Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/323830343a353838633a3a2f33332d3333203d3e20323638313335.roa
File:                     323830343a353838633a3a2f33332d3333203d3e20323638313335.roa (raw, json)
Hash identifier:          AEXV0dKtjzomwfqSbLQMrlHlH3m0NTfI4tQtCaq6Wmk=
Subject key identifier:   FF:80:29:36:09:3D:CA:13:D4:AA:12:C6:C2:BC:42:34:5E:11:48:32
Certificate issuer:       /CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
Certificate serial:       6B28AEFFF91ADE9BA5F3082141F574344D4E856B
Authority key identifier: 1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/323830343a353838633a3a2f33332d3333203d3e20323638313335.roa
Signing time:             Fri 12 May 2023 13:16:54 +0000
ROA not before:           Fri 12 May 2023 13:11:54 +0000
ROA not after:            Fri 10 May 2024 13:16:54 +0000
asID:                     268135
IP address blocks:        2804:588c::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:28:ae:ff:f9:1a:de:9b:a5:f3:08:21:41:f5:74:34:4d:4e:85:6b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C597AB2840D0BB4C766CF3270D2E2A73FC493CD
        Validity
            Not Before: May 12 13:11:54 2023 GMT
            Not After : May 10 13:16:54 2024 GMT
        Subject: CN=FF802936093DCA13D4AA12C6C2BC42345E114832
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:6e:36:1e:d9:f9:c4:49:81:4f:e7:3e:f0:e2:
                    74:d2:93:95:24:4e:d7:57:cc:c4:cf:b9:fd:64:96:
                    a7:33:52:cd:76:52:bf:8b:9d:67:3a:08:26:9f:04:
                    90:71:be:94:f9:f0:a6:f7:50:d3:6b:4d:19:4f:c2:
                    bc:a9:03:ff:c4:67:79:2c:c2:77:ec:2c:35:21:36:
                    d2:c6:4a:4f:df:ce:89:d6:84:0b:89:53:ee:b5:49:
                    9a:c8:92:12:8d:ec:6b:1a:07:6a:62:a6:44:02:62:
                    e5:29:14:fe:7e:9a:cd:9b:70:a1:62:bd:c8:3d:b8:
                    a3:36:bb:d7:ca:ca:df:09:06:79:f2:32:7b:f3:21:
                    76:09:40:24:a2:98:7a:b2:9f:5e:d0:9e:51:4f:4d:
                    55:bd:54:dc:b7:99:64:6d:bb:a7:3a:89:ca:5a:5f:
                    ba:08:7d:82:75:96:7c:ff:68:06:98:4d:59:9b:70:
                    bd:ab:24:be:22:b5:2b:97:c9:12:92:ed:31:f4:0c:
                    e2:0d:68:88:dd:bd:1a:3b:ff:53:44:9b:2f:3b:1d:
                    d9:4e:07:63:9a:8d:e5:cb:87:e1:37:e5:5d:82:f7:
                    16:e0:8d:e8:e9:d3:ec:c6:92:06:b0:6d:e9:1a:e8:
                    28:08:86:d4:a3:77:55:16:15:51:2d:86:d2:c1:a2:
                    f1:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:80:29:36:09:3D:CA:13:D4:AA:12:C6:C2:BC:42:34:5E:11:48:32
            X509v3 Authority Key Identifier:
                keyid:1C:59:7A:B2:84:0D:0B:B4:C7:66:CF:32:70:D2:E2:A7:3F:C4:93:CD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C597AB2840D0BB4C766CF3270D2E2A73FC493CD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ous4UMXspnHSz54NM9C5NmgELnyHHmuT1qSpCEYgBL4/0/323830343a353838633a3a2f33332d3333203d3e20323638313335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:588c::/33

    Signature Algorithm: sha256WithRSAEncryption
         45:5b:51:18:b9:8e:8d:17:ea:0d:0f:f7:f4:8b:06:ab:c9:e4:
         48:6e:67:cc:ef:19:fb:7c:cb:ed:4e:e2:6e:c9:e7:dd:b2:02:
         f5:ee:fb:1e:7e:49:20:89:38:72:d2:1c:b0:1a:cc:02:e4:c2:
         ee:c0:4a:74:40:e6:e9:3f:71:9e:a3:c6:47:e6:39:5f:3d:e9:
         b2:13:55:f2:95:6f:03:07:18:07:f3:1c:1b:99:43:71:91:46:
         cf:a6:5e:1a:2d:67:ea:19:39:92:2e:d5:27:03:16:d8:61:fc:
         05:21:d1:a8:ee:1a:d4:4e:0b:47:46:ad:28:0f:e0:58:59:6b:
         c9:0e:04:96:f6:7e:7d:5a:5e:98:0e:df:ed:b9:00:37:82:79:
         88:02:fe:99:3a:f4:d9:99:7e:35:75:f5:98:8e:01:90:33:4c:
         7e:56:00:5e:f4:d7:bb:aa:bb:52:1a:ee:a3:2f:a1:48:cc:cf:
         4f:18:d5:e1:34:53:5f:29:3d:5e:d7:23:14:38:8e:36:55:9d:
         fb:62:f4:08:84:f3:35:d7:56:4e:de:23:87:b6:08:ed:23:79:
         11:30:3f:eb:17:ac:71:a3:a9:3c:e5:ad:ef:90:2d:7b:79:17:
         f0:f1:ac:d7:a7:28:0a:7e:bc:ee:21:f3:69:2a:99:88:4f:97:
         f1:63:8d:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org