Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/323830343a343834383a3a2f33322d3438203d3e20323637313039.roa
File:                     323830343a343834383a3a2f33322d3438203d3e20323637313039.roa (raw, json)
Hash identifier:          KnnkyjgN7iJfHrg9ZJ57R95HMH1qCdGSHefIKFnL4Hg=
Subject key identifier:   F6:AF:23:15:4B:5B:D1:C7:51:90:81:4A:9A:0C:EC:35:05:05:80:46
Certificate issuer:       /CN=8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7
Certificate serial:       0343006AE0B5736CE1BB31924F42E5DA324FD448
Authority key identifier: 87:86:B5:E0:27:E1:0F:EC:4F:0B:2A:27:99:5F:82:0D:8E:A4:CA:F7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/323830343a343834383a3a2f33322d3438203d3e20323637313039.roa
Signing time:             Wed 06 Sep 2023 17:10:58 +0000
ROA not before:           Wed 06 Sep 2023 17:05:58 +0000
ROA not after:            Wed 04 Sep 2024 17:10:58 +0000
asID:                     267109
IP address blocks:        2804:4848::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:43:00:6a:e0:b5:73:6c:e1:bb:31:92:4f:42:e5:da:32:4f:d4:48
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7
        Validity
            Not Before: Sep  6 17:05:58 2023 GMT
            Not After : Sep  4 17:10:58 2024 GMT
        Subject: CN=F6AF23154B5BD1C75190814A9A0CEC3505058046
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:b2:ff:d9:13:b0:47:a8:37:11:d4:00:2a:5d:
                    63:13:04:1b:46:95:4a:27:ab:eb:89:bd:3d:8c:0b:
                    35:c8:12:6b:35:cb:51:c5:18:15:8d:a0:a1:d8:74:
                    b6:21:04:f3:33:f1:35:ba:b6:bc:57:0f:e4:30:dc:
                    72:8e:aa:fc:79:a9:17:f6:12:e2:28:1f:75:32:78:
                    f0:d3:4b:a2:c0:dc:4d:6e:4b:64:df:fd:fa:3c:2d:
                    96:1e:41:bd:05:cb:1e:78:a1:4e:96:81:32:90:cd:
                    56:99:b5:aa:97:0f:36:3b:40:26:bb:51:d2:bd:6f:
                    fb:ab:60:38:b4:05:62:a8:95:54:6f:fe:58:78:e6:
                    06:c1:79:93:ab:49:a7:e1:19:2e:72:ac:ab:ea:d9:
                    1a:5f:91:48:ee:c4:30:13:b2:b2:98:e1:94:1a:0e:
                    cf:f3:f7:58:24:a9:d8:58:19:f5:9c:86:db:82:65:
                    e4:6d:ba:66:e2:0e:fa:1e:a2:8f:c1:27:f2:d7:8a:
                    4e:4b:c7:53:a8:2f:53:d1:25:72:2a:e8:27:24:dd:
                    80:ab:02:29:bd:de:db:35:91:c1:a0:e8:81:24:32:
                    f8:86:ec:72:d2:93:57:4b:ec:8f:5d:d9:4e:4a:56:
                    3a:c0:d9:74:9e:df:56:dc:fc:c2:fb:7a:50:18:fc:
                    ce:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:AF:23:15:4B:5B:D1:C7:51:90:81:4A:9A:0C:EC:35:05:05:80:46
            X509v3 Authority Key Identifier:
                keyid:87:86:B5:E0:27:E1:0F:EC:4F:0B:2A:27:99:5F:82:0D:8E:A4:CA:F7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8786B5E027E10FEC4F0B2A27995F820D8EA4CAF7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D1YLu5PuF14RLnuEQhDKoBZSjU1mMGqwkzGrvRELTjLP/0/323830343a343834383a3a2f33322d3438203d3e20323637313039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4848::/32

    Signature Algorithm: sha256WithRSAEncryption
         bc:03:21:ba:06:7d:01:98:6c:4a:6a:bf:e5:81:02:c9:a3:d2:
         44:be:a9:fe:5f:85:03:cf:0e:f1:9e:41:52:10:d6:2e:77:b5:
         dd:f0:38:8f:1e:3c:70:eb:1c:48:8c:dc:c1:54:72:7d:50:fd:
         bb:72:bd:19:41:c7:c6:86:8a:5e:6c:3f:c2:ec:02:2d:aa:a9:
         b1:8b:00:35:8e:0d:c4:f0:8b:ee:09:33:44:3f:56:c0:a5:bd:
         e7:ad:fc:16:48:86:03:6b:90:cc:7b:99:bb:46:33:66:71:92:
         c6:45:ff:d7:32:d8:f2:05:b9:2e:3f:9a:9c:86:7c:c4:7a:9b:
         f0:20:ad:cb:97:15:7b:45:2c:17:3f:68:f2:79:6b:e0:08:ef:
         f4:4a:48:8e:dd:6c:8c:13:6c:76:80:ce:9e:c5:26:bc:df:73:
         78:2b:79:51:90:ff:f5:fb:52:12:ee:d0:a2:09:a5:61:6a:e1:
         d1:5f:78:e0:90:0a:12:8b:ca:1f:78:0f:98:f3:97:fe:23:d5:
         97:3f:43:1a:1f:7a:5b:8e:d7:44:47:bb:cd:e9:98:a2:df:05:
         a0:65:62:91:a4:93:87:dc:12:fc:e2:7d:72:49:50:a6:48:29:
         20:5c:97:d1:7d:35:ad:20:32:cd:4b:2d:ea:63:3c:f0:04:41:
         b8:65:14:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 19:41:16 2024 by rpki-client on console.sobornost.net