Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a3a2f33342d3334203d3e20323638353935.roa
File:                     323830343a353339633a3a2f33342d3334203d3e20323638353935.roa (raw, json)
Hash identifier:          RJCaBWZt2PtOt50BeWaakwJ9RXFA/MFB3HCCYp59ygU=
Subject key identifier:   EF:FA:1E:4E:07:CD:84:34:B4:F1:E6:20:06:9E:C2:A6:81:E4:A9:1E
Certificate issuer:       /CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
Certificate serial:       681104C09A932241083CDB83D0B48B13587CBB61
Authority key identifier: D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a3a2f33342d3334203d3e20323638353935.roa
Signing time:             Mon 22 Aug 2022 21:36:25 +0000
ROA not before:           Mon 22 Aug 2022 21:31:25 +0000
ROA not after:            Mon 21 Aug 2023 21:36:25 +0000
asID:                     268595
IP address blocks:        2804:539c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:11:04:c0:9a:93:22:41:08:3c:db:83:d0:b4:8b:13:58:7c:bb:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
        Validity
            Not Before: Aug 22 21:31:25 2022 GMT
            Not After : Aug 21 21:36:25 2023 GMT
        Subject: CN=EFFA1E4E07CD8434B4F1E620069EC2A681E4A91E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:75:d6:45:8c:fe:df:59:13:64:ee:43:04:62:
                    be:66:6d:22:7f:b7:84:1b:43:29:10:d0:69:29:b9:
                    9d:18:ec:98:a2:fb:2c:07:ed:d8:d4:30:41:75:6f:
                    b8:37:83:f4:b7:bc:04:1a:e0:a7:ef:e4:7c:8d:ec:
                    38:cb:56:fc:af:ad:58:fc:14:fc:d0:e2:25:16:4c:
                    e3:6a:22:54:b9:ce:99:eb:7b:3e:85:fb:a1:aa:90:
                    4f:ea:9f:a2:f9:a1:c2:3d:25:76:61:f8:07:df:79:
                    c9:68:66:63:d2:30:24:14:0b:2f:65:d7:fc:08:35:
                    ed:00:31:43:0b:31:73:8e:a4:da:cd:71:f7:a6:13:
                    49:08:ce:8b:06:b6:50:6c:1d:1a:c5:ec:ab:75:79:
                    d3:4e:66:98:60:d3:ee:46:6b:e7:a1:36:b5:37:4b:
                    b0:aa:eb:5c:ef:e1:2c:b1:ab:69:de:40:d8:e2:3b:
                    0c:f3:78:54:59:b9:0a:22:d8:e6:77:6d:a3:fc:5d:
                    4b:0f:21:96:49:3b:62:38:e8:ec:ad:8d:5d:8d:d6:
                    7e:13:bf:86:ef:2e:4e:4e:0a:32:52:3c:35:9b:4d:
                    ef:4a:59:fe:bb:67:af:f9:3a:b7:f5:6d:b0:07:05:
                    60:7a:0f:4c:a7:23:5a:0f:5b:ff:c6:d1:a1:3a:02:
                    8b:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EF:FA:1E:4E:07:CD:84:34:B4:F1:E6:20:06:9E:C2:A6:81:E4:A9:1E
            X509v3 Authority Key Identifier:
                keyid:D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a3a2f33342d3334203d3e20323638353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:539c::/34

    Signature Algorithm: sha256WithRSAEncryption
         53:0e:0d:c0:ba:f5:d5:f4:c6:18:c4:98:65:d1:d3:2e:02:34:
         3e:88:7e:ae:06:61:91:0e:57:c3:d5:4b:3a:2f:83:da:31:c3:
         1a:98:ab:88:df:a2:76:d4:cc:f3:95:c2:54:3d:ff:f9:fe:1c:
         a2:c0:62:24:61:99:6a:f1:ad:88:b1:15:a4:bf:84:52:0e:6f:
         31:9e:a1:f2:86:2c:17:1b:39:37:a9:78:80:9a:9c:bd:b0:df:
         5e:9e:2f:af:10:40:84:dd:e0:f4:3e:7a:9d:7b:e7:78:6b:84:
         90:7f:94:96:ba:58:bd:f5:7c:2c:57:b1:c1:63:8f:e1:a6:ec:
         ef:c6:e9:65:ad:f3:8b:4c:b7:20:17:42:a9:3b:eb:2b:82:c7:
         15:80:58:47:75:92:b2:22:fe:7d:0a:10:b9:cf:1e:25:a7:c9:
         f3:c0:c3:10:12:73:95:6d:61:19:a0:a0:43:75:eb:0c:8e:36:
         70:ee:9f:32:a7:4f:0a:56:a6:e6:47:5a:45:b3:1a:20:af:4c:
         87:90:8f:7f:d4:ee:bb:58:68:a9:04:14:2e:d6:73:df:b5:af:
         b3:b5:55:6b:f1:d7:c2:9a:18:16:2d:76:6d:84:0e:df:7e:28:
         c6:c4:8b:86:9c:08:59:21:a5:cb:ba:a0:15:95:3b:1d:cc:e2:
         d8:4e:e5:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org