Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a386630303a3a2f34302d3430203d3e20323635323431.roa
File:                     323830343a326363303a386630303a3a2f34302d3430203d3e20323635323431.roa (raw, json)
Hash identifier:          O8Tlj5qH6vtENt3yIHL088449Go7jPyNTkgzWsdl6nc=
Subject key identifier:   58:E2:33:62:2C:68:38:15:A5:30:81:69:1F:23:E7:40:AF:91:E9:03
Certificate issuer:       /CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
Certificate serial:       0E033D10292C065A253F68EA80466125DB4B66CA
Authority key identifier: 15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a386630303a3a2f34302d3430203d3e20323635323431.roa
Signing time:             Thu 04 Apr 2024 23:07:38 +0000
ROA not before:           Thu 04 Apr 2024 23:02:38 +0000
ROA not after:            Thu 03 Apr 2025 23:07:38 +0000
asID:                     265241
IP address blocks:        2804:2cc0:8f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:03:3d:10:29:2c:06:5a:25:3f:68:ea:80:46:61:25:db:4b:66:ca
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Validity
            Not Before: Apr  4 23:02:38 2024 GMT
            Not After : Apr  3 23:07:38 2025 GMT
        Subject: CN=58E233622C683815A53081691F23E740AF91E903
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:24:00:51:b4:da:29:f6:ab:25:51:65:22:91:
                    3c:48:3a:dd:04:50:14:d3:ee:0a:f4:a1:23:be:1f:
                    31:1c:af:7a:ce:52:ed:1a:5c:5a:bd:f4:2a:52:1c:
                    8a:6d:a7:fe:fc:d7:7b:82:31:ef:aa:50:e8:f8:ea:
                    1f:da:d1:18:00:f6:c9:d1:07:6a:28:da:00:51:aa:
                    cf:15:b2:c1:f8:08:8f:f1:0d:c8:1b:22:c8:b7:b7:
                    43:31:6f:d4:bd:ce:d9:e4:cb:13:05:67:b5:3a:61:
                    04:88:55:e5:87:36:76:be:0b:8a:d9:88:3b:93:30:
                    f8:61:3f:f0:90:bf:fa:2c:b2:0e:34:8a:26:2c:78:
                    20:bb:95:31:f8:46:51:1d:f8:02:78:48:e6:8c:f2:
                    19:7f:4c:c7:79:4a:26:d8:a7:10:7d:1a:58:72:ea:
                    a9:86:6e:53:4b:70:e2:bb:12:5b:72:16:3b:34:78:
                    aa:be:d0:c3:d7:50:cc:85:d6:9f:12:88:07:eb:d3:
                    42:11:b4:76:be:b7:b2:2a:ed:63:15:89:d2:f7:4d:
                    b3:ac:a8:96:e1:5c:d8:72:87:b8:14:7a:26:31:ab:
                    50:e8:e7:d2:85:fb:83:25:66:c8:f7:9b:6d:db:1e:
                    3a:5e:ca:8b:1c:87:f0:7a:54:4f:31:e5:e4:2b:74:
                    42:b3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:E2:33:62:2C:68:38:15:A5:30:81:69:1F:23:E7:40:AF:91:E9:03
            X509v3 Authority Key Identifier:
                keyid:15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a386630303a3a2f34302d3430203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0:8f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:3f:f0:cc:10:0d:82:86:b6:3a:5d:9a:d6:fa:52:52:85:6d:
         76:3c:62:6f:94:52:29:a0:9d:92:76:47:79:80:00:50:75:7c:
         0a:20:97:3f:c1:16:0b:6c:d7:66:0c:f5:67:a7:ab:ba:b6:13:
         ab:a8:8b:59:76:29:86:14:53:7b:b6:e2:eb:cd:ce:2a:28:ce:
         bc:48:ef:74:07:fa:25:7d:02:41:75:c0:2e:e8:22:67:34:d9:
         a9:7a:ed:e7:1b:90:b3:88:f7:49:b7:9f:9a:a4:98:36:b3:33:
         10:4f:d5:fe:e5:e9:42:eb:46:5f:15:60:0a:19:f9:9b:fb:47:
         ef:77:b2:4f:3f:78:a2:0b:49:05:29:73:92:f2:05:10:ad:a1:
         2d:36:7a:50:6c:a6:3a:a5:c9:dc:e4:5e:1f:79:61:c3:97:dc:
         4e:88:f0:cc:26:58:13:54:6a:27:10:ba:37:21:5a:6f:b2:21:
         5d:e4:c7:41:04:16:66:ae:31:b3:29:10:54:5e:fd:83:05:5f:
         77:34:c2:04:96:bc:83:83:9d:cf:4b:d5:89:42:12:24:27:fc:
         e8:07:dc:2f:65:a9:63:83:2a:b5:6d:b3:24:bd:74:fd:18:17:
         49:15:0a:b0:24:f3:d9:12:d2:e0:f5:99:d2:86:76:47:d0:4e:
         a0:41:eb:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org