Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/323830343a6531303a343030303a3a2f33342d3334203d3e203532353430.roa
File:                     323830343a6531303a343030303a3a2f33342d3334203d3e203532353430.roa (raw, json)
Hash identifier:          fOkO1YXrbihnyYFVPG+AhPqsiocqO4lfxkP9EUPXLVI=
Subject key identifier:   2C:A8:08:F9:4D:1F:27:CB:78:52:EA:22:96:17:B5:91:80:CE:20:B4
Certificate issuer:       /CN=8C004D33839E9718AC5A43521533E7535258D419
Certificate serial:       0744FFC2ACA2FAB468183A46E6F0D22D679FB485
Authority key identifier: 8C:00:4D:33:83:9E:97:18:AC:5A:43:52:15:33:E7:53:52:58:D4:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C004D33839E9718AC5A43521533E7535258D419.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/323830343a6531303a343030303a3a2f33342d3334203d3e203532353430.roa
Signing time:             Mon 18 Mar 2024 21:16:55 +0000
ROA not before:           Mon 18 Mar 2024 21:11:55 +0000
ROA not after:            Mon 17 Mar 2025 21:16:55 +0000
asID:                     52540
IP address blocks:        2804:e10:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:44:ff:c2:ac:a2:fa:b4:68:18:3a:46:e6:f0:d2:2d:67:9f:b4:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8C004D33839E9718AC5A43521533E7535258D419
        Validity
            Not Before: Mar 18 21:11:55 2024 GMT
            Not After : Mar 17 21:16:55 2025 GMT
        Subject: CN=2CA808F94D1F27CB7852EA229617B59180CE20B4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:34:f3:1e:88:4c:45:10:14:78:d7:67:b1:2f:
                    af:85:80:5a:b4:b7:08:41:05:54:aa:a4:7c:63:f9:
                    c1:b1:30:8f:08:45:de:99:48:c2:c6:47:af:30:5b:
                    dd:39:da:0a:ef:85:1b:8f:8b:b5:0e:df:14:a1:a6:
                    dd:83:68:ae:f3:97:3f:19:a3:4f:db:39:7b:53:71:
                    19:8a:f9:3d:e9:8d:a5:cf:6f:c0:88:f9:80:94:ca:
                    bc:fe:34:e1:f0:27:8c:a8:5f:a8:b1:e8:d1:85:12:
                    df:5c:89:8a:7d:5f:31:1f:49:bb:ee:61:d2:78:94:
                    c0:36:d8:ff:8d:62:8e:16:04:89:13:82:24:7c:d7:
                    8d:1c:13:06:b7:e2:81:e0:2c:d8:3f:e8:2c:55:6f:
                    5b:bf:b5:b4:fa:06:1d:29:10:21:fc:dc:16:09:93:
                    57:91:5a:72:8f:b5:0f:98:92:1d:fa:1e:e2:11:8e:
                    bc:dd:3d:64:38:0c:3f:4b:6b:cb:f2:da:80:20:eb:
                    81:63:c3:31:ea:b8:fe:9c:e6:ac:b1:fd:01:00:01:
                    16:12:9a:cf:4a:80:70:82:d3:f9:e3:7c:28:f4:8f:
                    f5:c9:99:ac:34:1a:04:11:08:d1:97:90:8a:e1:02:
                    38:86:66:bb:f6:08:e1:f2:a8:a5:80:d0:b9:73:f3:
                    cc:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2C:A8:08:F9:4D:1F:27:CB:78:52:EA:22:96:17:B5:91:80:CE:20:B4
            X509v3 Authority Key Identifier:
                keyid:8C:00:4D:33:83:9E:97:18:AC:5A:43:52:15:33:E7:53:52:58:D4:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/8C004D33839E9718AC5A43521533E7535258D419.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8C004D33839E9718AC5A43521533E7535258D419.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4K1jM26iNfrFMY2pwGW2u1JLJDmTeswF1U8Gyi7bDAV5/1/323830343a6531303a343030303a3a2f33342d3334203d3e203532353430.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e10:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         aa:ad:52:92:9a:9c:8d:78:07:29:06:7c:76:d1:2d:2b:26:87:
         08:fa:14:09:84:38:96:ae:12:c5:03:90:93:32:36:61:e5:eb:
         ae:83:2f:78:f7:51:ba:7a:cf:2d:38:0f:17:ad:61:15:5a:c3:
         de:d5:1a:83:bc:4c:b0:1f:81:4f:11:00:8f:3f:c9:18:81:1a:
         d1:fb:57:8b:7c:20:c4:cd:e2:79:39:2a:83:fa:ba:6a:eb:42:
         93:5a:f8:2b:3e:f7:6f:ec:57:0a:97:1e:82:d4:e4:3a:12:47:
         a6:cc:b4:47:dc:d7:f2:04:e4:46:11:ff:ea:b0:cc:2d:6e:a6:
         fc:91:d5:a5:f6:5f:ef:0a:eb:24:f8:a5:97:f8:83:1d:23:54:
         c4:5b:e5:70:6b:b0:08:e5:eb:9f:02:e8:12:11:0c:8e:7d:ba:
         94:62:ef:17:54:cf:3f:8a:bd:2a:27:49:59:26:87:87:e6:3a:
         43:a8:a9:40:82:05:09:c8:72:60:43:cd:7e:6d:45:da:30:b5:
         51:47:95:6a:72:37:a2:2b:1b:5a:6e:58:b3:ad:33:03:32:93:
         46:e0:ca:72:21:7b:c3:fa:2d:bd:80:79:86:7c:53:43:c8:6b:
         2b:6b:57:ba:a6:06:ab:ba:d5:1d:7e:32:89:a6:f6:b5:2f:77:
         48:97:a1:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org