Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/323830343a333263303a3a2f33322d3438203d3e20323635303937.roa
File:                     323830343a333263303a3a2f33322d3438203d3e20323635303937.roa (raw, json)
Hash identifier:          Si0JRuzZ4xR6QccU7TsigNmRkyr4CA4wGCPxOnpz/Oo=
Subject key identifier:   76:AD:DE:FD:A3:BF:07:6D:35:92:3C:D8:D1:7A:78:51:6A:A5:BF:8F
Certificate issuer:       /CN=8D9B4497462412C0585CF6E4DC68BB819B6D1E0D
Certificate serial:       65E653BF5501F0A3FB74B20EC886AA6B1382527A
Authority key identifier: 8D:9B:44:97:46:24:12:C0:58:5C:F6:E4:DC:68:BB:81:9B:6D:1E:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/323830343a333263303a3a2f33322d3438203d3e20323635303937.roa
Signing time:             Wed 20 Sep 2023 18:02:00 +0000
ROA not before:           Wed 20 Sep 2023 17:57:00 +0000
ROA not after:            Wed 18 Sep 2024 18:02:00 +0000
asID:                     265097
IP address blocks:        2804:32c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:e6:53:bf:55:01:f0:a3:fb:74:b2:0e:c8:86:aa:6b:13:82:52:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8D9B4497462412C0585CF6E4DC68BB819B6D1E0D
        Validity
            Not Before: Sep 20 17:57:00 2023 GMT
            Not After : Sep 18 18:02:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9f:15:ac:c3:48:15:d6:c6:e2:88:dc:e3:36:d0:
                    16:3a:eb:72:84:80:16:1d:58:0b:ec:b9:84:f2:ec:
                    cd:1b:fa:33:ba:48:dd:e8:bb:8d:18:a5:1f:43:ce:
                    87:66:e8:6e:1a:68:a3:d4:df:1f:24:19:c6:da:3c:
                    c8:b6:7a:31:3a:c7:24:6d:f7:73:33:08:78:48:15:
                    54:f9:f9:27:e9:71:ff:09:89:76:e6:be:95:8d:23:
                    8c:ae:7b:75:25:e8:df:95:f7:5a:c6:b4:f6:5b:17:
                    5f:9d:00:28:17:8a:ca:a5:2d:0f:80:ef:08:b2:16:
                    7a:bd:0a:5a:ca:ce:8f:f5:1c:43:17:42:a9:fb:1c:
                    0c:aa:35:34:04:21:3c:31:62:b2:ee:2a:b0:48:8a:
                    f8:05:d3:99:29:13:bc:9f:e6:e3:c7:00:0b:9f:c1:
                    4f:a3:20:93:1c:2a:a8:fd:08:ea:d0:47:92:6a:43:
                    de:87:7f:3b:bc:a0:47:af:56:8e:88:f6:c3:3d:b0:
                    6b:c8:54:3c:e7:b6:ed:cf:79:4e:da:3d:5e:02:78:
                    e0:c7:fc:a4:90:a4:36:93:77:f0:69:d0:4d:41:16:
                    8c:bc:b2:2c:13:0a:9a:9a:ae:2d:e1:f5:ff:b6:fe:
                    71:ff:78:14:16:c2:69:5b:0d:bb:f1:91:d5:30:d6:
                    2c:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:AD:DE:FD:A3:BF:07:6D:35:92:3C:D8:D1:7A:78:51:6A:A5:BF:8F
            X509v3 Authority Key Identifier:
                keyid:8D:9B:44:97:46:24:12:C0:58:5C:F6:E4:DC:68:BB:81:9B:6D:1E:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8D9B4497462412C0585CF6E4DC68BB819B6D1E0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HYQh6mvPsATqMgPRKVW2sxHxdYy95bthKpMoTWqmPUq/0/323830343a333263303a3a2f33322d3438203d3e20323635303937.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:32c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:db:69:8a:2d:7c:71:38:9a:8f:42:7d:65:f6:d3:72:bc:38:
         b6:f7:ff:b9:d9:26:79:7d:fe:eb:97:5f:24:cd:44:7b:15:e4:
         dc:81:91:c2:7d:f7:8f:50:e5:d0:9f:a9:92:ba:67:66:b7:22:
         71:b5:a2:43:28:f4:c2:05:e0:e3:d4:bf:8c:28:91:fc:99:c1:
         89:a8:5c:ad:08:de:3c:80:94:53:e6:82:c4:ed:f5:20:a7:e9:
         c8:4a:df:11:85:aa:48:3e:78:7d:a3:5c:9c:26:77:b5:94:f2:
         aa:6a:ff:81:5b:af:bd:d7:ce:79:24:8a:80:26:4a:ae:ca:c0:
         4c:d1:9b:b1:99:cb:2b:f3:d4:c4:95:89:1c:41:76:31:86:ac:
         f1:da:53:4d:2e:de:35:33:37:94:a4:d5:f1:8a:5a:8d:e1:c5:
         0a:17:df:a4:32:af:8b:12:78:52:91:1a:30:ef:b9:51:45:7a:
         64:e2:20:35:4a:4f:fa:71:4b:ca:cb:39:18:c6:78:4e:33:87:
         a2:8e:07:39:74:be:c0:37:6f:d9:6d:62:be:c1:21:65:db:0a:
         60:6c:2f:96:09:b9:b0:0c:89:48:8d:2e:2d:37:e8:4e:8c:b5:
         60:ac:f0:6a:0b:fb:bd:b1:db:b9:09:62:dd:48:b3:34:a8:df:
         99:5d:ed:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:59 2024 by rpki-client on console-fra.rpki-client.org