Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a633030303a3a2f33342d3334203d3e20323638353935.roa
File:                     323830343a353339633a633030303a3a2f33342d3334203d3e20323638353935.roa (raw, json)
Hash identifier:          Q1UQBDTzt0IcodsnVR2bLmxeTXoZC56921Yi1wPDOZ8=
Subject key identifier:   A9:11:B7:6A:47:6C:16:BF:0B:31:DE:C5:97:97:39:09:EA:79:E2:51
Certificate issuer:       /CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
Certificate serial:       6BEA45BCF4B71BCB8A5CF2A41D3BA5DD544CCB88
Authority key identifier: D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a633030303a3a2f33342d3334203d3e20323638353935.roa
Signing time:             Mon 22 Aug 2022 21:37:05 +0000
ROA not before:           Mon 22 Aug 2022 21:32:05 +0000
ROA not after:            Mon 21 Aug 2023 21:37:05 +0000
asID:                     268595
IP address blocks:        2804:539c:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:ea:45:bc:f4:b7:1b:cb:8a:5c:f2:a4:1d:3b:a5:dd:54:4c:cb:88
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D9A03D6076706BEDDD5FF21F685521DF78B0E2AA
        Validity
            Not Before: Aug 22 21:32:05 2022 GMT
            Not After : Aug 21 21:37:05 2023 GMT
        Subject: CN=A911B76A476C16BF0B31DEC597973909EA79E251
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:c3:87:99:6d:62:5e:f2:d9:16:4c:d4:1a:d5:
                    2f:2b:84:53:54:1c:ba:6d:b4:5e:bc:2d:84:83:a1:
                    50:81:10:c8:dd:ce:c7:b4:e0:25:8f:f8:4e:2f:a9:
                    44:3c:97:da:71:e5:3d:f3:6e:b7:c9:59:c7:ad:fc:
                    91:46:45:15:03:fb:75:4a:18:d7:86:77:d8:c8:97:
                    ec:9a:b4:c8:3a:de:05:b4:4e:7c:d4:11:c6:f4:62:
                    a9:47:e0:18:9d:e4:5f:15:9f:61:84:0e:30:29:72:
                    02:9a:78:38:e3:c5:0f:b7:fe:5b:ed:49:91:21:29:
                    34:67:17:66:76:69:1d:ae:08:93:9a:2b:45:f2:23:
                    6c:e2:bd:26:ba:93:b5:1a:70:a6:e6:59:a9:5a:6a:
                    65:e7:d5:71:c3:45:65:72:d1:fc:6d:cd:6a:e2:8d:
                    f1:ed:84:c7:12:e7:58:4b:bc:d2:3d:53:89:56:71:
                    b5:44:c2:e5:6f:9c:a3:a8:fd:25:e1:d6:13:d8:98:
                    d9:96:50:c2:8f:7a:39:48:fc:a4:05:a4:2e:6a:ea:
                    73:42:e7:46:92:9a:02:54:e7:72:22:d0:d3:64:28:
                    94:da:ec:51:20:85:87:2a:18:13:75:b4:c8:43:d8:
                    3d:06:46:6e:e1:33:cc:bf:a6:97:24:fb:dc:19:5e:
                    d7:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:11:B7:6A:47:6C:16:BF:0B:31:DE:C5:97:97:39:09:EA:79:E2:51
            X509v3 Authority Key Identifier:
                keyid:D9:A0:3D:60:76:70:6B:ED:DD:5F:F2:1F:68:55:21:DF:78:B0:E2:AA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D9A03D6076706BEDDD5FF21F685521DF78B0E2AA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Pcydht1MJUisQAyWddFi5hBUtBKhGdXGK9rDNYtuFM4/0/323830343a353339633a633030303a3a2f33342d3334203d3e20323638353935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:539c:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         82:3f:40:3f:33:10:64:5b:b1:78:fe:f5:7b:69:72:22:b6:77:
         f9:93:15:e1:46:9f:eb:a6:98:31:0c:2e:85:3e:27:1e:8f:84:
         dc:0f:d6:41:fe:05:8b:dc:76:6d:94:c4:07:7c:66:93:67:87:
         7e:81:73:05:d9:8e:46:00:6d:4e:e1:46:27:f7:ae:f6:65:79:
         a0:88:4f:d2:eb:98:86:a8:0b:bb:e4:6f:87:24:35:33:87:a1:
         da:2c:38:03:bb:dc:66:6e:24:2d:e6:97:be:62:97:63:3b:d6:
         b1:d8:54:b9:3e:c0:16:24:03:df:ba:4b:c0:b3:e6:47:c5:7c:
         b0:75:77:ea:92:f5:77:4e:1c:51:80:4c:7e:31:bc:64:41:4a:
         f1:4c:f1:af:e5:e0:53:75:4a:58:61:a8:0f:df:a7:8d:8f:20:
         f2:a5:d5:3e:dc:47:b0:30:02:8b:54:64:df:0f:42:00:68:d5:
         31:b2:bf:a9:9d:9b:a0:21:65:56:52:89:14:70:dd:2b:bd:ca:
         1e:72:b7:c9:54:08:6f:d4:6d:c2:0f:5c:6d:0a:bb:97:d9:a9:
         8c:be:81:ae:fe:71:53:9d:e4:e9:0d:68:0b:44:7e:f6:2d:d4:
         ef:1d:a6:76:bf:a1:f5:b2:04:c3:ce:01:f5:1e:71:02:df:4a:
         8a:0a:28:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org