Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/323830343a376566383a3a2f33322d313238203d3e20323731363538.roa
File:                     323830343a376566383a3a2f33322d313238203d3e20323731363538.roa (raw, json)
Hash identifier:          24qaq8fBUQfCqJqq38ptI8cZirlWDa7hBWGAbw0BXTs=
Subject key identifier:   7F:A3:16:58:A0:37:F1:21:54:06:CA:2F:7B:DA:63:0B:E4:00:50:AE
Certificate issuer:       /CN=98716993F5885BA4377ED210D21A8A2D0CE43192
Certificate serial:       6484DF14E711E828065BE932DD339CA637894036
Authority key identifier: 98:71:69:93:F5:88:5B:A4:37:7E:D2:10:D2:1A:8A:2D:0C:E4:31:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98716993F5885BA4377ED210D21A8A2D0CE43192.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/323830343a376566383a3a2f33322d313238203d3e20323731363538.roa
Signing time:             Fri 16 Feb 2024 15:10:42 +0000
ROA not before:           Fri 16 Feb 2024 15:05:42 +0000
ROA not after:            Fri 14 Feb 2025 15:10:42 +0000
asID:                     271658
IP address blocks:        2804:7ef8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:84:df:14:e7:11:e8:28:06:5b:e9:32:dd:33:9c:a6:37:89:40:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=98716993F5885BA4377ED210D21A8A2D0CE43192
        Validity
            Not Before: Feb 16 15:05:42 2024 GMT
            Not After : Feb 14 15:10:42 2025 GMT
        Subject: CN=7FA31658A037F1215406CA2F7BDA630BE40050AE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:75:7c:80:96:03:48:05:02:67:d9:95:c0:f6:
                    53:14:30:fb:50:94:ff:93:5a:d0:80:1d:69:3d:6b:
                    ee:44:60:1b:0d:16:60:7b:42:d8:b7:4e:72:aa:29:
                    c7:ef:66:9c:e0:91:75:37:d7:ac:5b:c5:49:0c:a1:
                    86:a4:10:db:fb:9a:6c:c4:9b:b3:20:18:a7:eb:f5:
                    95:33:b6:a3:ae:f8:ab:65:bb:5c:64:f9:62:a6:cd:
                    78:8c:65:f6:24:2e:62:8d:aa:23:cc:c8:54:cd:8f:
                    23:b5:df:33:e5:c1:8e:5c:05:ac:17:ff:6e:5e:f4:
                    7f:44:c0:db:d9:b3:5e:7b:fb:f4:7d:53:99:60:8c:
                    81:37:8a:97:98:f8:83:be:49:ff:90:81:36:e9:54:
                    5c:ef:ca:71:84:33:04:4c:67:ee:30:a3:03:df:ad:
                    e3:9b:ab:94:0c:0b:43:4a:04:13:2d:96:bf:b1:4a:
                    e9:3a:41:78:fa:c8:6a:0f:fc:90:10:34:6c:25:78:
                    a0:47:12:35:49:ec:48:de:76:7b:0c:44:70:8b:5b:
                    2a:d3:35:9f:61:35:91:18:3c:69:b9:6d:3a:3a:b5:
                    84:77:ae:ff:77:15:7e:0f:da:eb:12:7b:e0:d8:42:
                    24:15:46:b1:eb:39:01:db:d6:66:24:57:d0:54:41:
                    36:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7F:A3:16:58:A0:37:F1:21:54:06:CA:2F:7B:DA:63:0B:E4:00:50:AE
            X509v3 Authority Key Identifier:
                keyid:98:71:69:93:F5:88:5B:A4:37:7E:D2:10:D2:1A:8A:2D:0C:E4:31:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/98716993F5885BA4377ED210D21A8A2D0CE43192.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/98716993F5885BA4377ED210D21A8A2D0CE43192.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2rE5XM5FCkYEzYy8ipKM4i8NiiL4uJGy8s8CKHyqiPkP/0/323830343a376566383a3a2f33322d313238203d3e20323731363538.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         1b:25:15:1e:4c:86:2e:58:fb:34:b2:f6:2e:cf:66:85:6c:d1:
         38:c8:c9:65:91:b8:f0:84:4f:7b:fd:ab:b5:fa:d9:2e:36:dd:
         c5:47:fa:39:b6:f0:d7:12:e9:6a:c7:21:fe:c8:16:e4:86:3b:
         5f:b7:bf:f3:16:4f:c4:a7:96:7c:04:a9:3d:f3:29:4a:61:1e:
         51:1d:e7:04:61:29:fd:7a:af:e8:d9:2c:8d:13:5d:99:2c:d0:
         2c:7d:42:94:15:a8:c3:6d:a2:c9:e6:d0:2a:c0:f7:8f:0a:7a:
         45:10:b5:a2:39:6b:41:04:bc:9c:23:a4:3c:42:fe:f7:f6:cd:
         1b:83:be:ac:a3:71:99:dc:4e:cd:3b:36:91:31:0d:36:73:29:
         cb:8e:29:34:c2:56:c4:8b:8a:61:7b:9a:bd:cb:53:70:d0:50:
         ad:4c:2d:1c:3f:70:1f:a5:28:01:de:ae:e9:18:81:a5:e7:6c:
         18:92:66:71:e6:79:44:61:37:a5:3e:53:4d:a1:92:0e:7a:9b:
         09:df:59:44:b5:33:8d:c6:ee:16:62:83:d5:d0:42:9f:27:45:
         0b:60:38:96:47:b1:77:d8:f4:92:fb:93:f9:f0:fe:2d:6a:53:
         7f:1d:8a:9a:ed:dc:8a:5d:e9:02:35:03:61:4a:61:a9:e9:ca:
         70:ef:97:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org