Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/323830343a6230303a3a2f33322d3332203d3e203532393333.roa
File:                     323830343a6230303a3a2f33322d3332203d3e203532393333.roa (raw, json)
Hash identifier:          avH4pJDKZcEejy3vv/i5TNuS2kgBRNcQ/FBrUhOouQk=
Subject key identifier:   01:5D:0A:6A:E7:92:3E:C9:B2:F2:C3:AE:00:DE:28:8D:1A:72:23:8D
Certificate issuer:       /CN=C1E6279FDA95FF63A9A4FAB2434C3945074DA982
Certificate serial:       75A8C634A5D175442CE458D3D74B2396E43B3317
Authority key identifier: C1:E6:27:9F:DA:95:FF:63:A9:A4:FA:B2:43:4C:39:45:07:4D:A9:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1E6279FDA95FF63A9A4FAB2434C3945074DA982.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/323830343a6230303a3a2f33322d3332203d3e203532393333.roa
Signing time:             Tue 22 Mar 2022 12:12:28 +0000
ROA not before:           Tue 22 Mar 2022 12:07:28 +0000
ROA not after:            Tue 21 Mar 2023 12:12:28 +0000
asID:                     52933
IP address blocks:        2804:b00::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a8:c6:34:a5:d1:75:44:2c:e4:58:d3:d7:4b:23:96:e4:3b:33:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1E6279FDA95FF63A9A4FAB2434C3945074DA982
        Validity
            Not Before: Mar 22 12:07:28 2022 GMT
            Not After : Mar 21 12:12:28 2023 GMT
        Subject: CN=015D0A6AE7923EC9B2F2C3AE00DE288D1A72238D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:7f:c1:8c:1f:ac:a7:a0:1e:0e:cc:03:d2:1b:
                    a8:68:9d:3f:9d:88:fb:dd:d2:5b:62:f7:df:ad:2c:
                    57:f7:ca:92:95:85:53:28:88:0d:d7:99:d0:4b:25:
                    0d:99:f7:dc:ca:7b:a4:76:37:27:f9:0a:77:10:07:
                    d7:f8:f8:a4:3d:73:5c:0a:e5:ee:a0:1f:06:3c:97:
                    7e:33:92:26:91:23:0a:2e:c4:aa:b5:96:17:71:50:
                    91:a0:9a:cf:35:fb:ff:f0:e6:ce:d1:42:c2:3c:dc:
                    1c:91:63:7b:47:93:5b:5b:08:7c:66:b7:29:a5:a6:
                    44:2d:16:89:90:1d:ec:2b:80:41:e5:0f:dd:c9:4f:
                    16:1b:0d:48:c6:f9:ff:a4:50:41:9c:0e:14:84:ff:
                    2d:17:bc:f1:b5:a1:b2:47:3e:0c:4f:74:72:e4:75:
                    56:81:12:bc:7e:bd:c0:82:85:37:4f:38:d7:a7:57:
                    d8:a8:7f:0e:72:3b:a6:af:8b:3d:9a:9a:11:fd:b0:
                    0b:1a:1c:48:ec:10:9c:2a:70:32:70:6b:1f:7f:a1:
                    43:dc:30:19:64:33:13:bd:f9:d2:1a:04:47:be:e9:
                    94:b9:86:fd:a2:6a:dd:0e:0f:8c:29:02:ff:ff:b4:
                    6c:b3:c3:a3:c7:be:5b:d8:f2:3a:a7:6c:ed:41:7d:
                    4c:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                01:5D:0A:6A:E7:92:3E:C9:B2:F2:C3:AE:00:DE:28:8D:1A:72:23:8D
            X509v3 Authority Key Identifier:
                keyid:C1:E6:27:9F:DA:95:FF:63:A9:A4:FA:B2:43:4C:39:45:07:4D:A9:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/C1E6279FDA95FF63A9A4FAB2434C3945074DA982.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1E6279FDA95FF63A9A4FAB2434C3945074DA982.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2FXcq8X6vWXwxoNpdZsJSwN98BXC5rCwdyYhcmFqUarB/0/323830343a6230303a3a2f33322d3332203d3e203532393333.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:b00::/32

    Signature Algorithm: sha256WithRSAEncryption
         9e:43:8d:86:40:85:8e:78:c4:6b:c4:c0:d4:c8:82:fd:34:b3:
         0d:7b:1b:17:60:5b:88:8c:72:63:50:49:cd:8e:92:e5:c1:9e:
         96:8d:cd:7c:eb:6b:ef:8f:a3:80:fa:84:05:32:29:38:c7:ae:
         6c:1d:12:95:da:2d:ba:f9:bc:cf:2a:0f:e8:91:e8:4b:ba:25:
         26:53:0a:19:ba:3f:b5:df:82:94:f4:2a:cc:9a:be:34:65:dd:
         c1:45:56:00:3a:ad:18:1e:07:9e:7e:84:9f:07:9c:5a:fb:88:
         26:2d:81:e4:0a:d2:46:4e:3a:9a:95:d4:a6:79:8e:c8:bc:51:
         0d:56:13:66:65:cc:42:45:57:71:35:54:ff:7b:16:1d:ee:d4:
         cb:99:10:33:13:96:74:af:61:9a:7f:48:b5:ed:91:38:12:f6:
         0c:0d:fe:21:e4:f7:db:e2:56:c2:d5:72:c1:e6:96:1e:89:0d:
         d5:aa:b0:d5:32:79:0c:8c:95:12:4f:86:22:17:59:f3:c6:c0:
         fd:10:37:a2:34:26:04:8d:45:d1:19:f8:2a:bd:f6:68:b3:82:
         1c:6d:1e:f8:a6:b7:a2:32:da:77:dc:90:28:01:75:64:ee:93:
         ac:f8:c2:30:da:ec:72:48:f0:4e:a5:49:b7:87:5a:e7:d6:07:
         3b:57:97:a5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org