Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/323830343a353437633a3a2f33322d3332203d3e20323638363533.roa
File:                     323830343a353437633a3a2f33322d3332203d3e20323638363533.roa (raw, json)
Hash identifier:          a2+jgxie96mBEkSxagk0sG2SmAzJiOWR7YBKLxYFmW4=
Subject key identifier:   7E:44:DE:29:94:7E:8C:C7:CC:17:CD:F7:9F:42:83:EF:74:A2:9C:58
Certificate issuer:       /CN=8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D
Certificate serial:       3C110D00AA111592DD557D3AC479853CAFCBAB41
Authority key identifier: 8D:CC:52:EA:C5:DD:6E:E6:5F:5D:95:40:ED:0C:69:BB:1A:6F:7C:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/323830343a353437633a3a2f33322d3332203d3e20323638363533.roa
Signing time:             Thu 24 Mar 2022 20:07:35 +0000
ROA not before:           Thu 24 Mar 2022 20:02:35 +0000
ROA not after:            Thu 23 Mar 2023 20:07:35 +0000
asID:                     268653
IP address blocks:        2804:547c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:11:0d:00:aa:11:15:92:dd:55:7d:3a:c4:79:85:3c:af:cb:ab:41
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D
        Validity
            Not Before: Mar 24 20:02:35 2022 GMT
            Not After : Mar 23 20:07:35 2023 GMT
        Subject: CN=7E44DE29947E8CC7CC17CDF79F4283EF74A29C58
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:6b:70:3c:80:fc:30:06:e4:b1:c3:b6:a1:6a:
                    5e:3b:aa:1b:81:e7:c1:6a:2c:5f:6c:91:0b:3f:97:
                    f0:44:28:d9:a5:56:81:1b:65:a4:1a:12:43:09:fe:
                    9a:87:91:89:62:35:dd:65:4b:1b:11:d3:35:2c:3b:
                    20:ee:3e:eb:18:4b:13:62:ea:2a:d8:26:fc:a3:23:
                    bd:e5:0e:51:69:b9:9c:83:a3:7e:91:ef:ba:2b:65:
                    56:e0:7b:3e:8f:db:23:cb:6c:cc:75:db:f3:f9:86:
                    31:f6:60:04:cd:d2:9d:ee:a9:8f:62:22:38:4c:53:
                    cb:22:5e:4e:f2:2c:70:4e:4c:e8:18:0f:6a:cb:21:
                    34:51:c5:d3:54:c8:b5:80:cb:0a:0e:92:e2:8b:10:
                    1a:9e:b4:80:e6:d3:c1:e6:a8:24:04:2d:76:45:0e:
                    30:5c:03:33:48:75:5c:98:db:ee:ad:e8:8d:64:71:
                    49:d1:73:da:94:cf:44:a3:5f:fa:83:98:d1:af:de:
                    fd:ff:54:fe:17:25:4d:14:83:fc:e4:6a:23:1e:9f:
                    af:ff:da:db:97:fb:15:ce:39:83:a3:b2:23:cc:f3:
                    cc:dc:02:df:1c:bd:f1:57:33:fd:a1:57:64:bb:b4:
                    13:2c:fc:9f:79:e6:24:32:24:65:71:22:70:0a:60:
                    00:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:44:DE:29:94:7E:8C:C7:CC:17:CD:F7:9F:42:83:EF:74:A2:9C:58
            X509v3 Authority Key Identifier:
                keyid:8D:CC:52:EA:C5:DD:6E:E6:5F:5D:95:40:ED:0C:69:BB:1A:6F:7C:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8DCC52EAC5DD6EE65F5D9540ED0C69BB1A6F7C6D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2tCJ1PRyG8c3qRseoxiVCn6rRN8pBRT1Ajus2GxacRHy/0/323830343a353437633a3a2f33322d3332203d3e20323638363533.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:547c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:58:dd:f5:06:f9:e8:3e:c4:c7:f1:97:4d:f5:df:19:a5:55:
         01:96:61:3d:2b:2c:e0:89:f9:9e:66:4b:f3:e5:d0:5a:59:b6:
         b1:65:0e:b4:d0:26:50:4b:94:7e:c3:c1:6f:8b:3a:08:8c:ae:
         1e:c4:e2:1c:6d:d0:0b:e0:f6:f8:6d:93:2a:f2:1f:68:2b:31:
         77:2f:78:ea:5d:a1:30:92:b4:1c:7f:02:07:b3:36:3c:ee:f4:
         fa:f2:0a:de:12:3d:d6:9c:1e:b6:73:16:28:22:d6:ed:79:d3:
         21:7e:9a:8a:68:7b:f6:33:e4:99:90:5e:e7:f3:e3:01:af:e0:
         7d:2d:ff:5a:84:43:0d:04:b4:be:4d:3a:62:c0:f9:ab:14:d6:
         29:73:22:e5:8e:d5:8a:71:8f:29:bb:c3:35:c0:12:fc:92:5c:
         8a:45:3d:be:c0:12:73:4f:70:e8:1f:3c:e7:9d:a8:90:d2:51:
         8f:42:49:e2:a4:ae:1d:05:13:db:85:41:1e:4b:83:1d:f5:e2:
         f1:ee:ed:91:d2:be:6a:48:47:f5:1e:a6:a5:36:01:bf:e0:6c:
         70:fe:9a:63:63:2f:03:ef:87:91:6e:05:31:c1:33:d8:12:e7:
         5b:3e:10:10:a4:c1:e6:3c:a2:34:a3:68:ea:dc:24:23:89:28:
         04:b9:71:c9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:08 2024 by rpki-client on console-ams.rpki-client.org