Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/323830343a316465383a3a2f33322d3332203d3e203533313230.roa
File:                     323830343a316465383a3a2f33322d3332203d3e203533313230.roa (raw, json)
Hash identifier:          0BVhmWJMp4GkTYiITXdhA6lRNR2juBH1y+voqeY0qNE=
Subject key identifier:   1D:17:C0:14:0D:38:CC:BB:56:8C:E3:E5:E8:5F:E2:D6:E6:BA:50:B7
Certificate issuer:       /CN=20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C
Certificate serial:       13E983E577376D236DAC85A25DB0178B8D4A6E4D
Authority key identifier: 20:DF:3D:EB:D0:43:DD:C5:D6:B8:1A:6E:8E:5F:E0:46:0A:F8:DD:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/323830343a316465383a3a2f33322d3332203d3e203533313230.roa
Signing time:             Fri 07 Oct 2022 13:56:49 +0000
ROA not before:           Fri 07 Oct 2022 13:51:49 +0000
ROA not after:            Fri 06 Oct 2023 13:56:49 +0000
asID:                     53120
IP address blocks:        2804:1de8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:e9:83:e5:77:37:6d:23:6d:ac:85:a2:5d:b0:17:8b:8d:4a:6e:4d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C
        Validity
            Not Before: Oct  7 13:51:49 2022 GMT
            Not After : Oct  6 13:56:49 2023 GMT
        Subject: CN=1D17C0140D38CCBB568CE3E5E85FE2D6E6BA50B7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:c8:0d:8d:52:72:18:53:e7:46:d3:15:d2:6b:
                    4f:74:2a:cf:26:78:b9:b1:a6:b4:d0:2d:85:22:ab:
                    72:e2:64:e6:db:03:f7:87:1d:86:7a:48:28:5d:1a:
                    5e:4a:a1:f8:b1:36:33:5f:5f:26:a2:bc:49:04:30:
                    c6:60:a7:3e:28:cd:5f:44:82:1b:5b:ea:1d:83:b1:
                    6e:cc:47:9c:d4:b7:e8:e6:20:63:8b:b5:9b:ba:4a:
                    e3:9d:88:2c:e3:e3:2c:76:3d:40:84:48:7e:2f:c0:
                    41:de:5a:f3:49:7c:1d:87:83:2e:d0:bb:c3:e5:92:
                    51:6e:69:1f:0a:ff:27:3d:05:be:bc:e4:4d:ba:fd:
                    2d:a8:04:f9:95:9b:68:cb:05:9a:04:88:dc:85:d2:
                    85:4e:f1:aa:34:1a:71:d2:04:af:71:a7:b0:f8:56:
                    ad:ac:40:94:ce:7f:37:c0:bb:61:f9:15:bf:bb:1c:
                    8d:fd:48:80:56:40:cf:07:16:29:f1:e3:6e:f0:0e:
                    75:55:ed:a5:7a:37:d1:8b:b5:15:0f:cd:e4:9e:95:
                    eb:a6:70:65:8c:90:a6:5c:35:9f:3a:3b:e5:55:f4:
                    24:0f:06:9a:c5:dd:bd:11:88:cf:1f:8c:20:6e:41:
                    91:94:ed:17:8f:ac:73:50:58:2d:06:13:71:bc:ae:
                    db:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:17:C0:14:0D:38:CC:BB:56:8C:E3:E5:E8:5F:E2:D6:E6:BA:50:B7
            X509v3 Authority Key Identifier:
                keyid:20:DF:3D:EB:D0:43:DD:C5:D6:B8:1A:6E:8E:5F:E0:46:0A:F8:DD:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/20DF3DEBD043DDC5D6B81A6E8E5FE0460AF8DD5C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HurcAJzMFLF8e4gpH6JejRDq3jvPJjbkm1m9mRBSDnyo/0/323830343a316465383a3a2f33322d3332203d3e203533313230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1de8::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:00:c6:27:f1:3f:c4:a8:76:85:ae:93:df:9a:3e:e9:bb:c5:
         8d:4f:17:9d:50:d3:d7:06:46:48:f4:79:6b:d2:70:3b:1a:21:
         59:86:4d:96:67:b1:4c:48:ea:13:cd:90:e7:47:1e:be:3f:ed:
         a7:6c:67:66:f2:14:e8:86:4b:0a:50:2f:c5:32:09:2a:47:41:
         f2:e4:aa:05:2d:ab:06:e0:cc:3e:8f:97:94:fb:01:24:11:d7:
         d9:71:1f:f7:fb:c5:61:6e:47:6b:06:45:ab:85:24:91:59:64:
         1f:a2:d8:3f:60:74:3f:2e:01:c0:d1:96:4b:1d:e2:ea:2b:c3:
         24:03:db:5d:1f:20:1e:93:1d:56:55:e4:a3:a5:3e:1f:d9:a5:
         e8:74:45:3b:24:2b:20:4c:55:5e:6e:70:fe:12:b6:49:fa:d7:
         d8:ab:10:e1:c6:8a:78:46:fe:9a:0c:f7:89:ea:5a:36:a2:45:
         d4:3c:95:85:d9:f1:71:ba:4b:13:da:3a:05:e2:27:f1:8e:ad:
         8d:f0:e4:e2:93:42:29:60:1d:c7:31:a4:95:dd:d0:89:37:ef:
         b6:c4:12:45:47:a6:ac:c9:7a:ee:13:eb:4c:a0:68:88:a3:1b:
         68:d3:3f:bf:ae:ac:af:fc:ec:73:b5:45:46:12:fe:0a:ea:96:
         c2:48:40:f2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:52 2024 by rpki-client on console-ams.rpki-client.org