Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/323830343a333939633a653030353a3a2f34382d3438203d3e20323636303339.roa
File:                     323830343a333939633a653030353a3a2f34382d3438203d3e20323636303339.roa (raw, json)
Hash identifier:          jkInvuKBaw87NyTVqCRGyNmsegSjfTD4r8AoxBoqW0s=
Subject key identifier:   0A:0A:46:9E:93:91:2D:D8:4D:70:87:DD:7B:42:19:59:8A:2B:98:F0
Certificate issuer:       /CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
Certificate serial:       4DE75B24813BDCAE89EBEAD3B8C03EFDD3CE93EA
Authority key identifier: 10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/323830343a333939633a653030353a3a2f34382d3438203d3e20323636303339.roa
Signing time:             Mon 04 Jul 2022 14:26:08 +0000
ROA not before:           Mon 04 Jul 2022 14:21:08 +0000
ROA not after:            Mon 03 Jul 2023 14:26:08 +0000
asID:                     266039
IP address blocks:        2804:399c:e005::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:e7:5b:24:81:3b:dc:ae:89:eb:ea:d3:b8:c0:3e:fd:d3:ce:93:ea
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=10968BD5A3F23304B30A228DAF88BF92B5DC5B23
        Validity
            Not Before: Jul  4 14:21:08 2022 GMT
            Not After : Jul  3 14:26:08 2023 GMT
        Subject: CN=0A0A469E93912DD84D7087DD7B4219598A2B98F0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:69:6a:a8:cc:67:b7:a7:4d:7b:8e:fd:78:f0:
                    69:90:d8:18:46:36:b9:a6:9d:49:ef:2d:10:e9:55:
                    9c:c4:14:d4:ed:6a:36:6e:30:3c:6c:04:0b:5d:63:
                    1d:5c:51:46:9f:37:63:df:22:65:89:ed:b2:40:98:
                    2c:0c:12:83:6b:4c:77:c0:87:c7:69:68:69:9d:b2:
                    13:92:ea:d5:09:ba:94:2d:5f:9d:30:c2:3b:f8:50:
                    97:f1:33:a3:e5:ba:c4:a2:48:1a:11:96:ad:b3:0b:
                    1f:fc:de:cd:80:f9:31:98:52:77:c1:89:16:ba:8f:
                    50:37:96:66:9e:97:36:f1:ff:b4:f2:6e:ff:c4:1f:
                    13:d8:c6:7c:c3:7c:f1:cf:c1:82:71:4f:af:0c:c7:
                    04:85:a9:bc:ab:20:20:50:91:a4:09:79:bc:48:8e:
                    41:01:51:0b:51:aa:38:03:80:3b:bb:8c:ff:3e:45:
                    f7:d6:aa:fc:b6:c5:d1:ac:ef:f6:41:78:99:4e:78:
                    a6:70:97:71:00:64:f4:2f:fd:d7:3f:28:f5:a2:94:
                    45:85:07:63:82:16:75:46:e4:20:21:45:e0:bf:11:
                    a0:3a:db:70:a1:2f:40:7e:08:30:d1:4f:b8:8f:16:
                    ba:71:79:2b:07:70:30:07:e8:03:6f:88:56:20:ba:
                    8c:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:0A:46:9E:93:91:2D:D8:4D:70:87:DD:7B:42:19:59:8A:2B:98:F0
            X509v3 Authority Key Identifier:
                keyid:10:96:8B:D5:A3:F2:33:04:B3:0A:22:8D:AF:88:BF:92:B5:DC:5B:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/10968BD5A3F23304B30A228DAF88BF92B5DC5B23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4WYdztp2BNLun9XZfbxszWMQwJCsJ38Mj4NXvJvxZydn/1/323830343a333939633a653030353a3a2f34382d3438203d3e20323636303339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:399c:e005::/48

    Signature Algorithm: sha256WithRSAEncryption
         c8:41:52:92:70:0a:f2:3f:c5:a8:91:3a:ef:f2:1f:d9:89:80:
         b0:b6:41:44:1d:9c:da:94:b1:ee:41:fa:80:bf:98:d9:61:00:
         c7:6c:15:92:36:6a:76:ca:a0:8c:6f:eb:cb:43:21:88:08:34:
         23:81:6c:a6:f7:a2:eb:d9:08:75:d7:85:fa:f3:77:b0:da:e7:
         f1:84:a2:4f:df:61:e7:94:c0:47:69:0f:bd:13:d1:e3:a2:15:
         85:f5:28:58:b7:f0:65:df:6f:0c:66:a2:bc:75:1d:5a:65:5e:
         9b:67:23:0e:50:12:a2:60:a6:33:81:00:e5:16:c7:43:96:e8:
         8b:25:27:ba:68:58:f8:b2:52:8b:a5:87:73:da:42:19:40:03:
         bf:c2:96:42:a1:31:dd:ba:90:9a:6c:6b:9d:7c:6c:fd:49:cc:
         9d:72:6e:f5:ee:ff:fd:0f:9e:3c:85:bf:b5:10:5e:ec:93:a9:
         e1:97:42:49:0b:fc:9a:0f:95:d8:17:77:d0:23:f2:b9:3d:97:
         10:b1:4f:09:68:c6:12:c3:5c:af:a2:88:62:3e:0b:f4:78:a9:
         01:a1:c1:e7:9b:92:d8:7b:98:f0:41:c6:f1:e6:67:05:8b:f4:
         20:5e:65:a8:89:27:a6:9f:c7:75:ae:0e:51:f0:2b:49:c8:9d:
         78:39:d9:df
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org