Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/323830343a333339383a3a2f33322d3333203d3e20323635343036.roa
File:                     323830343a333339383a3a2f33322d3333203d3e20323635343036.roa (raw, json)
Hash identifier:          NWSKtV5BmZOZtwcJFZCKNjbOIPym0uADUaUanpXJrGA=
Subject key identifier:   4B:9B:0E:DE:06:DA:34:11:5C:B3:02:8A:25:77:48:A4:6D:3A:E3:BC
Certificate issuer:       /CN=EAE3593D1E0FF8016D337EF414D4D4975F841566
Certificate serial:       60AC11130F64ED5785C8E415B5CD97A1D1770B42
Authority key identifier: EA:E3:59:3D:1E:0F:F8:01:6D:33:7E:F4:14:D4:D4:97:5F:84:15:66
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAE3593D1E0FF8016D337EF414D4D4975F841566.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/323830343a333339383a3a2f33322d3333203d3e20323635343036.roa
Signing time:             Fri 06 May 2022 13:29:51 +0000
ROA not before:           Fri 06 May 2022 13:24:51 +0000
ROA not after:            Fri 05 May 2023 13:29:51 +0000
asID:                     265406
IP address blocks:        2804:3398::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            60:ac:11:13:0f:64:ed:57:85:c8:e4:15:b5:cd:97:a1:d1:77:0b:42
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE3593D1E0FF8016D337EF414D4D4975F841566
        Validity
            Not Before: May  6 13:24:51 2022 GMT
            Not After : May  5 13:29:51 2023 GMT
        Subject: CN=4B9B0EDE06DA34115CB3028A257748A46D3AE3BC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:d5:39:3b:21:a9:fb:e0:5f:9b:fe:ce:a8:88:
                    22:cc:f4:dd:bc:e0:89:3b:b6:66:df:7e:b1:a9:52:
                    9e:e6:fd:ae:53:fe:7f:64:b6:68:0f:20:05:a7:d3:
                    28:6b:d6:df:08:8f:a8:98:7a:39:a2:4e:c2:4e:42:
                    7d:ab:80:62:de:db:2f:b2:ce:7a:20:a3:84:4a:14:
                    d8:f6:60:28:3b:eb:92:98:17:30:a7:72:a3:e9:c8:
                    4a:83:3b:51:59:32:53:99:ee:e1:3f:e4:19:05:80:
                    b8:61:c2:8d:3b:8f:b4:5a:14:02:6e:6d:d5:60:74:
                    46:eb:d6:66:fc:ab:71:07:5d:5a:17:e5:03:23:91:
                    cb:8e:d6:25:4b:a2:e6:4d:5b:59:92:27:d7:0f:e9:
                    51:81:0b:6e:74:33:02:c8:d5:c1:af:01:f2:63:38:
                    41:7d:46:70:31:f8:35:1a:58:00:18:75:33:33:52:
                    86:24:5d:7c:b3:bf:3c:b4:6a:b1:ce:81:8e:cb:d1:
                    e2:7f:ae:7f:e7:66:87:f8:9b:25:e5:24:af:97:bb:
                    97:e8:ff:33:6d:a1:3e:65:61:4c:ed:6b:8b:96:c6:
                    d4:24:49:a5:46:ae:7c:c3:32:76:5b:cb:35:00:95:
                    d9:e4:0d:f9:f5:bb:ce:18:d4:44:af:48:17:10:c4:
                    0b:61
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4B:9B:0E:DE:06:DA:34:11:5C:B3:02:8A:25:77:48:A4:6D:3A:E3:BC
            X509v3 Authority Key Identifier:
                keyid:EA:E3:59:3D:1E:0F:F8:01:6D:33:7E:F4:14:D4:D4:97:5F:84:15:66

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/EAE3593D1E0FF8016D337EF414D4D4975F841566.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAE3593D1E0FF8016D337EF414D4D4975F841566.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2S9SRMX4MgQtGXsheJWNrvZ2JWFvK4LJqQVBWrGc2N7T/0/323830343a333339383a3a2f33322d3333203d3e20323635343036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3398::/32

    Signature Algorithm: sha256WithRSAEncryption
         b3:48:e5:7f:a0:1f:25:b7:5c:bd:1f:9f:93:2d:99:03:d6:92:
         2d:02:3e:f5:16:eb:d9:ad:dc:26:d5:fb:1e:d9:70:6b:dd:fd:
         20:63:5f:c1:c9:b6:c8:0a:aa:8b:4b:31:02:6e:a4:21:da:fb:
         fb:ae:43:88:82:42:8b:96:f1:e3:60:0c:47:f7:f8:fb:65:3d:
         bf:5b:f0:99:b6:51:e7:35:54:82:18:20:5d:c8:27:5b:c2:3c:
         03:77:33:ad:75:6c:a4:a4:94:6d:cb:63:06:16:fc:31:b8:b2:
         e1:91:ab:d7:5a:0a:bc:d8:ff:72:6a:ab:71:25:69:59:dd:ed:
         28:22:9e:e1:56:83:18:d1:2a:44:9d:47:58:96:f8:f1:e6:0d:
         e6:a1:6a:48:a1:d3:d0:7f:4a:48:bc:38:a9:c2:d5:89:d1:3e:
         14:97:42:3d:f3:e7:86:7b:ca:a1:d9:c6:bd:86:0b:0b:63:04:
         a2:06:a9:66:f9:ab:95:2c:22:73:bc:a1:7b:fe:90:b6:c4:e4:
         b2:f3:e9:b6:b5:0b:40:a1:4e:2a:13:45:11:25:d7:2e:d1:16:
         b3:cc:7c:96:da:11:9b:7a:87:31:14:79:2a:f8:e9:46:bc:1c:
         ea:71:92:8f:75:db:40:04:d1:cc:70:5a:34:63:5f:88:f3:fa:
         cb:a6:c6:a8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org