Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/323830343a333964343a3a2f33322d3334203d3e20323636303533.roa
File:                     323830343a333964343a3a2f33322d3334203d3e20323636303533.roa (raw, json)
Hash identifier:          Ftg8cv/ttdxXrycocxcoBQBqgJ90lLagUChMUfPIMY0=
Subject key identifier:   7E:99:DF:4C:73:80:C7:5F:AA:6B:4D:FB:15:A3:C2:AF:C2:C3:00:21
Certificate issuer:       /CN=AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5
Certificate serial:       35B637C7975AF9A2BC524E7C8EFE72B3B997B9DD
Authority key identifier: AE:8A:2A:FA:3C:A4:07:97:49:AD:E8:B9:D2:4D:AA:49:E2:0E:87:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/323830343a333964343a3a2f33322d3334203d3e20323636303533.roa
Signing time:             Mon 12 Sep 2022 12:50:37 +0000
ROA not before:           Mon 12 Sep 2022 12:45:37 +0000
ROA not after:            Mon 11 Sep 2023 12:50:37 +0000
asID:                     266053
IP address blocks:        2804:39d4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:b6:37:c7:97:5a:f9:a2:bc:52:4e:7c:8e:fe:72:b3:b9:97:b9:dd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5
        Validity
            Not Before: Sep 12 12:45:37 2022 GMT
            Not After : Sep 11 12:50:37 2023 GMT
        Subject: CN=7E99DF4C7380C75FAA6B4DFB15A3C2AFC2C30021
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:dd:fd:4c:db:c5:1b:2c:b4:a2:99:8c:81:be:
                    ce:ae:50:41:bc:f3:c7:ca:c3:a2:cc:57:10:0e:ba:
                    4d:06:31:1a:a3:3f:3a:4d:1f:9d:5c:7d:22:a0:d3:
                    22:0a:b3:10:c6:cc:49:dd:2c:32:a8:e6:b9:b9:c4:
                    17:9d:c2:9d:d6:58:63:e5:a4:bc:85:52:0d:dc:1c:
                    43:98:c8:1b:dc:73:ff:79:0f:9a:a3:af:8e:af:58:
                    1d:b4:0d:63:85:7a:1c:bf:7d:ce:5c:85:40:b3:95:
                    3f:d6:8c:82:df:d0:0c:5b:83:3e:ca:dc:83:4e:ea:
                    f9:38:8f:9f:d6:06:8d:af:e0:6d:d9:82:30:0f:ba:
                    1b:41:54:f5:35:a8:13:1c:c2:6b:d6:89:77:9f:8b:
                    4e:c5:a5:eb:f1:7b:d2:fe:0a:5f:e9:20:09:a1:89:
                    76:0f:6d:8a:5c:de:8a:f1:26:40:9a:9a:b3:75:a8:
                    47:2c:86:4d:d7:f3:37:66:a2:2f:77:a6:45:ae:fe:
                    45:93:7d:ff:47:a9:e4:19:35:23:94:cf:a5:27:aa:
                    91:69:c8:1d:73:55:6d:be:ca:84:45:c0:57:16:08:
                    dd:b7:65:54:34:27:1e:fb:3e:db:13:b9:b5:97:b8:
                    82:78:93:fd:85:72:11:7a:d3:a3:83:86:67:3c:22:
                    5e:21
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:99:DF:4C:73:80:C7:5F:AA:6B:4D:FB:15:A3:C2:AF:C2:C3:00:21
            X509v3 Authority Key Identifier:
                keyid:AE:8A:2A:FA:3C:A4:07:97:49:AD:E8:B9:D2:4D:AA:49:E2:0E:87:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE8A2AFA3CA4079749ADE8B9D24DAA49E20E87F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2dSoa12UGnYxP6vT935eLg8MtFxneihFC63zdZB2kg4q/0/323830343a333964343a3a2f33322d3334203d3e20323636303533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:39d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         b7:91:88:a1:b7:ef:a8:c0:82:12:ef:56:f0:b9:31:37:45:5e:
         1d:fc:39:b4:f3:97:c2:ea:de:5b:0d:94:29:6d:2b:7c:4a:f4:
         bb:05:9b:1e:76:17:4c:ca:52:ba:20:e6:ac:a8:9d:50:13:df:
         77:cf:71:b2:fc:69:93:cd:82:98:58:a1:bb:67:84:e4:03:01:
         20:da:98:93:85:ac:ba:d3:1b:62:79:aa:bd:62:dd:69:17:5f:
         7e:39:17:95:e0:36:f7:02:f1:cf:bd:0d:5d:8f:04:b0:e9:d7:
         fd:82:cf:94:11:79:76:79:8a:1c:0e:28:37:b8:2e:96:d8:ff:
         b8:bb:29:ed:86:21:2d:43:9c:3e:c3:c4:0c:b5:ac:5f:bc:31:
         65:64:fd:56:e9:36:35:f9:85:1c:8b:86:96:a9:e1:96:4b:9e:
         2e:18:57:33:0f:85:0e:e9:24:de:1c:25:3a:66:fe:2c:2e:a5:
         e4:50:f8:48:05:83:6c:eb:ad:a2:78:1b:1a:14:12:72:33:f6:
         81:5e:2a:e1:24:b7:fa:37:1f:1a:6b:00:b1:31:cc:9c:ee:b5:
         8d:56:3b:e2:a2:2c:b4:84:3f:0e:59:e4:06:eb:00:04:c8:e7:
         e5:b7:b5:95:91:18:33:85:d1:81:bf:c3:d2:20:c5:8b:2a:bf:
         ba:e2:20:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org