Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/323830343a313465633a3a2f33322d3332203d3e20323633333539.roa
File:                     323830343a313465633a3a2f33322d3332203d3e20323633333539.roa (raw, json)
Hash identifier:          lyP+sfLTgTTrdCsw2qo9kZoHJwDWv3GI2xpRo2alAi4=
Subject key identifier:   DC:83:C8:E6:B6:63:69:20:E6:3A:49:9F:B2:70:57:23:C9:FB:04:8B
Certificate issuer:       /CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
Certificate serial:       1833CE43D612078E42A9A3C7ED54C6CAE50AD10B
Authority key identifier: 2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/323830343a313465633a3a2f33322d3332203d3e20323633333539.roa
Signing time:             Mon 22 May 2023 20:00:00 +0000
ROA not before:           Mon 22 May 2023 19:55:00 +0000
ROA not after:            Mon 20 May 2024 20:00:00 +0000
asID:                     263359
IP address blocks:        2804:14ec::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:33:ce:43:d6:12:07:8e:42:a9:a3:c7:ed:54:c6:ca:e5:0a:d1:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C4B5D91DF80C594C7B1DF25F4C057357AD160EF
        Validity
            Not Before: May 22 19:55:00 2023 GMT
            Not After : May 20 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:cf:c9:0d:45:82:6f:f0:a5:28:64:55:f7:5e:
                    f6:8f:81:d7:c6:95:f3:90:09:77:5b:38:2d:17:27:
                    42:d8:f6:a4:c5:23:c0:6b:60:af:d1:74:5c:ad:5c:
                    63:60:31:fe:42:3f:9e:68:84:ae:53:bf:89:ef:fe:
                    0d:b6:95:63:ab:ec:0b:29:1d:9a:1c:25:ec:81:30:
                    cd:ab:22:60:0c:7b:88:44:b1:1f:db:09:a7:ab:b2:
                    78:23:7b:41:1d:58:ab:60:34:0c:3a:4b:07:6b:fb:
                    b8:40:81:0c:61:09:1c:03:50:12:4c:1e:e1:72:63:
                    27:f8:4a:95:65:d4:14:7c:0d:a1:ea:ae:63:46:57:
                    b0:5d:82:cb:17:72:5b:99:6a:0c:24:4e:6d:1b:62:
                    32:08:ae:7a:7d:61:6a:6e:45:8d:39:59:94:63:c2:
                    14:80:31:14:d1:8b:f1:7c:cc:1c:a8:d4:dd:cc:52:
                    1b:aa:5c:bf:b6:45:59:b4:ce:bc:c6:e7:19:71:32:
                    5b:dc:41:a8:d1:c9:7b:01:b5:7c:53:2f:90:06:14:
                    87:2a:a9:86:dd:c3:9e:13:9a:35:60:71:b8:21:64:
                    d5:eb:57:87:21:97:bf:05:50:07:a3:4c:4d:c5:40:
                    07:43:6a:14:c0:60:1c:66:5b:7e:40:14:d3:16:0c:
                    fb:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DC:83:C8:E6:B6:63:69:20:E6:3A:49:9F:B2:70:57:23:C9:FB:04:8B
            X509v3 Authority Key Identifier:
                keyid:2C:4B:5D:91:DF:80:C5:94:C7:B1:DF:25:F4:C0:57:35:7A:D1:60:EF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C4B5D91DF80C594C7B1DF25F4C057357AD160EF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28tpAT2p1W1gTRt1eqGcpPkptGVm8RR6Daenp5TySS8k/0/323830343a313465633a3a2f33322d3332203d3e20323633333539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:14ec::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:a2:6d:21:08:e7:f7:e6:d1:58:dc:db:60:23:06:df:91:5e:
         cd:ed:ce:de:f0:44:7d:f8:97:87:a6:06:a0:15:bd:56:9d:09:
         d2:d6:f0:2d:71:8e:b6:da:cd:4e:49:b1:9d:dd:71:47:84:d8:
         d8:ab:3e:09:db:66:ce:ff:72:b5:f0:9a:a2:c5:c9:0c:5b:39:
         a2:ba:17:d6:8c:22:5f:b5:3a:21:d7:d8:d0:d5:2a:ff:a1:68:
         4d:20:95:5f:19:bf:f2:3d:0c:7b:88:41:72:09:b2:28:98:86:
         13:79:ed:b2:01:e9:09:39:dc:06:a1:5a:0d:83:43:e6:23:49:
         a6:a3:07:14:05:b0:9d:7a:87:35:3a:0d:63:dd:7b:02:9a:9a:
         b6:73:2c:f9:54:b6:50:0d:93:12:e8:73:ee:18:d8:89:30:be:
         91:69:65:39:f9:93:7f:51:38:ba:9a:22:28:05:86:8e:29:91:
         33:fe:8d:d4:69:67:91:ab:0a:39:da:17:15:9a:aa:c9:ea:41:
         16:83:6b:28:62:5c:99:c4:1b:37:cf:21:db:f6:8f:10:8a:2d:
         97:d2:80:1b:3b:89:9f:17:05:50:71:66:bb:82:99:11:df:7b:
         01:03:23:89:cd:54:eb:49:d4:e6:e9:64:e1:a2:8e:cc:41:bc:
         8c:58:2b:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org