4:82:94:bb:cd:74:61:3b:
         a1:fb:0e:79:aa:fa:30:5d:76:29:ce:76:35:63:80:d0:58:df:
         ac:80:94:b4:5c:d4:3d:80:75:c1:21:87:f6:34:20:e5:f9:98:
         db:80:a6:d2:fe:1b:3a:92:f3:26:67:77:68:31:c3:6a:04:44:
         73:ca:fc:95:32:eb:2f:be:9e:00:5f:4f:12:d7:37:a1:e7:cc:
         a9:0f:35:b0:17:89:f6:07:92:ef:c1:60:33:1c:d6:f9:a4:ce:
         ce:a0:34:7a:5b:69:99:1e:0a:1f:71:9e:5f:0f:77:97:47:95:
         54:3d:c7:72:6f:4e:8f:7d:57:b0:6a:27:9b:0c:d7:97:9e:7d:
         b1:07:ee:3e:07:05:ee:0d:04:16:d5:54:f4:87:74:d4:be:19:
         8c:e5:24:09:aa:78:84:e0:15:a9:14:55:da:c7:86:c4:35:f6:
         c4:b9:9e:85:7a:c6:df:72:e1:48:07:93:2b:de:6f:80:f1:1e:
         fb:9a:72:b0:3c:37:0c:48:b9:33:0d:0c:0c:98:cd:d4:59:bd:
         d1:d9:a6:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:58 2024 by rpki-client on console-fra.rpki-client.org