Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a3230303a3a2f34302d3430203d3e20323633303833.roa
File:                     323830313a62363a3230303a3a2f34302d3430203d3e20323633303833.roa (raw, json)
Hash identifier:          Ca5IX1bOlha2pQhzyqL4Pusp2P15zTjI7Qaiih3+NHg=
Subject key identifier:   C2:8A:9A:DB:58:F7:EB:F1:C0:13:B1:20:21:9B:70:62:9E:17:BF:9B
Certificate issuer:       /CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
Certificate serial:       4E01A00F1D094160531AF8C983DF198B0A8653F0
Authority key identifier: 14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a3230303a3a2f34302d3430203d3e20323633303833.roa
Signing time:             Wed 25 Jan 2023 19:44:20 +0000
ROA not before:           Wed 25 Jan 2023 19:39:20 +0000
ROA not after:            Wed 24 Jan 2024 19:44:20 +0000
asID:                     263083
IP address blocks:        2801:b6:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:01:a0:0f:1d:09:41:60:53:1a:f8:c9:83:df:19:8b:0a:86:53:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=142F10DB203FAFE2CD170E5639DCA6B17B056BA3
        Validity
            Not Before: Jan 25 19:39:20 2023 GMT
            Not After : Jan 24 19:44:20 2024 GMT
        Subject: CN=C28A9ADB58F7EBF1C013B120219B70629E17BF9B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:cb:6d:ce:fc:36:90:83:4c:7b:e2:71:d0:1e:
                    9d:6e:ae:f2:59:c1:2a:f7:ba:12:d0:a9:48:0a:16:
                    b7:e8:d5:65:f6:50:ff:20:cd:42:d6:dc:a9:3a:90:
                    eb:29:62:8d:98:a5:b6:bc:1d:ce:53:dc:11:60:e0:
                    48:95:03:d7:4e:e6:f8:98:a3:14:b5:17:9a:98:6d:
                    d9:ab:85:68:9b:8c:3c:cc:b0:cb:67:7b:f5:fc:52:
                    86:2f:3d:d5:d4:af:7a:8c:db:7d:4f:8d:ce:5c:af:
                    d2:1f:4d:e5:65:a5:8b:0c:38:50:6c:14:b4:bf:4e:
                    56:83:80:21:68:6f:c5:6f:c4:8e:01:da:dc:d5:48:
                    cc:4b:21:a5:ce:c7:73:aa:ea:1e:fc:f6:70:38:1c:
                    6c:e2:92:c1:d2:f4:f5:e7:4f:11:db:3e:52:8e:9c:
                    27:ab:69:b0:37:ae:75:2e:19:c1:db:2f:10:f8:fd:
                    b4:e5:ed:b8:71:c9:9c:51:c5:ec:61:45:d1:08:8b:
                    ef:d2:ca:c8:a9:59:ef:23:b4:a6:8d:10:0b:bf:08:
                    29:5e:f2:a6:79:f9:14:65:a6:c8:ad:4c:c4:bf:41:
                    4d:72:b4:58:78:b7:dc:f4:a2:12:2e:27:bb:63:3c:
                    e5:46:7e:b7:73:38:6b:5c:de:13:b3:ee:29:77:35:
                    7c:6f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:8A:9A:DB:58:F7:EB:F1:C0:13:B1:20:21:9B:70:62:9E:17:BF:9B
            X509v3 Authority Key Identifier:
                keyid:14:2F:10:DB:20:3F:AF:E2:CD:17:0E:56:39:DC:A6:B1:7B:05:6B:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/142F10DB203FAFE2CD170E5639DCA6B17B056BA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NnZ82a2kJvb9fwaHgjJVoobMV7WnXK9HD4sPx1RTm9b/0/323830313a62363a3230303a3a2f34302d3430203d3e20323633303833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2801:b6:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         b4:6e:69:3d:91:ce:5c:ac:8b:68:66:53:a4:08:47:53:78:de:
         20:a4:12:3a:fe:5d:86:c0:2f:1c:a0:39:30:ce:e9:35:f6:80:
         23:8e:22:d3:ef:14:0f:85:06:3c:9c:74:ea:e7:a4:ff:1e:bc:
         cc:7c:bd:f0:65:a4:08:fa:44:e1:4b:f3:be:e1:52:65:5c:52:
         6c:e1:34:ee:b7:36:09:d7:eb:e0:6d:b1:f6:d5:11:d1:71:f4:
         4e:46:72:3a:a4:f0:2a:93:d8:41:91:d7:2d:f7:4a:dd:b4:6e:
         98:55:fd:f9:86:8f:db:b2:0b:92:27:d5:a4:66:79:94:c5:2a:
         a7:1b:2b:9f:59:b3:67:93:43:23:32:0c:d6:e1:1a:5f:fb:4a:
         d5:7c:bd:43:87:4b:f6:28:62:02:92:aa:02:31:dd:60:5e:2f:
         1b:d1:25:92:5b:d0:e9:57:00:b2:32:c6:85:30:69:db:cd:63:
         99:6f:0d:9e:c8:fb:85:c9:47:e6:47:bc:b7:fc:55:7f:89:97:
         c8:bb:e1:b0:c9:4f:f3:b0:1e:87:4c:b3:a4:40:61:3e:5b:cf:
         25:1a:19:34:77:0d:7c:49:c3:9a:27:03:3e:24:a8:c8:78:08:
         7d:74:64:8d:bb:bc:80:70:90:0a:a3:a9:67:8b:c0:65:20:de:
         81:42:30:3d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:44 2024 by rpki-client on console-ams.rpki-client.org