Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a3a2f33322d3332203d3e20323730383635.roa
File:                     323830343a373261303a3a2f33322d3332203d3e20323730383635.roa (raw, json)
Hash identifier:          C+6xuVrn38QyI4rqtLPr/ou2bkHFEVmMoiHZbkv8P5E=
Subject key identifier:   58:63:9F:A2:82:59:48:F6:20:43:F7:54:B0:DA:CB:15:EF:65:12:DB
Certificate issuer:       /CN=598EDA28EF65B1BCC35DF9638C6F24F5BA562C51
Certificate serial:       4D224D408E0CE2A702F1EA724A5C912E728BDFA3
Authority key identifier: 59:8E:DA:28:EF:65:B1:BC:C3:5D:F9:63:8C:6F:24:F5:BA:56:2C:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/598EDA28EF65B1BCC35DF9638C6F24F5BA562C51.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a3a2f33322d3332203d3e20323730383635.roa
Signing time:             Wed 04 May 2022 14:41:04 +0000
ROA not before:           Wed 04 May 2022 14:36:04 +0000
ROA not after:            Wed 03 May 2023 14:41:04 +0000
asID:                     270865
IP address blocks:        2804:72a0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:22:4d:40:8e:0c:e2:a7:02:f1:ea:72:4a:5c:91:2e:72:8b:df:a3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=598EDA28EF65B1BCC35DF9638C6F24F5BA562C51
        Validity
            Not Before: May  4 14:36:04 2022 GMT
            Not After : May  3 14:41:04 2023 GMT
        Subject: CN=58639FA2825948F62043F754B0DACB15EF6512DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:6d:23:35:d2:1a:ca:9c:63:77:8a:f2:e3:b5:
                    13:20:19:88:27:a4:e8:78:62:60:8e:6a:fd:ab:72:
                    a8:c2:65:cf:83:f2:0b:34:9e:94:4b:e2:07:a7:61:
                    43:ba:bd:a8:b0:dc:ca:84:2d:0f:da:d3:67:c2:57:
                    7e:5b:9d:3d:3d:8a:de:f4:8f:01:06:0b:a2:12:18:
                    ec:7b:aa:a8:5d:0d:53:f8:d9:7f:6b:9e:bc:62:79:
                    eb:49:29:19:d5:45:00:3a:94:00:70:f9:e8:57:05:
                    e9:57:9b:2c:2b:b9:f2:da:38:0a:67:61:88:19:e5:
                    0e:50:1f:32:81:ec:dc:ef:99:72:2e:c4:ee:5f:da:
                    98:5f:a5:be:12:a7:74:05:b4:3d:ae:f3:69:61:eb:
                    f1:ae:63:40:ee:c4:a5:4e:09:b2:e9:c8:f6:8a:de:
                    81:cd:28:0e:1a:6e:20:67:08:b1:9d:42:df:32:15:
                    e3:fe:2d:1f:94:9c:70:7b:7e:35:99:cc:35:fe:26:
                    91:1f:81:0b:0d:cf:78:ba:ac:f1:7a:ef:22:fc:48:
                    f5:6e:6c:60:ba:a5:07:a3:99:e2:78:fa:b0:88:02:
                    47:d7:94:23:7e:64:9f:3b:db:79:f1:88:83:0a:44:
                    d4:bd:f9:66:8e:48:6b:a5:ab:70:f0:e1:32:e4:ed:
                    48:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:63:9F:A2:82:59:48:F6:20:43:F7:54:B0:DA:CB:15:EF:65:12:DB
            X509v3 Authority Key Identifier:
                keyid:59:8E:DA:28:EF:65:B1:BC:C3:5D:F9:63:8C:6F:24:F5:BA:56:2C:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/598EDA28EF65B1BCC35DF9638C6F24F5BA562C51.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/598EDA28EF65B1BCC35DF9638C6F24F5BA562C51.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nLBD94rQ6NJ5hYDSQ4f9MT9pkqadfu9FBsawSVVmqNs/0/323830343a373261303a3a2f33322d3332203d3e20323730383635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         28:5c:47:a0:28:b4:6b:6f:d9:11:cc:e2:eb:bd:ab:3a:82:45:
         b6:42:9b:19:12:7b:68:51:06:5b:d7:8e:5a:f8:d8:1b:e9:c0:
         d4:5d:b7:06:13:b4:e6:ad:8f:cb:a1:86:8d:97:4b:5e:32:11:
         a0:c7:06:5c:a5:c8:7b:ec:8f:f5:46:eb:73:56:21:53:e0:c1:
         60:38:f7:4e:c1:ed:f4:6f:80:af:f0:f3:8e:49:51:39:cb:82:
         6d:e7:99:b2:a2:c1:2f:42:a6:67:cf:0a:eb:80:99:50:00:b3:
         b3:d5:7f:a1:c2:29:93:8c:a2:7d:57:bc:03:c4:f7:07:f2:8d:
         ea:b9:a0:9f:35:e1:b0:5e:70:c2:8f:6b:dd:b4:12:6d:f7:42:
         b3:67:3c:07:4a:a7:4c:e1:df:74:73:65:eb:95:bc:1c:12:1c:
         e2:35:2d:6f:b1:00:5c:54:ac:b5:89:b7:13:c0:18:84:38:2e:
         fc:59:4c:9a:7f:cb:b1:28:49:25:0b:48:f6:00:27:d2:68:b8:
         9e:2c:61:90:15:2b:d0:3d:80:51:e0:1d:01:cb:fb:55:86:12:
         d0:0f:e3:c7:d0:b5:c6:e1:02:cc:39:1b:ef:38:a3:f4:86:00:
         3d:dc:f4:1d:8d:af:ee:da:27:36:03:c3:ac:ba:d1:20:9a:bb:
         92:b6:d8:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org