Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa
File:                     323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa (raw, json)
Hash identifier:          9J4fyfrMwR4vt+tmu62U4gYff17P3gDDJzwl+3FZLTM=
Subject key identifier:   C4:8A:6D:07:DD:7F:54:C1:30:32:5A:B4:F9:9B:15:35:58:AC:DA:0E
Certificate issuer:       /CN=57566AD0E614192635CC891E97E47A090618F3F5
Certificate serial:       0627703F2927C4865BFB36B7D52313E775CE6839
Authority key identifier: 57:56:6A:D0:E6:14:19:26:35:CC:89:1E:97:E4:7A:09:06:18:F3:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57566AD0E614192635CC891E97E47A090618F3F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa
Signing time:             Tue 02 Jan 2024 23:18:38 +0000
ROA not before:           Tue 02 Jan 2024 23:13:38 +0000
ROA not after:            Tue 31 Dec 2024 23:18:38 +0000
asID:                     267024
IP address blocks:        2804:46fc:6500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:27:70:3f:29:27:c4:86:5b:fb:36:b7:d5:23:13:e7:75:ce:68:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=57566AD0E614192635CC891E97E47A090618F3F5
        Validity
            Not Before: Jan  2 23:13:38 2024 GMT
            Not After : Dec 31 23:18:38 2024 GMT
        Subject: CN=C48A6D07DD7F54C130325AB4F99B153558ACDA0E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:bf:2d:55:a3:9d:88:28:90:f4:86:7f:5c:ba:
                    4e:e9:c2:3b:5d:bc:ce:df:85:e3:b6:39:d1:44:21:
                    42:20:1c:19:bb:30:ba:5f:92:0f:7e:2b:ce:0b:1a:
                    92:35:8a:93:0f:25:0e:95:ac:4b:93:ed:cd:ea:33:
                    6d:e5:a4:04:bd:2f:76:a3:9d:5b:f4:37:5f:0c:69:
                    45:71:5e:85:6b:9a:29:92:4f:6e:63:04:1c:1d:ae:
                    dc:3e:19:99:8c:8f:4b:ee:05:71:7b:c3:8e:cf:2e:
                    eb:44:61:8b:40:44:85:17:0d:07:be:06:9b:df:4b:
                    6c:21:b5:8f:fe:1a:36:80:73:c2:c4:1a:ad:eb:6b:
                    0b:1e:31:f3:6f:09:b4:c5:aa:22:a9:2e:44:f9:3f:
                    79:bb:89:6e:6d:e3:77:c5:f4:03:de:d8:7b:d2:e4:
                    6d:2f:78:38:1a:d9:c6:7f:dd:c3:0e:57:62:a3:21:
                    33:bf:f8:1b:dd:17:e8:a9:aa:92:1a:1e:47:bc:8d:
                    81:6f:9d:ea:2d:96:5e:44:ce:41:c6:b5:23:a3:6f:
                    21:20:d8:33:4e:01:8b:79:41:c1:93:f3:ab:c8:30:
                    6f:d9:49:4b:fc:5d:0c:a9:1d:33:44:49:1a:1c:5d:
                    f6:a1:c0:0e:a6:60:68:29:8e:0d:de:8b:c7:b2:60:
                    c4:0b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:8A:6D:07:DD:7F:54:C1:30:32:5A:B4:F9:9B:15:35:58:AC:DA:0E
            X509v3 Authority Key Identifier:
                keyid:57:56:6A:D0:E6:14:19:26:35:CC:89:1E:97:E4:7A:09:06:18:F3:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/57566AD0E614192635CC891E97E47A090618F3F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/57566AD0E614192635CC891E97E47A090618F3F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8FwtC5oh48ZjGaEKmuHRDRj4cNU7s4SvaUv6vwtWug1N/0/323830343a343666633a363530303a3a2f34302d3430203d3e20323637303234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:46fc:6500::/40

    Signature Algorithm: sha256WithRSAEncryption
         9c:49:db:57:5b:47:4d:3d:be:6d:15:2e:bc:58:72:48:02:2a:
         ee:cd:6b:88:02:17:df:00:d3:21:00:71:22:1d:57:6f:dc:f5:
         b9:85:6f:a2:3e:69:52:6f:45:da:1f:d8:08:01:33:4a:85:51:
         91:35:f6:e5:ec:52:b0:43:53:87:90:e2:12:a3:ce:9c:0d:86:
         d7:34:b4:06:ad:77:66:53:e1:62:47:09:77:c2:1f:0c:6b:0e:
         87:62:a3:83:ee:f1:1e:05:5f:79:75:81:67:f5:98:9d:ac:7d:
         d7:24:51:2c:8d:5e:28:e5:d3:83:f5:18:2c:98:f5:eb:a8:d4:
         44:2b:44:38:c9:c7:2a:bf:8c:5a:e9:7e:4c:cd:19:52:b3:fc:
         ff:a9:80:f1:a2:f9:1f:f4:bb:9f:f1:5e:46:ab:4a:e6:08:28:
         85:69:30:de:af:0b:27:f2:6b:79:d1:44:1c:5c:c4:25:68:08:
         ca:74:52:d1:fb:01:8e:8a:8c:54:65:9f:56:87:e5:13:3a:92:
         95:0b:db:57:d2:96:b8:17:28:de:fc:b5:c4:e6:23:1d:80:98:
         2e:96:cf:b5:d1:c2:93:c4:46:33:9f:f1:da:5c:69:d1:e1:55:
         c9:dd:a3:2d:27:cb:8d:61:59:ec:de:77:8b:87:ba:2c:fc:d0:
         a3:f1:30:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:49 2024 by rpki-client on console-fra.rpki-client.org