Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a616162623a3a2f34382d3438203d3e20323730373034.roa
File:                     323830343a373031343a616162623a3a2f34382d3438203d3e20323730373034.roa (raw, json)
Hash identifier:          Eork/sIVNVf+oaBpjXQsO6ch7CXm86/63GdYBN08L6E=
Subject key identifier:   0F:28:A9:07:AE:6B:D4:DD:66:07:BE:20:CE:77:8A:01:B9:A1:FA:EC
Certificate issuer:       /CN=08DC97818473BD73C2DD2C6E472F59268A919F1D
Certificate serial:       4E916F75B78F5C464D16C6CEA21279193A6684AE
Authority key identifier: 08:DC:97:81:84:73:BD:73:C2:DD:2C:6E:47:2F:59:26:8A:91:9F:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a616162623a3a2f34382d3438203d3e20323730373034.roa
Signing time:             Mon 13 Feb 2023 19:33:39 +0000
ROA not before:           Mon 13 Feb 2023 19:28:39 +0000
ROA not after:            Mon 12 Feb 2024 19:33:39 +0000
asID:                     270704
IP address blocks:        2804:7014:aabb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:91:6f:75:b7:8f:5c:46:4d:16:c6:ce:a2:12:79:19:3a:66:84:ae
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=08DC97818473BD73C2DD2C6E472F59268A919F1D
        Validity
            Not Before: Feb 13 19:28:39 2023 GMT
            Not After : Feb 12 19:33:39 2024 GMT
        Subject: CN=0F28A907AE6BD4DD6607BE20CE778A01B9A1FAEC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:65:fd:e9:2c:0e:5c:b0:e9:aa:34:7d:1c:db:
                    fe:50:b8:05:cc:29:3a:8a:77:67:64:e5:dc:f9:7a:
                    e4:c0:d2:c3:34:82:fc:4d:eb:ab:7f:35:16:98:96:
                    3c:e5:17:d7:4b:55:48:ed:f3:6d:c8:ee:93:d2:2f:
                    21:01:c7:20:52:39:7c:4a:80:b2:52:1f:92:00:32:
                    36:9e:1a:65:81:ba:bd:03:0a:66:ad:aa:27:8f:e8:
                    b4:30:19:e9:91:67:29:44:82:b3:7d:56:c7:e9:4c:
                    e8:19:39:80:51:b3:55:c8:76:f2:c5:5b:05:06:3c:
                    d6:3d:ad:c2:40:88:ba:16:bf:04:8b:4e:0f:20:52:
                    bc:8a:94:89:67:84:4f:1b:4a:5a:97:28:c9:64:b4:
                    c0:68:d9:34:89:bc:ea:6a:df:0f:3d:38:3e:82:8f:
                    b7:f6:f6:ff:27:df:fc:bc:9d:76:91:94:45:9c:5e:
                    a2:da:11:e2:c9:c8:00:74:6d:14:66:32:1e:a6:1d:
                    a3:b2:35:c0:10:2a:78:6e:ea:ca:2a:d5:2f:57:a8:
                    8d:ba:98:b1:40:d4:02:ce:ff:e2:e6:ef:89:e3:ee:
                    df:9c:3f:40:ec:39:ef:05:ba:f7:32:14:ae:ae:25:
                    e0:26:c5:18:a6:30:71:88:8e:4c:73:0f:82:da:0a:
                    48:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:28:A9:07:AE:6B:D4:DD:66:07:BE:20:CE:77:8A:01:B9:A1:FA:EC
            X509v3 Authority Key Identifier:
                keyid:08:DC:97:81:84:73:BD:73:C2:DD:2C:6E:47:2F:59:26:8A:91:9F:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/08DC97818473BD73C2DD2C6E472F59268A919F1D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/He5iKo5Uvy3SsTHbn2Kgr2eXnxDz3793t4L2FwBnsULU/0/323830343a373031343a616162623a3a2f34382d3438203d3e20323730373034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7014:aabb::/48

    Signature Algorithm: sha256WithRSAEncryption
         97:34:eb:f1:c4:a1:c1:78:ce:b3:a9:4e:05:35:ba:45:f3:b2:
         83:b6:ac:70:41:dd:ac:93:0e:60:1e:e5:3e:8c:0d:5b:cb:a3:
         54:44:2d:4e:a5:41:cd:76:2c:f5:3c:db:ba:da:42:a0:f8:73:
         c1:b9:88:8a:51:6b:1f:28:92:a5:26:d1:ac:69:00:a0:f6:82:
         3f:36:04:49:c4:3d:89:2c:f6:57:4c:1e:43:96:79:c6:b2:ce:
         a6:f4:53:d3:d1:6d:c0:07:70:1c:1d:83:4d:9e:30:f0:d5:71:
         3c:6d:1b:9f:c4:37:5c:7f:57:29:e8:23:17:36:cd:8a:ee:e6:
         57:22:0a:34:fb:89:ca:12:fa:8c:d1:51:ae:1a:e8:41:d0:ca:
         9f:8e:ec:c1:c2:33:22:34:60:9f:59:64:a5:bb:48:6c:c8:82:
         20:76:83:86:b1:7f:14:e2:ba:19:fd:85:9a:28:d9:74:4e:33:
         7a:b8:2d:8c:48:76:be:9a:33:da:30:fd:cc:a3:57:20:71:29:
         d9:27:04:07:6d:ed:3d:1f:d3:22:f6:dc:79:9a:7b:75:0a:98:
         6e:6a:ac:a7:13:cb:9b:ce:e7:3a:47:c7:d5:f3:99:51:36:2c:
         60:d0:90:b0:ea:7a:67:ab:f7:c0:56:7a:5e:9b:04:09:26:32:
         60:f6:74:94
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:48 2024 by rpki-client on console-ams.rpki-client.org