Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a383031303a3a2f34342d3434203d3e20323731333236.roa
File:                     323830343a373963343a383031303a3a2f34342d3434203d3e20323731333236.roa (raw, json)
Hash identifier:          SwAZRuChgmp6Evlk/zaE5AbO7il3pxh5VaCFnp9bo9I=
Subject key identifier:   C8:A5:D6:31:18:0B:7C:01:98:96:86:6E:D0:09:5A:C8:BC:EC:05:F4
Certificate issuer:       /CN=854D67A53888C5C7A27581422DBB6973EF4A1FC0
Certificate serial:       70DA07B9E6925744AED7FDD8EC624E7CF5452458
Authority key identifier: 85:4D:67:A5:38:88:C5:C7:A2:75:81:42:2D:BB:69:73:EF:4A:1F:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a383031303a3a2f34342d3434203d3e20323731333236.roa
Signing time:             Tue 26 Mar 2024 06:20:15 +0000
ROA not before:           Tue 26 Mar 2024 06:15:15 +0000
ROA not after:            Tue 25 Mar 2025 06:20:15 +0000
asID:                     271326
IP address blocks:        2804:79c4:8010::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:da:07:b9:e6:92:57:44:ae:d7:fd:d8:ec:62:4e:7c:f5:45:24:58
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=854D67A53888C5C7A27581422DBB6973EF4A1FC0
        Validity
            Not Before: Mar 26 06:15:15 2024 GMT
            Not After : Mar 25 06:20:15 2025 GMT
        Subject: CN=C8A5D631180B7C019896866ED0095AC8BCEC05F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:fd:4e:d4:66:07:28:db:00:52:cb:50:d4:a7:
                    5e:43:82:5a:7c:8d:97:1b:34:4a:95:00:bc:63:06:
                    49:47:52:76:fb:6e:e9:1f:38:32:63:64:08:81:62:
                    ae:86:37:50:ae:7f:b6:e2:40:12:b2:c4:77:dd:f3:
                    e7:23:d1:dd:84:fb:a1:8d:44:91:ca:e2:f9:b9:4f:
                    ee:e6:bb:72:df:58:88:3d:b5:4b:88:96:28:db:ca:
                    22:85:81:4c:ef:f8:39:98:fc:6f:d5:28:a6:3c:f5:
                    01:d5:ff:af:a5:9d:fc:6e:3e:78:a9:50:13:77:fd:
                    01:a6:7e:83:42:3a:7e:8d:97:da:b5:a5:79:a6:de:
                    f3:90:86:3b:92:be:83:c7:b4:53:5d:e3:b2:fc:b7:
                    1e:27:5d:80:31:d2:57:31:9a:af:77:c2:57:99:18:
                    c3:b2:34:28:7e:4c:94:56:11:10:d2:2d:97:c8:ad:
                    4f:9a:9f:8b:7f:e7:04:98:d1:8d:00:67:30:65:bd:
                    f1:e2:5d:c5:cf:5f:66:fb:d7:d8:7b:a4:ad:a9:3a:
                    ac:b1:27:57:4c:21:ac:c8:88:9b:41:d9:25:59:32:
                    90:c2:f1:29:29:70:aa:a3:44:c9:9f:0f:af:72:7b:
                    57:d9:68:f3:f1:c7:eb:e7:28:1c:64:c0:c8:6e:ca:
                    81:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A5:D6:31:18:0B:7C:01:98:96:86:6E:D0:09:5A:C8:BC:EC:05:F4
            X509v3 Authority Key Identifier:
                keyid:85:4D:67:A5:38:88:C5:C7:A2:75:81:42:2D:BB:69:73:EF:4A:1F:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/854D67A53888C5C7A27581422DBB6973EF4A1FC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a383031303a3a2f34342d3434203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c4:8010::/44

    Signature Algorithm: sha256WithRSAEncryption
         bf:2b:5d:2e:72:79:24:3a:7a:fb:d6:4e:45:3c:fe:12:69:b8:
         a3:1f:99:10:3c:9e:85:e4:2d:e9:fb:43:2d:b4:ef:b5:2d:7f:
         52:61:c5:f3:d2:6a:e7:82:a3:d7:ef:08:f3:be:54:d3:75:19:
         a0:45:71:d5:fd:3b:25:26:9b:fb:50:c5:c6:cf:1e:e7:1e:e8:
         c8:0b:ac:2d:eb:41:19:1b:8f:1b:55:f0:1f:2e:16:44:21:58:
         9d:55:73:78:97:d6:35:c5:64:1c:1a:47:e8:0d:5c:cc:c2:8e:
         fd:66:37:4b:87:d5:8f:ea:e8:b7:c8:b7:58:9b:ea:fa:e7:9a:
         d5:21:6b:f9:aa:24:81:5d:98:c4:0d:6b:14:95:15:ec:77:e4:
         66:61:5c:4c:2d:92:e4:b8:c6:c1:9d:ca:96:cf:ca:28:c6:91:
         2d:0c:bc:58:2a:90:92:0c:37:0f:75:0a:7e:68:cf:0c:44:08:
         4e:29:52:dc:b8:d5:85:1d:94:8d:d1:c1:f8:a2:40:72:00:b5:
         24:16:21:da:32:e5:23:71:c2:59:ca:53:a2:e0:3c:b5:af:8b:
         80:25:0c:b4:92:db:98:ce:0b:48:b6:b6:36:50:a7:4a:33:93:
         a1:cb:7d:a7:b4:fe:52:25:e9:c2:dc:43:24:34:91:55:c5:8e:
         a3:fc:31:65
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org