Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a386130303a3a2f34302d3430203d3e20323635323431.roa
File:                     323830343a326363303a386130303a3a2f34302d3430203d3e20323635323431.roa (raw, json)
Hash identifier:          VZmXOBb0Z65hXe8Geejq1xBJJFmWk4QxOK5ODZQjDAE=
Subject key identifier:   1A:56:B0:04:13:A0:34:D8:13:E0:C9:4B:A1:52:A9:44:5A:B4:3F:3F
Certificate issuer:       /CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
Certificate serial:       0CF3D8D209C9CDF53EEB98646AA38731A57EC6BE
Authority key identifier: 15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a386130303a3a2f34302d3430203d3e20323635323431.roa
Signing time:             Thu 04 Apr 2024 23:07:40 +0000
ROA not before:           Thu 04 Apr 2024 23:02:40 +0000
ROA not after:            Thu 03 Apr 2025 23:07:40 +0000
asID:                     265241
IP address blocks:        2804:2cc0:8a00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:f3:d8:d2:09:c9:cd:f5:3e:eb:98:64:6a:a3:87:31:a5:7e:c6:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Validity
            Not Before: Apr  4 23:02:40 2024 GMT
            Not After : Apr  3 23:07:40 2025 GMT
        Subject: CN=1A56B00413A034D813E0C94BA152A9445AB43F3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:1f:a0:16:ad:15:f8:54:bd:62:b6:19:45:08:
                    52:a8:9a:b3:c4:4d:d0:2c:e2:fd:37:a2:a0:ec:09:
                    e8:57:5a:3f:b4:37:05:8d:11:e6:4d:61:32:e8:e9:
                    2d:dc:14:3c:3a:2f:0d:52:cc:23:96:58:4f:e0:0c:
                    9f:3b:9c:ea:d4:36:1c:12:6f:5c:46:89:db:d6:2e:
                    31:dc:a3:eb:1a:39:48:de:80:93:6c:64:0c:b5:c4:
                    6c:78:78:98:82:a3:1e:a2:b3:74:7f:b4:75:1a:9c:
                    92:26:00:fd:c9:03:96:19:53:59:db:66:8c:c4:7c:
                    1b:21:bc:22:53:af:6e:4e:3f:6d:88:31:8e:d6:3b:
                    5b:59:f4:38:31:40:f2:96:3e:82:c8:42:a0:55:52:
                    1d:8a:eb:7f:f9:cb:d8:e9:ab:3e:b8:f6:f6:41:35:
                    63:60:ae:ab:f4:07:56:13:b2:ad:8e:a7:46:ab:0e:
                    4a:5c:91:5e:59:22:91:59:51:e7:ee:af:f5:e1:19:
                    70:4a:eb:47:53:a5:98:a0:7d:c0:77:ec:a5:31:b8:
                    7b:16:14:e0:70:63:7c:0f:e1:1a:22:07:84:84:5c:
                    bf:53:55:22:d3:33:53:44:f4:0f:08:22:d6:f0:bc:
                    11:7c:c6:75:f8:4f:b4:51:bf:3b:e8:d3:ee:c0:f5:
                    2a:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:56:B0:04:13:A0:34:D8:13:E0:C9:4B:A1:52:A9:44:5A:B4:3F:3F
            X509v3 Authority Key Identifier:
                keyid:15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a386130303a3a2f34302d3430203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0:8a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         13:79:81:dc:a4:b4:de:fa:2e:f8:40:a2:0f:15:11:ee:16:77:
         ed:97:98:3d:02:59:f8:f4:b3:4c:79:92:38:01:9f:12:0a:3c:
         59:33:94:96:37:90:83:09:b1:c8:f6:cb:56:e3:3d:ad:83:eb:
         51:04:68:19:8e:31:22:dd:e0:60:23:e9:b4:d2:34:b8:e6:86:
         15:37:1e:30:e3:0b:58:49:24:58:e0:9a:d5:ee:bc:00:45:ea:
         13:c2:f1:1d:93:39:0e:ef:50:fe:ae:3b:8f:5e:5e:bb:c6:31:
         24:cb:ae:ef:f9:c4:62:2c:84:9c:69:73:59:74:34:82:00:ba:
         3a:86:de:d4:09:5c:b1:90:f8:db:ab:c4:73:9b:96:f4:e7:13:
         5e:e8:f6:28:c5:6b:87:5b:05:d9:fe:74:cc:a0:0a:75:34:5f:
         fe:52:94:f4:e6:60:c3:6a:0b:70:9b:81:24:7f:83:93:93:20:
         02:b5:66:d7:5b:c7:03:43:7e:04:71:07:75:3d:a8:b9:38:4e:
         95:f4:1f:cd:9e:f3:44:12:66:c0:2e:38:78:f9:64:1c:05:b7:
         8a:33:f5:4a:b7:1a:e6:2d:27:c1:86:65:48:cf:9d:4e:8b:af:
         fa:7f:66:c6:30:d3:dd:3e:a9:cd:75:e3:4e:f0:8d:d3:27:97:
         40:b4:94:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org