Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/323830343a353666343a3a2f33322d3438203d3e20323638303334.roa
File:                     323830343a353666343a3a2f33322d3438203d3e20323638303334.roa (raw, json)
Hash identifier:          RsKCQB2Gx0Z3YV9oP7decLHrCO2Lf1MmJ06faAL46p4=
Subject key identifier:   33:95:43:A5:8A:FE:C2:00:3B:EE:02:89:22:1B:80:61:2C:B3:DA:59
Certificate issuer:       /CN=8CCF22873E634698CEE5348EF53F753A789078D6
Certificate serial:       1FD8FB27D818F27005B04CD4350524EE37403A39
Authority key identifier: 8C:CF:22:87:3E:63:46:98:CE:E5:34:8E:F5:3F:75:3A:78:90:78:D6
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CCF22873E634698CEE5348EF53F753A789078D6.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/323830343a353666343a3a2f33322d3438203d3e20323638303334.roa
Signing time:             Tue 22 Aug 2023 21:37:23 +0000
ROA not before:           Tue 22 Aug 2023 21:32:23 +0000
ROA not after:            Tue 20 Aug 2024 21:37:23 +0000
asID:                     268034
IP address blocks:        2804:56f4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:d8:fb:27:d8:18:f2:70:05:b0:4c:d4:35:05:24:ee:37:40:3a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CCF22873E634698CEE5348EF53F753A789078D6
        Validity
            Not Before: Aug 22 21:32:23 2023 GMT
            Not After : Aug 20 21:37:23 2024 GMT
        Subject: CN=339543A58AFEC2003BEE0289221B80612CB3DA59
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:86:7a:4d:1f:18:bd:0d:1f:b9:2d:19:45:dc:
                    53:0f:2c:91:3d:ea:f0:d0:0b:33:50:cb:19:e1:52:
                    e8:c4:d5:54:cd:95:7a:a9:6b:af:ca:2f:73:bc:89:
                    be:38:2a:93:1f:1b:db:2f:58:6c:bb:8e:0e:f3:40:
                    5d:b3:44:fc:d2:a2:ff:f5:54:98:42:f3:3c:92:2e:
                    53:58:ab:8a:4c:ab:15:1f:54:78:54:43:86:2b:b8:
                    fe:14:1a:38:ca:e3:61:5a:68:46:d0:be:06:fc:ae:
                    3e:6c:4a:0f:e1:48:c6:ed:c5:c2:8d:95:95:76:ad:
                    00:36:57:44:5b:4c:a1:20:56:51:30:5d:c6:ba:2b:
                    14:05:57:9c:b0:d0:5e:c8:a9:9e:5e:f3:b5:f1:e3:
                    04:33:d6:fa:4c:17:0a:ec:2d:8d:0a:0f:b5:26:94:
                    9f:a2:11:a3:01:07:35:d5:9e:1c:8c:f5:ca:bc:c9:
                    31:c0:fd:39:90:85:45:28:49:fd:58:17:ce:a6:a1:
                    db:15:9c:38:f8:5a:c4:2c:24:10:57:e8:dc:d4:1b:
                    30:b3:9a:f8:0c:f5:94:b5:c1:9e:74:92:c5:65:22:
                    90:2e:89:2e:79:c7:ea:3d:fc:40:c4:f6:13:f1:3f:
                    d3:a8:eb:b8:80:05:1f:6c:28:12:bd:8f:df:19:08:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:95:43:A5:8A:FE:C2:00:3B:EE:02:89:22:1B:80:61:2C:B3:DA:59
            X509v3 Authority Key Identifier:
                keyid:8C:CF:22:87:3E:63:46:98:CE:E5:34:8E:F5:3F:75:3A:78:90:78:D6

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/8CCF22873E634698CEE5348EF53F753A789078D6.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CCF22873E634698CEE5348EF53F753A789078D6.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/MScaAk9Ty3weVLBcZ5vkDWSf4Z2obT3XXiicpiv2vPL/0/323830343a353666343a3a2f33322d3438203d3e20323638303334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:d9:93:6a:ef:4e:9c:29:76:b1:f4:b3:6f:49:ff:6c:43:ba:
         5a:91:4b:cc:ac:98:21:31:a6:38:cf:e5:8f:05:c9:ae:aa:2b:
         b5:92:c8:57:90:db:35:26:ca:cd:0e:b6:99:bc:25:55:d2:df:
         67:2a:96:e1:0c:7f:14:d1:73:84:66:4f:2f:1d:f6:57:20:ba:
         2f:f1:89:db:21:67:52:21:ca:bc:a2:5c:76:ec:44:93:37:f7:
         85:38:a5:75:a7:1a:40:ee:32:71:55:36:3c:3c:3c:02:9e:ff:
         92:9c:05:ed:63:86:51:a7:d5:d8:ae:e5:c2:67:b6:76:a7:16:
         20:a0:32:37:b4:3b:1d:03:9d:9e:28:10:63:7f:ad:36:66:10:
         65:a2:88:bf:a9:08:3b:61:91:02:86:77:1f:3a:f2:80:0b:59:
         46:f9:69:44:56:db:d1:f0:95:c8:b4:10:87:f6:a2:69:16:95:
         29:9c:92:2b:5d:f2:27:90:2b:61:f4:ba:c5:77:5e:df:9b:75:
         fb:11:df:31:6d:0e:25:c6:da:92:14:90:61:ee:46:25:b6:c8:
         ae:3f:b6:db:eb:19:ae:9a:ef:2d:3e:0e:4f:9a:88:88:cc:49:
         1c:81:89:c1:62:98:58:c2:e6:d1:4e:bb:4e:65:5f:01:5e:0d:
         56:d3:23:5c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org