Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/323830343a363035343a383030303a3a2f33342d3334203d3e20323639313630.roa
File:                     323830343a363035343a383030303a3a2f33342d3334203d3e20323639313630.roa (raw, json)
Hash identifier:          53zmu89eQuB9+wssZKaK7Mvgvr6XKgT6iblzJ5Q/d2U=
Subject key identifier:   72:66:21:05:81:25:BC:C1:7B:61:B5:14:A2:82:A7:85:38:7B:A4:35
Certificate issuer:       /CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
Certificate serial:       2476208F21F616997E2903286434E736F65F1B78
Authority key identifier: 0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/323830343a363035343a383030303a3a2f33342d3334203d3e20323639313630.roa
Signing time:             Thu 04 Apr 2024 00:49:48 +0000
ROA not before:           Thu 04 Apr 2024 00:44:48 +0000
ROA not after:            Thu 03 Apr 2025 00:49:48 +0000
asID:                     269160
IP address blocks:        2804:6054:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:76:20:8f:21:f6:16:99:7e:29:03:28:64:34:e7:36:f6:5f:1b:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0DC81BC85B5AB508688D8AB7148F9DB0E39679A2
        Validity
            Not Before: Apr  4 00:44:48 2024 GMT
            Not After : Apr  3 00:49:48 2025 GMT
        Subject: CN=726621058125BCC17B61B514A282A785387BA435
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:2b:e0:2d:c8:39:6b:8b:d3:de:9b:b5:c3:de:
                    18:19:32:15:f2:6d:e5:96:cf:0a:8c:f8:99:e5:41:
                    e3:cb:bd:b9:39:6e:a7:50:05:cd:7f:27:12:3b:e1:
                    17:d4:56:a1:ed:dd:15:4b:d6:87:44:63:15:28:ec:
                    dc:1f:2e:57:93:b0:10:40:f5:a8:2c:80:04:d8:1e:
                    df:de:a5:26:32:a0:5b:80:b6:0b:5d:84:0e:fd:17:
                    9d:67:25:72:54:05:e3:4b:5d:7f:3c:f2:29:b8:dd:
                    e8:59:0b:88:c5:14:64:be:c0:5f:28:5c:54:94:9e:
                    4e:30:7a:6b:96:35:16:af:21:e8:80:ea:fd:a4:58:
                    24:67:6c:37:fd:8c:b0:08:cc:8f:c6:c4:40:7e:13:
                    79:a2:24:10:26:0a:94:7f:f4:4b:04:ca:73:f2:77:
                    a3:78:2e:a9:61:b2:d4:76:22:9d:7a:fc:d3:e4:42:
                    91:08:d8:40:59:f9:7a:ba:02:52:b1:36:14:d7:ca:
                    a3:eb:08:04:b3:82:b9:45:df:f1:04:56:21:92:78:
                    06:10:f5:77:95:bf:9b:6b:93:fc:20:d8:54:49:24:
                    58:dc:49:17:a5:36:db:2b:0d:ac:ab:4f:60:e7:de:
                    8c:ef:e0:ae:52:d7:9f:3b:61:88:be:92:32:74:4a:
                    dd:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:66:21:05:81:25:BC:C1:7B:61:B5:14:A2:82:A7:85:38:7B:A4:35
            X509v3 Authority Key Identifier:
                keyid:0D:C8:1B:C8:5B:5A:B5:08:68:8D:8A:B7:14:8F:9D:B0:E3:96:79:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0DC81BC85B5AB508688D8AB7148F9DB0E39679A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2BFsqMfFWucApLKBo2PUfk2LJ1C5r1bDJhbgdNtEvh9g/1/323830343a363035343a383030303a3a2f33342d3334203d3e20323639313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6054:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         82:2e:b3:38:48:c9:06:0e:bd:80:11:1b:09:80:66:d1:05:3e:
         c2:11:b4:64:26:2d:9e:35:1b:04:ef:58:e1:34:9e:99:5f:a4:
         04:ea:26:56:a8:7a:a4:93:c4:9f:5b:4b:35:36:26:73:44:62:
         a8:a5:8a:d5:9e:44:c6:f7:58:7e:75:a2:02:5f:82:6c:42:70:
         b1:4b:f1:34:d0:75:89:75:80:e3:7c:a6:db:ab:c3:4c:03:73:
         1b:58:25:cb:2d:06:3b:b2:17:78:6c:5a:66:68:c2:44:7a:4f:
         3e:c3:34:ac:fa:45:07:c8:c4:97:ea:82:63:21:18:16:66:10:
         5d:5a:a7:42:c7:bf:1e:37:63:43:45:2b:10:b0:c6:f3:02:6b:
         03:f0:27:da:2b:c8:69:6b:2f:12:29:50:ff:7c:a9:b1:03:6a:
         2e:75:ad:c7:9b:c8:79:3b:31:e7:a2:4b:b7:dd:ee:01:b4:01:
         81:2e:bb:34:cc:14:94:f6:30:66:55:d7:b0:34:41:b0:f0:70:
         7c:7d:21:2f:15:e7:64:e1:29:d8:39:a5:b2:e4:1c:db:a6:e1:
         e6:b1:fb:99:5b:0b:06:c3:ec:18:6e:3a:57:65:20:4f:5a:11:
         54:47:30:4c:c8:ae:33:81:07:21:67:92:c5:51:c4:de:26:da:
         08:97:74:f8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org