Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa
File:                     323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa (raw, json)
Hash identifier:          KneuCpI3EXoJ2Xva4RZlwgdUiROvyjP1UKdjsJi+wI4=
Subject key identifier:   FE:C8:4F:DF:A4:00:15:FA:63:47:BF:64:F3:55:08:96:00:4F:D0:27
Certificate issuer:       /CN=6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98
Certificate serial:       66525357968986BBD04C8A89D6876F443A4E89EC
Authority key identifier: 62:65:00:9F:93:CC:6C:26:C0:0F:D1:D6:FE:FE:B8:01:0A:0B:DF:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa
Signing time:             Sat 18 Nov 2023 04:19:11 +0000
ROA not before:           Sat 18 Nov 2023 04:14:11 +0000
ROA not after:            Sat 16 Nov 2024 04:19:11 +0000
asID:                     262978
IP address blocks:        2804:4d44:10::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:52:53:57:96:89:86:bb:d0:4c:8a:89:d6:87:6f:44:3a:4e:89:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98
        Validity
            Not Before: Nov 18 04:14:11 2023 GMT
            Not After : Nov 16 04:19:11 2024 GMT
        Subject: CN=FEC84FDFA40015FA6347BF64F3550896004FD027
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:58:53:25:d1:a8:d3:32:27:6e:29:99:1c:55:
                    30:d3:81:ca:32:55:09:8f:b9:c8:19:d3:e7:ec:7a:
                    06:23:08:c5:c7:52:ec:de:8e:be:9c:41:b1:40:d6:
                    fc:49:37:a1:03:f2:61:e5:dc:23:55:f8:e2:30:5f:
                    53:3a:51:5b:81:a1:40:77:6c:c7:05:e9:e9:c6:50:
                    11:4d:d6:36:32:81:4a:91:3c:72:e2:4a:77:aa:e4:
                    86:e2:27:e5:13:49:71:43:8b:fb:5d:85:b7:73:54:
                    eb:90:d1:86:4c:3b:a9:53:f5:dd:09:67:8f:f1:7a:
                    dd:e3:27:a2:17:c9:69:c3:4d:a9:60:ee:10:1b:38:
                    4a:fc:a5:3f:75:2a:3f:92:ac:cc:b3:ff:6e:6f:92:
                    86:38:c2:f3:6a:56:d8:e3:c5:59:e1:ad:06:b3:61:
                    62:31:b7:50:34:6d:56:1d:5b:10:03:9b:7a:50:0d:
                    63:e8:3a:fb:39:1f:1d:05:8c:1f:0d:3d:37:cb:f8:
                    19:f6:84:0c:04:6b:93:a0:e4:1a:a9:2d:3a:e7:f8:
                    5f:09:a3:ac:f3:4e:96:30:77:a1:af:2c:31:bf:74:
                    fc:41:f7:ad:ef:3c:2a:b1:f9:26:be:f7:02:ec:fb:
                    9a:fb:3c:02:eb:39:ee:a3:0d:7c:df:3a:64:42:a2:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:C8:4F:DF:A4:00:15:FA:63:47:BF:64:F3:55:08:96:00:4F:D0:27
            X509v3 Authority Key Identifier:
                keyid:62:65:00:9F:93:CC:6C:26:C0:0F:D1:D6:FE:FE:B8:01:0A:0B:DF:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6265009F93CC6C26C00FD1D6FEFEB8010A0BDF98.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2Z1JeNccon7dqSqVQRvJFozG7mDBUe3DoRMFY1M3QxZW/0/323830343a346434343a31303a3a2f34382d3438203d3e20323632393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d44:10::/48

    Signature Algorithm: sha256WithRSAEncryption
         6f:0e:c8:22:b3:31:14:b9:08:ba:64:4c:9f:4c:32:5a:32:4d:
         de:e2:a8:44:c6:bb:e6:4b:61:92:6c:09:72:cd:32:41:f2:5f:
         63:f1:8a:26:dc:8e:93:eb:a3:02:15:cb:09:9f:d3:81:39:d6:
         30:53:91:53:f2:db:f2:35:d2:82:82:b4:c1:8e:85:42:fc:50:
         31:b8:fa:70:e0:0a:13:1f:f7:1c:b3:ab:cb:2f:d2:dc:d7:75:
         c7:73:7e:74:61:d0:b7:fa:97:06:5b:c1:e4:72:3e:16:4c:bb:
         51:bd:57:9b:09:6b:4e:8c:e9:16:6f:d2:c4:d3:3b:05:a2:91:
         79:7a:dd:e0:73:d9:54:de:43:34:a8:e4:a0:82:5d:b7:14:94:
         69:95:63:b9:a1:2f:b6:ff:96:77:50:d7:1f:6a:5a:9b:2e:b1:
         be:8f:0d:94:f1:9f:39:9f:b6:52:a5:2c:42:7b:a9:5f:6e:31:
         81:83:48:84:11:11:f6:e5:5a:5a:ad:11:de:5a:c0:5c:0d:bf:
         fa:38:a7:a3:b0:46:18:bd:c7:b3:d8:28:f0:c6:8e:10:cb:73:
         24:eb:3c:02:bc:b8:ea:a6:6e:9f:57:07:f9:c6:b8:c2:68:0f:
         c9:5a:bc:b2:46:63:42:72:c8:52:d9:3e:42:9a:f7:6f:ca:36:
         83:8d:08:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org