Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/323830343a323135633a383030303a3a2f33332d3333203d3e20323634353530.roa
File:                     323830343a323135633a383030303a3a2f33332d3333203d3e20323634353530.roa (raw, json)
Hash identifier:          gycA3VQlpsbqZTSxU5C6Kn8UcLeln+xqHpZ7U7T5zM4=
Subject key identifier:   18:DB:E5:C1:D4:95:4F:65:A7:D1:04:BA:3F:8A:C4:20:23:CF:52:2E
Certificate issuer:       /CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
Certificate serial:       08216AB7B561E7FBBE76EE3514459466EA422D04
Authority key identifier: 0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/323830343a323135633a383030303a3a2f33332d3333203d3e20323634353530.roa
Signing time:             Wed 10 Apr 2024 00:20:53 +0000
ROA not before:           Wed 10 Apr 2024 00:15:53 +0000
ROA not after:            Wed 09 Apr 2025 00:20:53 +0000
asID:                     264550
IP address blocks:        2804:215c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:21:6a:b7:b5:61:e7:fb:be:76:ee:35:14:45:94:66:ea:42:2d:04
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F1901D49ADD4F9BF8D8BA5724F6030DC139578E
        Validity
            Not Before: Apr 10 00:15:53 2024 GMT
            Not After : Apr  9 00:20:53 2025 GMT
        Subject: CN=18DBE5C1D4954F65A7D104BA3F8AC42023CF522E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a8:c2:59:be:c6:07:1c:b3:00:8c:a2:82:57:14:
                    c4:6a:2b:59:9d:c8:2b:8e:b8:c8:e4:33:98:d5:ce:
                    82:a9:32:7b:ff:7c:dd:be:16:06:6e:46:f4:83:36:
                    22:c3:6c:af:96:6b:ec:f8:8a:cd:d9:7c:6a:7f:97:
                    1f:ae:65:81:be:78:96:20:fe:57:2f:f2:ab:79:01:
                    27:ae:99:2b:bb:29:5e:fa:c8:98:17:49:c1:af:45:
                    ad:1b:ea:e6:9b:85:e2:ca:58:59:26:e9:c1:da:55:
                    a8:76:54:03:fc:2a:06:85:93:9f:00:ae:22:62:5f:
                    61:0b:df:ec:19:81:68:5d:a7:20:49:bb:8d:a6:c6:
                    53:a4:54:77:ab:39:b7:9d:34:e4:4e:57:9b:44:f9:
                    fa:05:57:8f:a4:48:d0:47:69:e8:b0:8e:61:79:96:
                    7d:32:45:f2:ba:c0:72:a2:9f:84:d8:9d:4c:2f:4a:
                    7f:1e:c6:9d:05:e1:43:10:4a:ca:db:b8:a3:55:6e:
                    85:bf:1a:af:bb:8d:ed:a1:39:3d:c7:c8:d0:ca:4c:
                    6f:09:d7:13:17:bd:7e:e8:0b:24:55:22:1c:03:49:
                    eb:ef:f8:70:26:bd:c8:47:83:e1:fa:f4:d1:6a:27:
                    e1:5f:d7:1e:f6:e7:e0:b8:5f:30:c9:cc:99:6e:56:
                    7c:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:DB:E5:C1:D4:95:4F:65:A7:D1:04:BA:3F:8A:C4:20:23:CF:52:2E
            X509v3 Authority Key Identifier:
                keyid:0F:19:01:D4:9A:DD:4F:9B:F8:D8:BA:57:24:F6:03:0D:C1:39:57:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F1901D49ADD4F9BF8D8BA5724F6030DC139578E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VuJwKwnn46nNdS9dEszZ8JzKqGnaN9ZpDPgfsUmSuUP/1/323830343a323135633a383030303a3a2f33332d3333203d3e20323634353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:215c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         83:06:71:31:f4:1d:a2:81:ab:05:c2:b7:aa:63:0c:88:5b:44:
         26:87:c5:29:15:b3:e4:6e:50:1f:e7:cf:ef:97:ee:28:ac:b5:
         02:69:96:3b:c9:1d:b4:6c:49:e0:1f:90:45:86:a1:19:fa:a9:
         e8:c4:4b:80:95:ed:64:fd:5e:8f:3c:07:5d:1c:bc:84:7a:35:
         d6:e0:68:07:d7:7c:10:78:dc:1b:41:44:26:be:ad:3f:82:e7:
         71:10:37:06:7d:c0:f0:83:17:06:a0:bc:de:e4:17:6a:5f:6a:
         65:9c:85:b8:9a:98:c6:ca:3a:99:d5:31:43:8a:fa:ef:a9:2f:
         7b:e0:7e:3e:1a:93:b6:ca:46:6c:ba:1d:fb:91:bb:a6:45:23:
         67:c0:38:6b:db:1d:23:7d:a0:2b:50:4e:ce:64:ce:ab:f1:be:
         62:43:30:61:f7:11:90:78:fa:74:22:b4:23:e6:af:26:b6:33:
         85:9a:af:01:f6:8c:5d:d4:56:83:aa:3c:e2:dd:56:10:94:e0:
         a9:34:f1:5b:26:09:66:4d:bf:b4:8d:1d:bd:9f:c1:d3:05:4b:
         7b:0b:5e:8a:e4:d6:44:ba:bb:e7:a4:c4:ee:f9:02:41:9d:0b:
         df:8b:e5:ce:d4:b0:d1:b6:cb:c5:78:8c:57:b9:52:55:c9:29:
         0e:f8:06:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:03 2024 by rpki-client on console-ams.rpki-client.org