Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/323830343a363035343a383030303a3a2f33332d3333203d3e20323639313630.roa
File:                     323830343a363035343a383030303a3a2f33332d3333203d3e20323639313630.roa (raw, json)
Hash identifier:          tDjTrUPaJ0snxxgDg5Nhbc1YctOYYPazqdC6nFrV+6s=
Subject key identifier:   23:A2:51:9E:CE:C6:2B:3F:5C:AB:19:7A:C0:20:EA:75:BD:97:32:B9
Certificate issuer:       /CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
Certificate serial:       44F510D150875F7F5B19EAAA360F154EFFA3531C
Authority key identifier: 0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/323830343a363035343a383030303a3a2f33332d3333203d3e20323639313630.roa
Signing time:             Thu 04 Apr 2024 00:49:48 +0000
ROA not before:           Thu 04 Apr 2024 00:44:48 +0000
ROA not after:            Thu 03 Apr 2025 00:49:48 +0000
asID:                     269160
IP address blocks:        2804:6054:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:f5:10:d1:50:87:5f:7f:5b:19:ea:aa:36:0f:15:4e:ff:a3:53:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
        Validity
            Not Before: Apr  4 00:44:48 2024 GMT
            Not After : Apr  3 00:49:48 2025 GMT
        Subject: CN=23A2519ECEC62B3F5CAB197AC020EA75BD9732B9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:90:fe:3a:a7:92:c3:7a:25:6d:4c:db:fd:2f:
                    5d:00:a2:e4:5e:5e:3f:b9:14:cc:a2:3d:4d:70:20:
                    ff:38:0b:91:1d:82:39:ab:34:18:35:e8:10:48:ab:
                    d4:5e:6f:40:dd:33:e6:f0:2b:43:6e:02:33:15:34:
                    29:19:42:74:38:7a:41:97:50:ec:66:24:05:9b:5d:
                    2c:06:77:75:c5:8b:ae:84:f3:e7:75:a7:6c:e2:e0:
                    d7:0c:48:7f:a4:57:24:35:09:3f:ac:47:a6:bb:d5:
                    95:ea:cd:4e:0f:89:70:79:99:3f:08:8d:6f:b5:09:
                    be:6f:0e:c8:0d:9f:e0:9a:e0:b4:27:90:d5:c6:a1:
                    96:c5:28:79:56:af:44:9e:fd:dc:a5:c7:3b:25:0b:
                    18:86:7f:d8:73:44:bd:fe:75:02:fb:85:69:da:b8:
                    a9:31:8c:ee:39:2a:2c:5a:89:63:62:15:36:81:29:
                    14:3f:25:86:95:ad:a4:f0:c2:2a:5d:a8:4a:3b:3c:
                    5c:b1:cf:b1:0c:47:20:0f:68:12:76:04:ad:50:5a:
                    75:1c:a3:eb:46:c9:b9:58:51:af:23:89:63:7d:ba:
                    25:1a:46:6a:49:65:e7:76:31:df:08:4e:dc:1e:eb:
                    55:06:69:37:e9:e8:23:0c:03:43:f7:69:5b:9f:00:
                    5a:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:A2:51:9E:CE:C6:2B:3F:5C:AB:19:7A:C0:20:EA:75:BD:97:32:B9
            X509v3 Authority Key Identifier:
                keyid:0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/323830343a363035343a383030303a3a2f33332d3333203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6054:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         20:87:20:78:ad:5b:86:b6:73:70:17:1f:fe:a5:c3:29:10:c7:
         5c:24:b0:d3:18:7f:36:3f:27:93:2b:7a:fa:12:09:71:5a:a0:
         ae:94:f5:bc:3d:32:ac:1b:73:b6:a6:72:e7:b5:d6:bf:06:b8:
         86:3a:2a:02:df:3a:83:52:dd:22:cc:8f:33:72:f6:67:ff:a6:
         e7:31:78:0c:2d:ff:24:5b:63:dd:8a:65:9b:ac:55:6f:d8:72:
         38:a0:fe:34:a9:0e:90:72:fd:91:a8:a8:bc:de:86:9a:90:0a:
         1f:87:40:06:72:a9:72:04:75:5b:05:dc:70:58:8c:f6:9d:02:
         11:aa:98:79:5b:80:1f:9d:85:d9:aa:8f:1b:19:04:05:03:fd:
         10:f3:37:7a:11:95:5f:2a:1b:45:a9:7b:45:2c:d2:e3:db:31:
         3a:22:54:a9:99:35:30:74:ce:df:aa:28:0e:1a:17:4e:c3:5e:
         c7:e1:83:09:ed:b8:35:46:9e:16:35:5f:d8:41:51:b2:e8:4c:
         63:af:a5:eb:23:c9:bf:ba:6c:45:3f:10:80:05:85:74:0f:88:
         33:84:41:ad:b7:a6:6c:22:3b:1f:3a:3b:06:b6:0b:35:ce:ba:
         1a:fd:da:5b:fb:03:5c:d8:b5:96:e9:14:06:49:49:57:d2:d4:
         8f:55:9a:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org