Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2g5rqwLEnvTm5qYheY29yojhFyJKvbfD2cnL8uVak5M1/0/323830343a376235633a383030303a3a2f33332d3333203d3e20323731343237.roa
File:                     323830343a376235633a383030303a3a2f33332d3333203d3e20323731343237.roa (raw, json)
Hash identifier:          i7ySd7ijMBUQvanUawTW3GkWvsPHhwQmLTlYX/7hhyk=
Subject key identifier:   06:49:9C:8B:0A:1A:34:55:B0:6A:94:4E:A0:7B:01:D9:E4:E8:BE:3C
Certificate issuer:       /CN=F14569C46CBF26B525114FB23228D380BFB45272
Certificate serial:       359A7869E04F58D8CA7F0D6642255FB142B21260
Authority key identifier: F1:45:69:C4:6C:BF:26:B5:25:11:4F:B2:32:28:D3:80:BF:B4:52:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F14569C46CBF26B525114FB23228D380BFB45272.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2g5rqwLEnvTm5qYheY29yojhFyJKvbfD2cnL8uVak5M1/0/323830343a376235633a383030303a3a2f33332d3333203d3e20323731343237.roa
Signing time:             Thu 28 Jul 2022 15:32:28 +0000
ROA not before:           Thu 28 Jul 2022 15:27:28 +0000
ROA not after:            Thu 27 Jul 2023 15:32:28 +0000
asID:                     271427
IP address blocks:        2804:7b5c:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:9a:78:69:e0:4f:58:d8:ca:7f:0d:66:42:25:5f:b1:42:b2:12:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F14569C46CBF26B525114FB23228D380BFB45272
        Validity
            Not Before: Jul 28 15:27:28 2022 GMT
            Not After : Jul 27 15:32:28 2023 GMT
        Subject: CN=06499C8B0A1A3455B06A944EA07B01D9E4E8BE3C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:4e:bb:fa:a6:76:51:c6:2e:fd:ac:74:2c:fd:
                    35:98:8c:41:ec:fe:f2:1c:a1:e6:69:0d:8f:10:57:
                    f1:d6:f1:a5:76:49:d9:0a:84:27:e7:2d:53:19:d3:
                    7f:e8:0c:ee:7f:75:e6:96:cc:47:96:34:31:f2:d6:
                    8e:8f:1d:a9:33:58:96:e2:92:c1:fe:9e:96:85:92:
                    03:e1:4c:55:ec:68:2b:6b:55:ad:ce:6a:a9:52:86:
                    2e:ab:42:8e:06:07:95:9c:69:a9:c0:a7:3b:44:f9:
                    b8:7f:b6:e7:8a:07:45:d1:73:a7:33:2d:2b:35:10:
                    7f:3c:c0:23:7e:52:fb:53:13:4e:85:2a:d3:a4:d1:
                    96:05:83:96:82:ca:10:4f:f4:db:ef:84:ab:7f:9b:
                    08:44:ca:52:4e:ba:cd:c0:64:44:d8:52:c7:07:cd:
                    61:52:a5:5a:fe:34:d8:b2:6b:f9:90:6e:a4:c6:80:
                    10:77:a0:89:d4:f8:a7:45:df:6d:6b:67:28:ab:5a:
                    2a:65:06:f7:19:85:9e:20:92:8c:32:bc:74:f9:70:
                    07:22:89:22:9e:4b:a1:59:ad:c2:d8:05:7c:04:10:
                    fa:3e:23:ac:e7:73:d0:1e:a7:3f:4a:72:32:5c:3c:
                    28:3e:1b:a2:95:ed:45:65:78:7c:68:9d:06:cd:33:
                    3e:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:49:9C:8B:0A:1A:34:55:B0:6A:94:4E:A0:7B:01:D9:E4:E8:BE:3C
            X509v3 Authority Key Identifier:
                keyid:F1:45:69:C4:6C:BF:26:B5:25:11:4F:B2:32:28:D3:80:BF:B4:52:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2g5rqwLEnvTm5qYheY29yojhFyJKvbfD2cnL8uVak5M1/0/F14569C46CBF26B525114FB23228D380BFB45272.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F14569C46CBF26B525114FB23228D380BFB45272.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2g5rqwLEnvTm5qYheY29yojhFyJKvbfD2cnL8uVak5M1/0/323830343a376235633a383030303a3a2f33332d3333203d3e20323731343237.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7b5c:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         0b:a7:1a:1e:6d:d5:57:c4:88:4a:61:bd:04:78:cf:1c:a6:f2:
         c0:0c:a8:6f:4c:92:61:fa:cc:a2:23:22:27:01:22:dc:f7:43:
         99:d9:7a:1d:ee:ff:df:34:8e:e8:a3:42:85:dd:3b:5d:4d:2e:
         34:59:ee:e1:95:c8:c8:66:b5:94:3a:cc:2f:47:40:65:61:40:
         30:96:99:c4:76:01:fd:d5:d6:bf:ec:4b:fd:e7:78:01:e4:03:
         03:a8:55:90:d3:55:ae:ee:0d:56:15:cf:34:62:ec:95:a7:5e:
         95:07:7d:5d:04:0e:56:af:d1:4d:f4:17:0a:74:bb:27:7a:2b:
         7e:8d:4b:ad:35:25:a5:3d:91:f6:39:37:08:3b:c5:b0:a4:88:
         89:73:59:3a:d3:e1:5a:8b:c5:c6:cf:ed:40:95:06:c9:0e:32:
         c6:c9:70:09:b6:3a:8f:d1:e0:97:c1:18:04:ff:47:4b:cf:c6:
         71:8a:19:a9:72:df:90:97:75:ef:80:d0:07:b8:d7:f2:bf:f2:
         29:7a:47:a4:5f:1b:a1:41:95:80:e7:22:fa:08:80:4f:77:13:
         07:37:10:cb:3e:f6:43:e7:19:a6:66:84:dc:f7:4f:e0:82:43:
         e3:90:7a:a7:a1:7c:37:37:fe:1b:b6:ba:fb:14:a0:78:4b:14:
         e5:83:63:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:21 2024 by rpki-client on console-fra.rpki-client.org