Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313230303a3a2f34302d3430203d3e20323632343539.roa
File:                     323830343a3462303a313230303a3a2f34302d3430203d3e20323632343539.roa (raw, json)
Hash identifier:          QTyH/riju3eE3cHNly70MozVLXpkbs++vGWSWLN4Hg8=
Subject key identifier:   A3:E3:83:92:F6:87:D7:44:AD:F7:D2:E7:70:5E:4A:B6:AF:B3:3A:76
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       152C9363B09B1BCEEAC91290EEAA7106389DB0DC
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313230303a3a2f34302d3430203d3e20323632343539.roa
Signing time:             Fri 23 Jun 2023 13:00:21 +0000
ROA not before:           Fri 23 Jun 2023 12:55:21 +0000
ROA not after:            Fri 21 Jun 2024 13:00:21 +0000
asID:                     262459
IP address blocks:        2804:4b0:1200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:2c:93:63:b0:9b:1b:ce:ea:c9:12:90:ee:aa:71:06:38:9d:b0:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jun 23 12:55:21 2023 GMT
            Not After : Jun 21 13:00:21 2024 GMT
        Subject: CN=A3E38392F687D744ADF7D2E7705E4AB6AFB33A76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:19:25:59:9b:05:5e:51:94:0c:21:5a:03:ab:
                    c9:66:b6:d7:ad:84:82:f3:0d:20:bc:97:52:e6:d2:
                    3f:7d:42:ec:8a:ef:78:23:05:11:fc:1c:10:f8:c8:
                    63:fe:83:2a:c2:23:f2:55:66:50:2c:78:b2:67:dd:
                    39:a1:40:c9:53:c8:68:69:4b:7f:df:5c:e8:e5:d6:
                    b1:fa:98:20:81:7d:4a:ff:8b:74:6a:4a:48:23:e2:
                    fb:3f:82:ac:08:b0:f7:63:de:eb:df:a4:33:a6:6d:
                    02:05:3d:de:fe:86:7b:92:e9:81:ee:21:d9:2b:4f:
                    72:63:f7:0c:4f:6e:4c:5c:20:45:06:21:32:e7:22:
                    09:1f:f5:4b:9f:28:15:5f:a4:1d:22:27:3d:ec:f6:
                    38:68:ce:73:27:0a:e2:6d:eb:72:0f:16:06:14:dc:
                    26:f3:fc:59:d1:00:5f:cc:87:d3:29:81:b0:89:a7:
                    09:ac:b0:76:35:c3:59:4d:75:0b:45:a6:b7:c4:33:
                    2d:84:73:f3:0a:63:b0:0d:67:bf:01:8f:c3:e4:86:
                    31:c8:26:d1:2f:9f:d0:e3:d3:fb:fb:af:b3:61:c3:
                    f4:bd:ac:3a:8d:ae:2b:f0:a8:41:67:d4:74:35:20:
                    7c:08:44:ab:7b:48:f5:10:09:07:52:d7:ca:90:67:
                    59:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A3:E3:83:92:F6:87:D7:44:AD:F7:D2:E7:70:5E:4A:B6:AF:B3:3A:76
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313230303a3a2f34302d3430203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:da:1a:dc:b0:82:14:2b:f7:f4:3f:8e:5b:89:85:bf:fc:25:
         92:30:88:9e:8c:07:e8:8f:19:dc:41:6e:86:d7:4f:e2:76:17:
         5a:19:3a:52:e8:32:9a:82:90:01:1c:58:cd:52:b7:78:a8:31:
         f8:01:4b:5b:33:b2:4f:6f:71:80:ad:5d:f6:38:3c:6e:e6:3e:
         23:c2:b3:ce:89:c5:fb:c7:4a:f3:53:35:4d:b4:c9:a0:df:79:
         00:0b:f2:ec:77:8b:92:0f:cb:92:7e:71:6a:14:98:ae:d8:6c:
         73:4d:40:9e:9b:5a:a3:0f:6a:d4:a9:22:98:cf:79:22:b3:49:
         db:77:99:2f:ec:b9:5b:a5:94:05:99:ca:cd:68:c0:85:b1:c3:
         71:49:00:34:f0:5b:9a:d7:d9:77:13:78:e0:80:26:78:00:e3:
         be:9c:74:af:f6:7f:56:46:be:6b:bf:6b:d5:80:c2:da:b0:cb:
         9d:16:a6:bb:c6:36:8b:ac:e7:34:5e:8b:29:66:45:f2:3a:3d:
         d1:aa:44:aa:85:d8:ec:4d:9f:4c:27:a5:fe:2d:98:e3:60:ab:
         76:d4:7f:a8:b9:32:db:3f:1c:11:c3:42:bd:30:85:e2:46:5c:
         69:84:fc:ba:45:33:37:e2:37:a6:da:77:50:e7:09:a6:4e:c2:
         40:e4:fd:52
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org