Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3336203d3e20323632353530.roa
File:                     323830343a323865303a3a2f33322d3336203d3e20323632353530.roa (raw, json)
Hash identifier:          m87sRjD7UBRnqnFbfYCEiy5+jaVMBLzksxebbsvxRKs=
Subject key identifier:   C9:25:07:D6:0C:C2:59:8A:F8:16:88:8F:1D:55:5D:5F:54:43:17:FE
Certificate issuer:       /CN=E0F50BC836788B2DEEAD1BAFAB381129AAEFC524
Certificate serial:       40904FFBAC63A3BFA24A0C825ABD773093544837
Authority key identifier: E0:F5:0B:C8:36:78:8B:2D:EE:AD:1B:AF:AB:38:11:29:AA:EF:C5:24
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0F50BC836788B2DEEAD1BAFAB381129AAEFC524.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3336203d3e20323632353530.roa
Signing time:             Mon 18 Dec 2023 12:32:32 +0000
ROA not before:           Mon 18 Dec 2023 12:27:32 +0000
ROA not after:            Mon 16 Dec 2024 12:32:32 +0000
asID:                     262550
IP address blocks:        2804:28e0::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:90:4f:fb:ac:63:a3:bf:a2:4a:0c:82:5a:bd:77:30:93:54:48:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E0F50BC836788B2DEEAD1BAFAB381129AAEFC524
        Validity
            Not Before: Dec 18 12:27:32 2023 GMT
            Not After : Dec 16 12:32:32 2024 GMT
        Subject: CN=C92507D60CC2598AF816888F1D555D5F544317FE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:c8:d1:28:48:5d:45:da:96:40:68:4e:ed:f5:
                    be:34:e5:65:54:3b:66:17:a2:9e:13:0b:10:74:5a:
                    e7:e7:96:6a:40:cf:1b:7f:62:7b:e1:2c:8d:2a:12:
                    1a:08:ad:8e:da:7e:15:12:fd:20:af:1a:78:24:5d:
                    07:2e:b0:04:06:14:88:ec:cc:a9:f8:c4:91:e1:63:
                    8d:bd:f4:17:14:16:68:73:c9:2e:e6:1c:41:ca:6e:
                    25:dd:35:43:be:b6:dd:b4:2c:64:3a:80:eb:b8:8d:
                    5b:2d:e1:df:f6:18:64:c8:bc:85:dc:29:35:da:b1:
                    a0:fb:9a:8f:4a:a0:8b:61:a7:f9:c2:4f:8d:f7:cb:
                    d8:c3:e0:0b:bc:ce:3e:c8:43:1e:56:e5:68:3a:cb:
                    1b:56:37:b8:65:f7:23:81:8f:f0:d0:10:5e:22:91:
                    76:8f:f1:ed:77:4c:e2:16:46:37:36:7e:25:9e:e5:
                    72:31:37:3c:ce:76:26:a2:e6:a7:a2:11:57:d0:c3:
                    f4:ee:bf:fa:f4:7a:bc:dd:4b:8a:47:e7:29:7e:49:
                    44:77:38:1f:61:13:ee:89:8d:8b:15:a7:1e:4d:90:
                    79:60:05:50:de:8f:76:1a:b7:eb:c6:c8:b0:7b:fb:
                    a3:e9:6a:45:6b:a3:5f:75:ca:07:8c:48:da:d7:e0:
                    57:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C9:25:07:D6:0C:C2:59:8A:F8:16:88:8F:1D:55:5D:5F:54:43:17:FE
            X509v3 Authority Key Identifier:
                keyid:E0:F5:0B:C8:36:78:8B:2D:EE:AD:1B:AF:AB:38:11:29:AA:EF:C5:24

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/E0F50BC836788B2DEEAD1BAFAB381129AAEFC524.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E0F50BC836788B2DEEAD1BAFAB381129AAEFC524.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5ESpfjQFomJQ8eFhRQmrAhU1CS7PeJsXMWkHRTbsUozd/0/323830343a323865303a3a2f33322d3336203d3e20323632353530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:dd:61:01:46:b4:cb:5e:93:de:68:af:59:57:ba:1d:82:6a:
         bb:c0:30:63:b1:00:e5:06:2b:0a:a3:a7:3a:f6:1c:30:de:7a:
         c3:db:f7:2f:cd:6d:8b:3c:79:4b:59:e1:a5:5a:92:6c:4b:18:
         21:bf:d2:ef:2f:04:30:25:a4:57:a5:3e:d2:72:60:60:37:5e:
         90:72:3e:01:ab:e4:70:a1:cc:e6:27:fa:64:56:08:4b:94:d5:
         1a:46:77:d7:58:44:a2:91:5b:67:33:12:60:0d:f5:eb:83:8e:
         4b:3e:60:9e:26:53:d2:84:d8:75:7f:7c:bb:67:a4:8f:f3:a4:
         b7:24:fc:02:60:7f:2b:b5:ce:2a:c2:39:8d:78:72:58:e0:72:
         00:9b:99:b7:2f:f8:8d:e9:5d:d1:e9:c1:27:61:e5:18:6c:4d:
         7a:a9:25:ce:4f:e5:ec:91:2b:cd:99:9b:79:1f:47:9a:9b:da:
         4e:7f:53:af:c0:56:88:f5:1b:91:02:78:4d:66:eb:ab:04:de:
         04:49:87:e6:d9:eb:3d:3c:c5:da:ba:dd:0e:0f:93:10:a1:5f:
         0c:68:c1:04:66:2c:08:1f:95:de:2c:0d:10:ad:11:5b:01:f3:
         36:7a:20:94:a9:47:db:c8:c3:b8:94:02:68:fa:cb:5f:f6:b1:
         65:a7:2d:31
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:54 2024 by rpki-client on console-ams.rpki-client.org