Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/323830343a6437383a666530303a3a2f34302d3430203d3e20323632343434.roa
File:                     323830343a6437383a666530303a3a2f34302d3430203d3e20323632343434.roa (raw, json)
Hash identifier:          e+zPsi9QWSRwgWBL/l2mgvU0UmxGI+wqKccDvGZQz/c=
Subject key identifier:   91:8A:29:3A:AB:6A:5A:86:86:F9:86:3B:66:8F:D1:3E:D3:31:2A:7A
Certificate issuer:       /CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
Certificate serial:       75A6506BAE4A0EDA0A7FBCBB5445304CC2D42C32
Authority key identifier: E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/323830343a6437383a666530303a3a2f34302d3430203d3e20323632343434.roa
Signing time:             Thu 27 Jul 2023 20:09:02 +0000
ROA not before:           Thu 27 Jul 2023 20:04:02 +0000
ROA not after:            Thu 25 Jul 2024 20:09:02 +0000
asID:                     262444
IP address blocks:        2804:d78:fe00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:a6:50:6b:ae:4a:0e:da:0a:7f:bc:bb:54:45:30:4c:c2:d4:2c:32
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0D85A9C648A40468805ABBB3D60570F2E58262F
        Validity
            Not Before: Jul 27 20:04:02 2023 GMT
            Not After : Jul 25 20:09:02 2024 GMT
        Subject: CN=918A293AAB6A5A8686F9863B668FD13ED3312A7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:7e:b2:f2:13:f8:84:f1:0e:0c:33:6a:73:22:
                    07:04:ae:cf:42:09:01:1f:0d:b5:62:44:06:43:d9:
                    dc:e4:72:c5:01:2c:6d:f3:a5:db:72:d8:80:27:2b:
                    df:0e:5a:5c:d4:38:1c:ca:30:66:c0:6f:98:44:16:
                    dc:a7:74:82:b4:69:3e:f2:0f:b3:a9:57:25:be:9b:
                    76:c3:24:fe:89:dc:40:0c:35:d4:4a:01:fe:8a:95:
                    1e:63:e6:bc:4f:f5:b6:cf:b0:d8:3a:48:dc:b0:52:
                    92:6b:20:5e:7d:6c:af:b2:7f:d4:24:c0:ab:6f:6b:
                    06:25:a2:fd:dd:51:56:68:fe:0c:cb:99:d9:dc:7e:
                    3d:8b:84:53:7c:b2:11:78:4c:ac:0b:45:49:a4:72:
                    7e:e5:26:13:0a:65:35:32:57:1c:d9:24:09:47:98:
                    02:a4:5b:7d:75:24:9d:a4:d7:fa:be:fb:de:92:37:
                    2d:1d:32:01:1f:85:ce:8d:fe:15:07:9b:75:d3:18:
                    af:80:b2:a1:42:f7:42:56:4d:8a:c4:96:9d:d4:52:
                    e5:50:65:0c:58:e6:e0:7e:6f:59:bb:3b:5d:d9:10:
                    c8:26:1b:a6:f4:80:5c:66:87:0c:f0:26:06:87:7f:
                    db:2c:95:c7:4e:e3:49:b5:ad:bd:e5:1d:b5:e6:a6:
                    e0:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:8A:29:3A:AB:6A:5A:86:86:F9:86:3B:66:8F:D1:3E:D3:31:2A:7A
            X509v3 Authority Key Identifier:
                keyid:E0:D8:5A:9C:64:8A:40:46:88:05:AB:BB:3D:60:57:0F:2E:58:26:2F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0D85A9C648A40468805ABBB3D60570F2E58262F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2QedZtHS9yqN63o1rsTALnXaBamNvt9mLAgeBagN5Pn4/0/323830343a6437383a666530303a3a2f34302d3430203d3e20323632343434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d78:fe00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0a:4b:e3:fc:64:75:06:12:25:6d:aa:90:34:46:5b:cf:44:bd:
         f5:b6:e8:94:cb:24:d3:40:c6:b2:6b:e7:f2:fa:a0:34:b2:67:
         ac:38:6f:19:04:a5:83:82:f7:ac:c5:bd:5e:e7:d3:2b:15:e0:
         01:9a:b2:5d:95:f4:98:76:06:cc:8d:0b:95:68:77:4b:e6:ad:
         a6:df:95:b1:6d:b6:89:ad:58:08:54:4d:33:20:65:32:e3:0a:
         84:68:5a:63:31:6e:c8:a5:9b:1f:27:26:9c:05:7e:23:1a:d0:
         ae:7b:63:c9:f5:5c:c0:e2:5f:b0:3f:9a:c7:1d:13:43:50:26:
         8c:6e:3d:95:61:c5:26:a6:98:13:4b:a3:0a:6f:50:3a:9b:62:
         7c:cf:c6:5a:b6:92:8b:03:6d:c1:f3:1f:8c:94:cb:81:d6:2e:
         d8:08:99:9d:d1:5c:01:c4:8e:4b:ab:46:56:97:ba:aa:21:c3:
         4d:ba:05:af:b4:e9:94:f1:6b:97:f3:d9:6a:3a:b8:a4:24:f2:
         da:06:67:b3:5f:e1:d5:c0:e2:13:16:34:e6:dd:69:14:a4:c2:
         cc:0c:4f:b5:4e:32:f8:84:78:92:ce:3e:67:9e:ea:90:b5:ea:
         93:37:6b:1e:11:62:ff:07:aa:b1:79:11:d3:d0:7f:fb:11:9f:
         c9:e9:5a:9c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org