Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a323030303a3a2f34302d3430203d3e20323731363132.roa
File:                     323830343a376534303a323030303a3a2f34302d3430203d3e20323731363132.roa (raw, json)
Hash identifier:          WG7g7KSuXeJVdVG6f5BiEv9YV7K2NPgI5euf+jt603w=
Subject key identifier:   0F:F1:CB:C7:A6:78:57:46:88:DC:2C:C2:13:C3:45:15:54:6C:B9:90
Certificate issuer:       /CN=365EB380D1AF8407FD93545D5B6D63209853804F
Certificate serial:       538B3938F601CD6A0CB31571215890A4EA3599E0
Authority key identifier: 36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a323030303a3a2f34302d3430203d3e20323731363132.roa
Signing time:             Thu 01 Feb 2024 04:57:17 +0000
ROA not before:           Thu 01 Feb 2024 04:52:17 +0000
ROA not after:            Thu 30 Jan 2025 04:57:17 +0000
asID:                     271612
IP address blocks:        2804:7e40:2000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:8b:39:38:f6:01:cd:6a:0c:b3:15:71:21:58:90:a4:ea:35:99:e0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=365EB380D1AF8407FD93545D5B6D63209853804F
        Validity
            Not Before: Feb  1 04:52:17 2024 GMT
            Not After : Jan 30 04:57:17 2025 GMT
        Subject: CN=0FF1CBC7A678574688DC2CC213C34515546CB990
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a4:f1:58:2d:a7:9b:a8:cb:a1:e7:fa:e8:bd:11:
                    59:16:3a:40:59:c3:4f:ed:38:fe:4d:a3:e0:0b:4f:
                    b7:25:47:df:dc:54:d5:01:59:2a:51:3f:71:d7:1e:
                    dd:f8:17:86:0b:02:0e:84:ea:8f:5b:57:0e:e0:5a:
                    59:27:62:92:30:b9:19:69:dd:63:aa:a0:50:70:cb:
                    fc:a5:41:ff:30:30:fd:c6:42:78:bd:15:36:ba:5a:
                    e6:9f:0a:80:f7:ca:74:ba:09:1a:10:54:71:54:e1:
                    51:1a:c3:7a:4e:f9:8f:bd:40:5b:1e:68:8f:ed:fd:
                    39:95:1c:b6:d3:aa:c0:03:f4:f7:08:a9:a2:be:ad:
                    61:04:54:6d:52:3d:f2:42:ce:a6:05:83:d5:37:65:
                    07:a3:5a:d0:1b:bb:97:78:bf:ee:3a:6c:4c:9b:29:
                    a3:1f:01:c2:71:0c:6f:1c:61:f5:95:fd:de:5e:43:
                    26:1e:b8:e3:78:56:88:08:06:b6:50:45:33:13:15:
                    39:92:13:ee:20:83:86:84:50:bb:38:d0:95:22:13:
                    81:23:84:ac:95:36:18:91:76:9a:73:98:0a:b4:22:
                    f7:6b:25:e9:e3:59:64:9f:dc:91:25:48:04:50:a3:
                    66:7c:22:03:25:37:21:55:1d:6c:65:50:6a:c5:97:
                    0d:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:F1:CB:C7:A6:78:57:46:88:DC:2C:C2:13:C3:45:15:54:6C:B9:90
            X509v3 Authority Key Identifier:
                keyid:36:5E:B3:80:D1:AF:84:07:FD:93:54:5D:5B:6D:63:20:98:53:80:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/365EB380D1AF8407FD93545D5B6D63209853804F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/365EB380D1AF8407FD93545D5B6D63209853804F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2z58FeuZb9UtGwS5RZBpbcPh2oapMxenTVdbLch9LLn5/0/323830343a376534303a323030303a3a2f34302d3430203d3e20323731363132.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e40:2000::/40

    Signature Algorithm: sha256WithRSAEncryption
         93:d9:38:fe:e1:4a:2a:60:68:31:6d:1e:84:62:88:8e:62:0d:
         96:2d:31:26:dc:17:b8:a1:08:a9:44:5d:2b:ee:8b:34:f9:02:
         50:1a:7f:fd:39:e7:0a:26:46:64:75:37:76:64:61:12:8d:a2:
         ee:33:30:26:5d:83:75:d6:20:ce:2a:3a:e2:15:f8:a3:b7:38:
         9b:d2:66:c7:be:d9:38:32:49:06:60:b9:26:4c:6b:d2:a4:70:
         e7:b3:72:b9:81:f3:a4:7d:50:bd:a4:27:42:4a:6f:00:17:87:
         71:25:19:22:32:88:58:01:89:9c:49:a6:34:c4:97:fe:3e:6d:
         1e:93:0a:b8:3e:04:ea:6f:ea:15:e5:04:f8:6e:6a:f7:97:76:
         41:ed:28:7d:02:15:e1:57:59:9a:d0:f8:4f:1e:54:39:51:17:
         26:a7:d8:6b:96:ca:6e:33:d2:02:22:74:3a:7d:de:66:36:07:
         4d:6f:59:0f:8b:ce:52:c7:e2:a8:31:52:12:65:ff:5b:c4:d9:
         03:46:d4:d5:41:a6:44:56:7a:e7:e5:6d:8d:0a:f2:8f:62:7b:
         f7:e4:1f:55:ef:4f:be:6a:2c:9c:16:9d:8a:6f:af:74:f0:b5:
         7b:c3:ca:b1:ca:dc:66:03:95:7e:08:a3:9f:07:43:f2:57:41:
         e9:93:55:76
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:24 2024 by rpki-client on console-fra.rpki-client.org