Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313630303a3a2f34312d3431203d3e20323632343539.roa
File:                     323830343a3462303a313630303a3a2f34312d3431203d3e20323632343539.roa (raw, json)
Hash identifier:          AQKf2Q5KeBXKdTExWnQaK24p23wYFIY1hQ7/leBt4Cg=
Subject key identifier:   BF:81:D4:8F:D0:F7:9D:44:FC:02:61:CD:21:E5:D1:26:58:22:7D:84
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       1409107FFB5022D02F2E1A35E2F37CCE420A550E
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313630303a3a2f34312d3431203d3e20323632343539.roa
Signing time:             Mon 27 Nov 2023 17:56:23 +0000
ROA not before:           Mon 27 Nov 2023 17:51:23 +0000
ROA not after:            Mon 25 Nov 2024 17:56:23 +0000
asID:                     262459
IP address blocks:        2804:4b0:1600::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:09:10:7f:fb:50:22:d0:2f:2e:1a:35:e2:f3:7c:ce:42:0a:55:0e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Nov 27 17:51:23 2023 GMT
            Not After : Nov 25 17:56:23 2024 GMT
        Subject: CN=BF81D48FD0F79D44FC0261CD21E5D12658227D84
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:1e:89:6d:cf:44:5f:16:9f:ea:0d:84:42:57:
                    86:24:05:5a:3b:2b:c9:5d:25:91:7c:24:42:fa:03:
                    28:e5:ca:8d:9f:6b:39:18:9e:ad:db:40:cf:94:7a:
                    ec:48:0a:b8:0c:37:90:af:c4:2e:0b:db:26:6e:62:
                    71:f2:a3:2d:04:85:66:ea:c0:c4:34:2e:ce:7b:ee:
                    7b:5f:f4:66:bc:4d:dc:4d:4e:2f:bb:3c:f5:1f:a9:
                    8e:e9:7f:bc:8c:c5:76:54:36:40:2d:72:ab:bb:56:
                    13:f1:d1:36:e5:b0:19:4a:95:23:e0:13:6f:1a:3c:
                    07:24:7e:e7:52:f9:13:50:20:28:90:7e:1f:a1:92:
                    0d:6f:ad:37:3c:8a:67:a4:5f:16:b1:b5:4d:cb:4f:
                    3e:3a:d2:d7:6e:1a:86:16:43:ac:2a:fe:c6:d0:81:
                    74:f9:bf:5c:60:3f:33:30:42:de:5a:e0:82:7b:65:
                    62:c7:46:67:a2:b6:6a:f2:90:ce:4b:99:74:cb:21:
                    75:c7:fe:97:46:79:44:93:e0:ff:6b:a8:f6:b0:cb:
                    8a:0d:7a:53:9c:37:df:01:19:7e:40:dc:9f:ea:ed:
                    ec:31:25:4d:bb:8a:1f:54:46:84:07:90:2a:e0:c0:
                    e3:0b:8e:ca:19:a8:73:0e:a5:a5:46:d0:53:5a:7c:
                    30:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:81:D4:8F:D0:F7:9D:44:FC:02:61:CD:21:E5:D1:26:58:22:7D:84
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a313630303a3a2f34312d3431203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:1600::/41

    Signature Algorithm: sha256WithRSAEncryption
         42:b5:db:4e:38:d6:d4:10:46:10:ca:12:5b:1b:a8:94:4e:29:
         28:b5:d9:9f:3a:bc:ff:35:3a:03:88:3d:47:ae:01:b3:77:d4:
         71:de:bd:36:8d:db:2d:4d:ce:48:0a:42:d4:20:52:a0:2d:06:
         9c:26:c1:b5:8c:99:dd:1d:66:a4:9e:5e:53:45:47:29:8f:83:
         8f:e7:6f:e8:bc:35:70:2d:30:47:03:58:6a:d4:c3:f4:bc:10:
         3a:95:90:fe:79:18:f5:80:27:29:f8:c9:3d:00:07:0e:43:b3:
         0d:c7:5d:58:d5:b5:64:07:19:ea:d8:e1:36:b8:e1:ca:7a:49:
         82:a8:bb:19:db:af:05:6f:ef:18:c5:1c:14:a3:47:45:38:24:
         e4:bc:86:e8:17:89:15:60:69:e1:d2:12:49:23:76:dc:ca:40:
         a2:44:7c:09:2a:9f:6b:3d:34:e6:eb:86:10:af:86:88:78:79:
         91:58:48:f8:19:8f:4a:3b:80:2a:49:0d:f0:9d:9a:9e:90:5f:
         bb:d9:a2:cc:38:dd:e2:d9:54:86:15:1d:46:4c:3d:0b:ce:ad:
         cb:6e:e5:50:1f:2d:db:8f:10:92:ea:88:d6:eb:73:89:e5:a4:
         92:61:ce:84:3c:16:9c:40:6c:13:15:42:fa:72:69:81:51:9b:
         17:2a:3e:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:54 2024 by rpki-client on console-ams.rpki-client.org