Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/323830343a333939633a653030313a3a2f34382d3438203d3e20323636303339.roa
File:                     323830343a333939633a653030313a3a2f34382d3438203d3e20323636303339.roa (raw, json)
Hash identifier:          jwlW3MQWOboFriF+I4E+aM8WJVTgTUbPyuJ52y6nlpw=
Subject key identifier:   82:2D:6F:B7:07:50:42:B8:62:49:6C:6E:99:22:02:96:7D:F9:BB:66
Certificate issuer:       /CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
Certificate serial:       1A5301B69D2B1A0B756D434CA98B1A2212CD2A61
Authority key identifier: 10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/323830343a333939633a653030313a3a2f34382d3438203d3e20323636303339.roa
Signing time:             Mon 04 Jul 2022 14:26:17 +0000
ROA not before:           Mon 04 Jul 2022 14:21:17 +0000
ROA not after:            Mon 03 Jul 2023 14:26:17 +0000
asID:                     266039
IP address blocks:        2804:399c:e001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:53:01:b6:9d:2b:1a:0b:75:6d:43:4c:a9:8b:1a:22:12:cd:2a:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
        Validity
            Not Before: Jul  4 14:21:17 2022 GMT
            Not After : Jul  3 14:26:17 2023 GMT
        Subject: CN=822D6FB7075042B862496C6E992202967DF9BB66
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:57:31:bb:bb:35:72:da:3b:be:ab:d6:24:0a:
                    7b:9c:74:b0:fe:3a:ca:d6:3f:69:95:82:59:99:69:
                    a3:fc:5a:a2:76:ec:2b:82:52:3e:93:f6:df:39:64:
                    03:b0:dc:06:38:d6:02:a0:26:dd:8e:36:34:4b:58:
                    1b:bf:15:a4:99:0c:28:3d:c8:3d:b1:33:8f:f5:69:
                    78:25:26:92:45:f4:94:0c:17:47:b6:22:3e:6d:ab:
                    02:2f:b2:52:01:80:30:77:68:d1:f3:3f:0f:02:e6:
                    c7:c8:ca:40:04:31:c6:1c:15:10:28:0e:f8:8a:93:
                    f8:23:46:7b:98:90:22:b8:6f:9a:d2:79:e2:06:f8:
                    f2:29:8c:47:2c:bd:bb:05:f9:9f:93:a7:81:78:ae:
                    61:bf:2a:73:76:ee:4b:27:ef:6a:11:2e:b8:89:f6:
                    b2:25:b4:66:ba:1e:c4:5d:96:13:bf:e4:af:e1:08:
                    d8:d7:69:73:a1:9a:57:c2:a2:60:ac:7c:87:de:c3:
                    de:b5:92:e2:f1:58:87:96:97:80:1a:3c:fb:ba:1c:
                    db:b3:54:ed:6c:c2:5c:3e:0e:26:e3:c5:d7:ff:ca:
                    c3:88:e0:cf:96:5b:de:e3:92:6e:7b:6a:3a:ae:ef:
                    00:ce:48:58:8e:4c:54:18:4a:cb:52:5a:5a:90:55:
                    c7:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                82:2D:6F:B7:07:50:42:B8:62:49:6C:6E:99:22:02:96:7D:F9:BB:66
            X509v3 Authority Key Identifier:
                keyid:10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/323830343a333939633a653030313a3a2f34382d3438203d3e20323636303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:399c:e001::/48

    Signature Algorithm: sha256WithRSAEncryption
         c4:39:ce:56:52:16:3a:6d:30:3f:ae:58:a9:5c:e9:79:44:f0:
         70:2e:22:91:69:48:fa:c6:fe:9e:70:e2:d1:f8:a3:1f:2b:05:
         ea:d1:05:1a:b9:07:f7:a2:6f:0e:39:3a:29:38:dc:27:1e:75:
         9d:28:26:a5:00:91:14:b5:c7:b7:40:0f:34:71:77:04:2c:c0:
         df:f0:a2:9e:ac:c1:62:f5:6b:b4:3c:60:94:da:a9:9b:0b:41:
         c4:85:a3:53:02:00:86:13:f6:4e:06:70:a6:16:09:b1:41:97:
         39:72:c2:e7:dc:f1:93:60:85:ed:30:cf:38:a2:ef:db:8f:6d:
         81:7c:b7:b3:1e:36:0b:f4:2d:15:b2:5d:a5:58:44:71:39:b5:
         2e:74:25:b2:f7:79:71:f4:ed:ac:8d:63:93:84:51:23:71:1b:
         38:2b:63:0d:f3:48:1b:86:61:13:c5:d0:ae:fc:60:0e:be:90:
         dc:cd:3b:76:5c:58:20:10:5b:62:35:e8:ab:14:45:b6:de:14:
         78:00:20:6e:1d:c2:ed:e9:f5:d4:19:03:5c:47:67:3a:ba:16:
         89:64:7b:4d:bf:41:23:92:4d:7b:22:89:c3:94:62:9c:31:26:
         5e:7c:c1:2d:52:40:b6:d2:aa:31:bf:27:69:1f:9a:d8:75:e7:
         11:ee:a6:7d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org