Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/323830343a313638303a343030303a3a2f33342d3334203d3e20323633323839.roa
File:                     323830343a313638303a343030303a3a2f33342d3334203d3e20323633323839.roa (raw, json)
Hash identifier:          wFZVZmzyOnjP9nHasTlOPrcwSD0behedjL4cRVh+YD8=
Subject key identifier:   4D:97:ED:29:BC:1C:47:F1:81:6A:37:FA:D1:6D:52:98:E5:C0:1C:28
Certificate issuer:       /CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
Certificate serial:       025E8151B0A90BE30FA3CF897DD728AB36E07861
Authority key identifier: 8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/323830343a313638303a343030303a3a2f33342d3334203d3e20323633323839.roa
Signing time:             Tue 16 Jan 2024 20:01:35 +0000
ROA not before:           Tue 16 Jan 2024 19:56:35 +0000
ROA not after:            Tue 14 Jan 2025 20:01:35 +0000
asID:                     263289
IP address blocks:        2804:1680:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:5e:81:51:b0:a9:0b:e3:0f:a3:cf:89:7d:d7:28:ab:36:e0:78:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8CA2336475BC551CD8B0D5ECDA42170036666F54
        Validity
            Not Before: Jan 16 19:56:35 2024 GMT
            Not After : Jan 14 20:01:35 2025 GMT
        Subject: CN=4D97ED29BC1C47F1816A37FAD16D5298E5C01C28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:3d:9d:3c:51:a4:c9:35:0f:09:a4:85:4a:bd:
                    0a:17:d4:be:61:da:02:ad:f8:81:df:12:40:33:e2:
                    82:66:1d:a2:59:fe:4d:77:50:5e:b0:b2:f1:e7:e1:
                    26:1c:20:57:88:19:98:7c:ce:47:fe:eb:02:02:92:
                    38:11:94:2d:87:0c:48:b9:b9:c8:b9:7e:79:a8:3b:
                    af:f6:dc:c7:78:d4:a8:04:ea:a0:b4:ee:7c:8c:04:
                    e4:5a:02:63:ac:4c:a4:83:4a:30:53:43:7f:4a:4f:
                    95:de:c4:d5:33:33:df:22:b2:84:01:33:7d:72:2b:
                    cc:e7:52:19:13:2a:c9:c5:ee:73:7f:20:f0:b2:9e:
                    83:53:11:a0:57:f1:e1:41:93:b5:d2:f6:03:8a:6d:
                    97:b9:3e:e3:d7:94:2f:b1:7a:de:ec:45:d5:fd:88:
                    7e:e0:bf:69:3a:a7:ed:ee:70:42:e2:d0:59:54:24:
                    3f:d9:6c:89:25:8d:e8:88:09:61:d1:65:61:b5:d5:
                    0c:30:4a:46:36:bf:68:8e:e8:49:0f:e8:b4:6b:66:
                    68:6d:22:fe:ae:26:21:01:c5:3a:e2:f7:c8:07:b8:
                    9a:27:d3:c9:19:b4:60:c7:0f:11:71:df:de:f8:a4:
                    64:8e:5d:e4:f6:ef:de:35:16:65:65:4a:8c:fe:7e:
                    9d:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:97:ED:29:BC:1C:47:F1:81:6A:37:FA:D1:6D:52:98:E5:C0:1C:28
            X509v3 Authority Key Identifier:
                keyid:8C:A2:33:64:75:BC:55:1C:D8:B0:D5:EC:DA:42:17:00:36:66:6F:54

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8CA2336475BC551CD8B0D5ECDA42170036666F54.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2ycF6iWBitTLNykTzxCszNKmP6TnsuEqRuMuba42PQ3U/0/323830343a313638303a343030303a3a2f33342d3334203d3e20323633323839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1680:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         11:d0:f7:5d:33:4c:ef:fb:ab:9b:e4:7c:9a:0b:c7:48:b8:a9:
         e6:4f:82:59:6c:67:40:60:b3:5f:ae:33:ce:29:e2:a4:d0:b2:
         3c:ab:97:86:02:35:05:94:e4:a5:db:4c:2b:34:da:6f:21:82:
         f7:a2:a2:4b:03:1b:71:64:89:d3:fa:df:cf:53:35:d4:aa:cd:
         33:58:c9:db:93:76:eb:24:57:cf:88:5f:6c:92:7a:48:56:de:
         42:b6:df:68:46:dc:b6:9f:c8:95:2e:8b:a7:b0:15:9e:cd:6f:
         24:28:9e:8e:88:8a:3c:37:06:b8:f7:76:9f:bc:8e:77:13:23:
         39:b9:44:75:e3:95:57:0b:96:38:8d:56:0a:84:00:43:61:99:
         9e:a6:83:d3:ee:6c:8f:d0:e4:89:7c:b8:98:dc:e3:df:59:b8:
         f1:97:a2:59:09:8f:cb:43:b4:f7:13:53:a7:8f:6c:19:a5:f5:
         8d:25:71:fe:18:92:0a:56:de:16:5e:5b:26:99:ef:8d:c3:68:
         95:ec:84:5e:05:81:fc:bc:9b:d4:c4:01:9e:fa:57:89:e5:8b:
         d2:0b:95:a9:9e:25:27:bd:99:7a:af:40:65:55:87:7a:b6:2e:
         0e:14:8c:3b:60:1e:05:81:51:89:5b:83:82:af:e2:10:1a:6b:
         4c:6b:77:17
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:18 2024 by rpki-client on console-ams.rpki-client.org