Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a31383a3a2f34382d3438203d3e20323637303738.roa
File:                     323830343a343764303a31383a3a2f34382d3438203d3e20323637303738.roa (raw, json)
Hash identifier:          AvI9pQWa1Wp4UlHRDk9JiTivHSFZaLKHmi36tU2UFCU=
Subject key identifier:   BB:02:48:58:AB:B3:0F:E6:68:0A:18:23:85:D7:62:94:DC:7B:A7:0A
Certificate issuer:       /CN=8FF1E15A25C373DE442EEB81BE02B51539B4F806
Certificate serial:       6ADF5B57A8963F360FAE966CE4EBEFEC5C7639AA
Authority key identifier: 8F:F1:E1:5A:25:C3:73:DE:44:2E:EB:81:BE:02:B5:15:39:B4:F8:06
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FF1E15A25C373DE442EEB81BE02B51539B4F806.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a31383a3a2f34382d3438203d3e20323637303738.roa
Signing time:             Thu 15 Feb 2024 20:44:29 +0000
ROA not before:           Thu 15 Feb 2024 20:39:29 +0000
ROA not after:            Thu 13 Feb 2025 20:44:29 +0000
asID:                     267078
IP address blocks:        2804:47d0:18::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:df:5b:57:a8:96:3f:36:0f:ae:96:6c:e4:eb:ef:ec:5c:76:39:aa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8FF1E15A25C373DE442EEB81BE02B51539B4F806
        Validity
            Not Before: Feb 15 20:39:29 2024 GMT
            Not After : Feb 13 20:44:29 2025 GMT
        Subject: CN=3082010A0282010100BD070C4FC44B28F4B77D85370870B509A04EDB737C3D0A1B02325709E9E199B661E487FA70976F46CDA57F14EEB0F01FF56592946A3DB1C7676AFA73C7C5914C8F7A85E3EF0A33AF6B55C78E8AEAAE45C5632618F6720BF74C2A95710907681DDEA163E5786212C350392E00E0CFDAF5347D0BCC2DD68C109C233AC8DE385A04EA0F82F2CE35EB990983B1D8C4FEDA2DCAA830706EF600F1AAB3627064BA10431AEEE0F5BE5640CD5687767729D6E1CCC41DEB06BD56A46DB6839468E67F6CAA59CD6E3080333D36B7947D940E5FC0C5D0E9F0AE370680D39EA0905A82AC648DE5BD4F9C98052D1369AEA985C5F5FB202DCEA7E8061231AE588364092C35DEAF0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:07:0c:4f:c4:4b:28:f4:b7:7d:85:37:08:70:
                    b5:09:a0:4e:db:73:7c:3d:0a:1b:02:32:57:09:e9:
                    e1:99:b6:61:e4:87:fa:70:97:6f:46:cd:a5:7f:14:
                    ee:b0:f0:1f:f5:65:92:94:6a:3d:b1:c7:67:6a:fa:
                    73:c7:c5:91:4c:8f:7a:85:e3:ef:0a:33:af:6b:55:
                    c7:8e:8a:ea:ae:45:c5:63:26:18:f6:72:0b:f7:4c:
                    2a:95:71:09:07:68:1d:de:a1:63:e5:78:62:12:c3:
                    50:39:2e:00:e0:cf:da:f5:34:7d:0b:cc:2d:d6:8c:
                    10:9c:23:3a:c8:de:38:5a:04:ea:0f:82:f2:ce:35:
                    eb:99:09:83:b1:d8:c4:fe:da:2d:ca:a8:30:70:6e:
                    f6:00:f1:aa:b3:62:70:64:ba:10:43:1a:ee:e0:f5:
                    be:56:40:cd:56:87:76:77:29:d6:e1:cc:c4:1d:eb:
                    06:bd:56:a4:6d:b6:83:94:68:e6:7f:6c:aa:59:cd:
                    6e:30:80:33:3d:36:b7:94:7d:94:0e:5f:c0:c5:d0:
                    e9:f0:ae:37:06:80:d3:9e:a0:90:5a:82:ac:64:8d:
                    e5:bd:4f:9c:98:05:2d:13:69:ae:a9:85:c5:f5:fb:
                    20:2d:ce:a7:e8:06:12:31:ae:58:83:64:09:2c:35:
                    de:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BB:02:48:58:AB:B3:0F:E6:68:0A:18:23:85:D7:62:94:DC:7B:A7:0A
            X509v3 Authority Key Identifier:
                keyid:8F:F1:E1:5A:25:C3:73:DE:44:2E:EB:81:BE:02:B5:15:39:B4:F8:06

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/8FF1E15A25C373DE442EEB81BE02B51539B4F806.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8FF1E15A25C373DE442EEB81BE02B51539B4F806.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/51pWNsyi1szHmRyh9qDneyiYHPnnKHdjXSi71PRy2jac/0/323830343a343764303a31383a3a2f34382d3438203d3e20323637303738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:47d0:18::/48

    Signature Algorithm: sha256WithRSAEncryption
         55:6a:12:d0:9c:a7:07:b0:b9:21:62:b6:91:3f:03:57:a4:63:
         0f:b4:38:2b:a6:6b:59:16:60:88:a5:2e:2c:1c:45:f7:68:2b:
         88:f4:48:90:7b:59:33:cc:5e:19:e3:be:46:02:45:cf:3c:7f:
         05:f4:1d:90:e1:51:89:68:37:7d:7b:5c:18:91:1d:c6:6d:7a:
         d5:72:d9:d4:a8:c4:e5:a7:e8:c9:4b:52:22:db:67:40:1e:52:
         47:e4:aa:63:16:f0:1d:ee:dc:71:93:c6:2b:50:6a:28:e1:76:
         45:da:d5:da:13:3f:3c:46:d7:07:82:33:e7:81:6a:8c:73:04:
         ab:a3:ca:94:89:c0:46:03:f9:3f:00:a0:a4:5b:54:be:e1:11:
         26:c5:8e:e7:fa:5a:45:b8:18:de:51:e2:31:21:97:bb:2e:fd:
         aa:63:cc:ce:d3:14:0d:cf:00:64:fa:c4:28:b1:bd:3e:97:3d:
         4a:78:aa:a7:1e:25:6a:80:4f:24:7a:8a:d1:b4:a1:41:73:e2:
         3e:5e:18:4c:09:a8:66:64:15:93:30:dd:da:a7:d1:0c:f2:86:
         9b:05:45:1b:59:a5:60:40:93:0a:0d:8c:ec:fc:31:89:f0:03:
         02:72:73:73:b1:6c:0b:be:fe:0f:cd:0f:5e:69:4c:d0:4f:e1:
         10:54:61:85
-----BEGIN CERTIFICATE-----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==
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org