Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a313030323a3a2f34382d3438203d3e20323732353534.roa
File:                     323830343a383530633a313030323a3a2f34382d3438203d3e20323732353534.roa (raw, json)
Hash identifier:          Nqab17K5ij0moa3AFuvP6SSuE2d7SwYaRyP+B5Eu/GE=
Subject key identifier:   DE:4D:64:74:DA:2E:A9:8E:F4:A7:0A:DB:B6:C2:9A:E6:C8:2E:BA:CF
Certificate issuer:       /CN=F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC
Certificate serial:       080D5CF0BC11A8114C7D63D9222543EF53714723
Authority key identifier: F8:90:55:B9:3A:0E:9C:3F:E6:F1:10:10:1E:48:FB:4B:A7:C6:C7:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a313030323a3a2f34382d3438203d3e20323732353534.roa
Signing time:             Wed 02 Nov 2022 15:13:42 +0000
ROA not before:           Wed 02 Nov 2022 15:08:42 +0000
ROA not after:            Wed 01 Nov 2023 15:13:42 +0000
asID:                     272554
IP address blocks:        2804:850c:1002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:0d:5c:f0:bc:11:a8:11:4c:7d:63:d9:22:25:43:ef:53:71:47:23
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC
        Validity
            Not Before: Nov  2 15:08:42 2022 GMT
            Not After : Nov  1 15:13:42 2023 GMT
        Subject: CN=DE4D6474DA2EA98EF4A70ADBB6C29AE6C82EBACF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:07:dc:3a:0a:a5:1e:48:fb:ac:6d:36:57:3e:
                    4c:03:00:ac:0e:15:36:bc:28:7f:76:73:bd:8c:e4:
                    d6:9f:7a:39:b3:27:8f:d9:01:d9:c7:4a:b2:26:bb:
                    8e:18:ed:de:8d:01:7a:7a:5a:da:16:ce:86:e8:6e:
                    3d:21:d8:5e:b4:8e:37:e9:46:e5:6d:7e:1b:a3:d5:
                    2e:85:95:a4:ed:28:eb:b0:db:02:ed:e5:dc:f3:85:
                    36:a5:a5:a6:3e:4b:c3:64:ce:b5:1e:ed:67:37:65:
                    33:7d:64:4e:8f:d9:24:bc:2f:3e:94:e8:63:fb:9d:
                    78:39:72:c6:4e:49:89:ea:49:b5:6e:de:5c:06:9c:
                    e1:45:57:ac:fa:c8:4f:07:e3:75:d0:df:6e:61:6e:
                    a6:4a:ff:ee:97:fb:9d:fb:4a:c9:32:64:db:0d:85:
                    4f:55:65:be:e0:84:39:8f:06:38:83:d0:0d:60:33:
                    f9:fe:eb:e4:9a:3c:ec:53:13:90:aa:d1:cf:e7:05:
                    28:4c:19:0e:f6:16:20:d7:88:21:68:3e:96:f4:1f:
                    43:fb:e2:b4:9d:7c:a8:93:ee:a0:61:1e:9e:84:42:
                    5a:f5:bf:76:ab:d7:18:64:12:68:5a:84:7b:e9:2b:
                    55:aa:41:d0:73:1b:4b:d2:ff:3f:2a:8b:a9:e7:bf:
                    57:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:4D:64:74:DA:2E:A9:8E:F4:A7:0A:DB:B6:C2:9A:E6:C8:2E:BA:CF
            X509v3 Authority Key Identifier:
                keyid:F8:90:55:B9:3A:0E:9C:3F:E6:F1:10:10:1E:48:FB:4B:A7:C6:C7:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F89055B93A0E9C3FE6F110101E48FB4BA7C6C7AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2oVveSCqBYJ2G37N3cnt2RW2a7crCkFWoHHFHfUXYref/0/323830343a383530633a313030323a3a2f34382d3438203d3e20323732353534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:850c:1002::/48

    Signature Algorithm: sha256WithRSAEncryption
         30:8b:78:52:52:d9:d3:6d:cc:6a:2b:12:87:86:a2:0b:e4:e9:
         72:f6:4a:0c:eb:ff:7e:f0:90:8e:b3:63:39:98:17:55:36:58:
         ad:e0:a5:7b:75:8c:c9:b1:ad:29:ff:ba:94:1f:8d:37:75:e5:
         11:51:ac:50:91:85:6e:2f:d3:b9:9c:7f:77:9f:58:75:3a:e7:
         d2:c0:47:5e:79:c6:0d:27:d1:71:13:18:b7:09:a9:a4:2c:cf:
         1e:1e:97:d5:17:8d:26:7e:28:33:c3:3d:71:5f:57:c3:65:ce:
         44:c5:ef:7d:c3:d1:20:7c:26:71:4b:b2:fa:7b:7b:f4:ec:5f:
         29:f2:a1:b1:c2:e4:c7:f0:80:4e:9c:fe:d2:2b:65:04:60:da:
         5a:0d:f3:52:18:ce:66:b2:a5:59:30:77:ab:8f:e1:bb:1d:90:
         a1:fe:e1:b3:72:71:66:26:a0:62:7c:f9:3d:02:26:eb:8e:53:
         55:d2:ee:07:39:52:61:84:f6:7d:23:20:ce:45:f2:52:d5:42:
         d6:20:d4:16:50:53:f3:88:63:3f:bd:ad:5b:c2:bb:01:8b:ac:
         38:1a:a6:d3:69:fc:8b:18:e9:ff:68:7a:68:a1:15:f2:ce:df:
         96:32:46:fa:07:41:48:eb:eb:76:58:f9:78:1e:cc:3f:87:c2:
         61:c0:be:55
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org