Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3130303a3a2f34302d3430203d3e20323639323334.roa
File:                     323830343a363137303a3130303a3a2f34302d3430203d3e20323639323334.roa (raw, json)
Hash identifier:          AxMXWEUJxDvtb7aTr7/nOFeMqTc3YipNGBUXx4yuK10=
Subject key identifier:   B6:3C:D3:EA:F2:A4:6C:15:6A:24:56:E1:16:68:90:48:6C:B9:96:6D
Certificate issuer:       /CN=5AD163E3334A2AF515A739140ED43D8500612D54
Certificate serial:       146C51915466F0B1F89122B3E21FD535D84D4FD3
Authority key identifier: 5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3130303a3a2f34302d3430203d3e20323639323334.roa
Signing time:             Fri 10 Jun 2022 17:00:00 +0000
ROA not before:           Fri 10 Jun 2022 16:55:00 +0000
ROA not after:            Fri 09 Jun 2023 17:00:00 +0000
asID:                     269234
IP address blocks:        2804:6170:100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:6c:51:91:54:66:f0:b1:f8:91:22:b3:e2:1f:d5:35:d8:4d:4f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AD163E3334A2AF515A739140ED43D8500612D54
        Validity
            Not Before: Jun 10 16:55:00 2022 GMT
            Not After : Jun  9 17:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:68:57:9d:7d:dd:f1:f8:99:04:5f:37:5c:0c:
                    0e:e6:48:fc:8f:c7:32:56:94:87:66:ff:0f:85:75:
                    53:b5:c1:9a:fb:d6:22:fe:dd:f1:da:25:c4:65:1b:
                    a8:f1:ec:b9:cf:71:11:06:62:d0:08:2a:b4:cc:67:
                    6f:a3:77:77:f5:03:27:c6:00:11:37:71:a2:4a:e1:
                    c7:5a:f3:2a:a4:75:f2:a7:ae:f6:0c:d9:1e:37:bd:
                    e9:a4:62:0a:bc:bf:95:14:38:30:a0:3c:36:a1:e6:
                    4d:ad:46:71:ae:3d:1a:c7:49:cd:6a:b5:e2:84:b9:
                    b9:21:1f:3e:80:42:27:fa:b0:56:e2:83:83:07:ed:
                    49:1d:7e:ff:a0:96:86:ad:ac:9b:12:17:ac:5a:8d:
                    0e:01:af:8d:45:4c:e5:9a:66:9e:4b:1a:d8:0b:88:
                    91:f9:67:a7:33:0b:19:b0:c9:df:f5:7b:74:01:38:
                    6a:83:ba:93:ba:d7:c9:a5:d5:6f:12:19:39:d7:cc:
                    67:70:5c:cf:52:34:e4:ab:fd:24:42:b6:5d:a6:4f:
                    0f:4e:01:c2:d8:fc:33:f2:7d:63:c6:77:52:d0:0d:
                    73:17:8d:3e:2a:2b:56:e7:da:3f:fa:60:47:09:34:
                    5a:5a:c6:94:6e:86:eb:2b:d9:17:a6:83:8f:fc:e8:
                    df:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:3C:D3:EA:F2:A4:6C:15:6A:24:56:E1:16:68:90:48:6C:B9:96:6D
            X509v3 Authority Key Identifier:
                keyid:5A:D1:63:E3:33:4A:2A:F5:15:A7:39:14:0E:D4:3D:85:00:61:2D:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/5AD163E3334A2AF515A739140ED43D8500612D54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5AD163E3334A2AF515A739140ED43D8500612D54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DiJtM32q2SiSHn3hFbM3WWz64vaMAG6TakDUVomiQQV/0/323830343a363137303a3130303a3a2f34302d3430203d3e20323639323334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6170:100::/40

    Signature Algorithm: sha256WithRSAEncryption
         0d:5b:3b:f4:f1:02:62:d3:fd:94:13:3c:7c:98:19:db:05:fe:
         49:a2:47:9e:f7:28:8f:5c:b6:08:92:e0:27:23:93:87:ec:10:
         e1:a4:34:dc:b9:0e:87:de:91:a4:8b:dc:bb:2f:60:4d:00:4c:
         91:bd:f6:a7:ff:39:9b:3e:4b:c6:55:1e:aa:1a:f9:ad:cd:ac:
         bf:58:69:82:0d:dc:f5:ab:82:84:e0:af:93:56:38:bb:ba:a0:
         df:7f:0e:2b:53:5f:87:c0:2a:f6:d1:60:69:d2:4e:00:f1:08:
         37:73:6c:19:0e:90:fe:92:04:ca:df:00:c5:02:79:d1:67:c8:
         b7:71:97:19:d7:39:da:4d:b9:74:14:53:24:54:22:8c:b2:90:
         d7:da:f7:d2:39:f6:bc:16:c4:6b:2c:83:34:0f:c1:dc:43:53:
         12:62:79:0c:54:7d:a3:93:55:92:a3:08:52:a9:17:a5:3b:40:
         39:39:22:2c:25:b2:1d:43:82:3d:76:9c:4a:c8:bd:b7:2c:c1:
         6d:08:0a:ac:f4:2e:2c:36:75:8d:f6:6d:91:35:78:38:a5:5f:
         0e:d0:7f:0f:c6:05:34:5d:ee:ed:9e:d8:10:1f:35:1c:aa:32:
         b7:6c:b2:77:cd:58:8b:1a:05:80:d1:18:6a:77:90:04:52:56:
         e9:60:21:7e
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:01 2024 by rpki-client on console-ams.rpki-client.org