Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/323830343a3536383a383030303a3a2f33332d3333203d3e20323632353134.roa
File:                     323830343a3536383a383030303a3a2f33332d3333203d3e20323632353134.roa (raw, json)
Hash identifier:          w2FV/mlwjvN6Pc9UTxdPQ93A6l9/tjQ4q9ElTFHUmdY=
Subject key identifier:   F2:1B:FA:DD:3E:70:2B:E9:36:63:BC:24:56:18:2D:7F:67:F2:E3:3E
Certificate issuer:       /CN=E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D
Certificate serial:       1BFDFFE8D87116C7C4D0E145E54FBBE2D34E2D
Authority key identifier: E6:03:E9:E9:CB:A4:E1:8A:F6:D5:A9:48:9E:1A:92:2E:C2:BC:A3:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/323830343a3536383a383030303a3a2f33332d3333203d3e20323632353134.roa
Signing time:             Mon 17 Oct 2022 20:40:18 +0000
ROA not before:           Mon 17 Oct 2022 20:35:18 +0000
ROA not after:            Mon 16 Oct 2023 20:40:18 +0000
asID:                     262514
IP address blocks:        2804:568:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:fd:ff:e8:d8:71:16:c7:c4:d0:e1:45:e5:4f:bb:e2:d3:4e:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D
        Validity
            Not Before: Oct 17 20:35:18 2022 GMT
            Not After : Oct 16 20:40:18 2023 GMT
        Subject: CN=F21BFADD3E702BE93663BC2456182D7F67F2E33E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:b7:cd:63:b6:c2:46:27:5b:47:5c:b0:a9:53:
                    1b:99:8f:9c:c3:b6:82:c3:3f:b4:91:76:85:ec:9f:
                    53:54:08:29:af:ac:13:66:2a:d0:06:df:7b:1e:07:
                    6e:c7:cf:df:7b:d8:76:cc:62:3c:82:91:3e:a5:72:
                    1a:dc:24:52:d6:ba:b6:ba:60:04:1f:58:b7:cc:81:
                    98:70:56:3e:fe:bd:86:c5:0a:2b:fd:0d:29:be:7c:
                    08:49:03:61:47:00:c0:bd:a9:5d:7d:f1:29:ed:98:
                    b8:e8:dd:78:f6:27:fb:38:80:08:81:b3:aa:c9:f7:
                    f8:a7:70:37:f2:f8:86:be:33:01:61:a8:74:c4:b6:
                    de:de:4c:84:1c:c8:c0:1f:8d:a4:f4:56:09:e7:7d:
                    20:d1:56:38:77:50:3b:c5:fe:81:c5:c2:c0:5f:ed:
                    f6:9e:21:85:72:5f:1e:3e:7e:68:32:42:69:41:ee:
                    91:fc:ac:7e:f6:a2:99:4a:06:2a:44:41:3b:48:a5:
                    be:95:1c:44:37:c0:df:d1:2b:93:2a:43:0a:87:9f:
                    59:49:86:55:26:10:57:5f:ca:fd:f7:52:8e:99:91:
                    b2:f6:45:59:3c:77:2b:fb:c8:75:2b:c3:06:1b:eb:
                    5c:b5:78:dd:57:fa:41:6a:b2:db:b0:96:1b:63:fe:
                    f3:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F2:1B:FA:DD:3E:70:2B:E9:36:63:BC:24:56:18:2D:7F:67:F2:E3:3E
            X509v3 Authority Key Identifier:
                keyid:E6:03:E9:E9:CB:A4:E1:8A:F6:D5:A9:48:9E:1A:92:2E:C2:BC:A3:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E603E9E9CBA4E18AF6D5A9489E1A922EC2BCA36D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rC2b4pRVSgEqvcauGPe3Eo89e5D5wz2Pyn764wLAnKF/4/323830343a3536383a383030303a3a2f33332d3333203d3e20323632353134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:568:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         d8:ca:3f:aa:7b:ba:85:3a:c8:cf:1a:57:e8:8d:aa:72:4f:f2:
         40:cc:fb:10:30:cf:46:58:3f:00:33:a3:4c:2f:8b:21:c0:37:
         63:a2:9f:b7:78:ef:8c:0a:cb:01:cd:c6:63:cc:27:40:d6:b8:
         7b:9d:9d:20:fa:a8:ba:df:ac:6a:50:42:4d:9d:18:46:99:e9:
         ea:95:96:d8:8c:d7:d5:23:f9:38:91:cb:92:11:de:fe:3f:7e:
         80:a7:bb:39:76:39:03:51:e8:e3:38:cb:4a:74:5f:7b:b3:7b:
         82:fd:d3:4d:fe:70:5f:cb:da:db:42:d6:9d:a7:23:62:07:4e:
         87:37:a4:9a:91:01:87:6d:5b:ce:06:d7:0a:6e:25:83:7b:58:
         ce:a7:e2:df:0d:1c:37:a3:80:3d:11:90:7f:2a:95:14:13:35:
         0b:62:47:d6:80:09:fa:84:14:91:f0:94:c5:fc:96:ed:b2:81:
         df:69:49:40:2f:06:73:2a:73:e5:7f:91:7e:8b:35:c3:d4:23:
         31:b2:2e:68:44:08:20:6c:41:5e:d1:6a:5e:05:50:f2:b4:67:
         c7:da:c5:b7:24:6a:1e:50:80:43:14:68:92:7f:0a:1a:0f:ba:
         30:e9:af:50:a8:ff:e9:84:bc:19:08:38:cf:f3:3b:ad:bb:2a:
         34:34:26:aa
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:22 2024 by rpki-client on console-fra.rpki-client.org