Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa
File:                     323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa (raw, json)
Hash identifier:          y6/O19ej+D78rWmz5qS/MzeH1Cqu2UAtbvfD+OsX1Uk=
Subject key identifier:   52:09:FA:AC:4F:61:07:C0:31:C5:7D:F9:0F:D1:6E:06:67:2C:E0:A7
Certificate issuer:       /CN=24E0959AB7772BF66753580C3F4588BD984B000C
Certificate serial:       0E6C4524B85E6F0A976FD4CBCA3220D58CCEE04B
Authority key identifier: 24:E0:95:9A:B7:77:2B:F6:67:53:58:0C:3F:45:88:BD:98:4B:00:0C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24E0959AB7772BF66753580C3F4588BD984B000C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa
Signing time:             Fri 01 Mar 2024 17:54:50 +0000
ROA not before:           Fri 01 Mar 2024 17:49:50 +0000
ROA not after:            Fri 28 Feb 2025 17:54:50 +0000
asID:                     270418
IP address blocks:        2804:6bb4:f000::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:6c:45:24:b8:5e:6f:0a:97:6f:d4:cb:ca:32:20:d5:8c:ce:e0:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24E0959AB7772BF66753580C3F4588BD984B000C
        Validity
            Not Before: Mar  1 17:49:50 2024 GMT
            Not After : Feb 28 17:54:50 2025 GMT
        Subject: CN=5209FAAC4F6107C031C57DF90FD16E06672CE0A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:ba:91:e9:dd:6f:ac:fa:7b:c5:6b:33:f4:cc:
                    3b:55:6c:4e:40:e3:4c:32:2b:dd:70:cf:29:24:5b:
                    cf:fa:ff:f1:ce:43:da:13:a0:40:7e:ac:f2:13:4c:
                    c8:4f:4f:7c:e3:5e:a4:c4:2b:1d:d9:be:90:62:77:
                    fd:98:81:87:91:ff:dc:b9:3e:1d:11:26:d1:0f:a5:
                    77:ac:e2:fb:3e:cd:58:8e:bc:03:c1:d7:55:e9:d3:
                    a4:06:49:b8:c8:fc:b1:ec:de:ad:a0:68:a2:5c:38:
                    37:3d:16:be:c9:07:1f:0d:c8:17:d1:8c:41:3d:76:
                    74:b4:61:43:89:2c:ed:08:bb:66:8b:41:08:4e:b7:
                    be:e4:69:1c:b3:76:41:e8:59:99:b7:40:2d:ca:d8:
                    39:d1:5e:d5:93:89:a5:d0:40:d8:00:bb:92:0b:83:
                    86:eb:84:f3:a0:98:a8:f5:cd:ce:70:9f:d6:7a:b4:
                    47:b1:83:91:be:a6:77:8a:f6:a3:de:f7:92:c8:4e:
                    4e:54:99:b9:bd:81:f4:42:50:86:d5:c9:cc:28:b2:
                    68:bc:72:2c:be:6d:ca:b1:3c:ec:7c:47:1b:ff:5a:
                    98:13:7d:45:ff:67:28:37:c2:a3:9b:d3:1c:9b:aa:
                    c8:03:3a:6d:c7:69:44:d1:09:4c:df:a1:34:72:c4:
                    da:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:09:FA:AC:4F:61:07:C0:31:C5:7D:F9:0F:D1:6E:06:67:2C:E0:A7
            X509v3 Authority Key Identifier:
                keyid:24:E0:95:9A:B7:77:2B:F6:67:53:58:0C:3F:45:88:BD:98:4B:00:0C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/24E0959AB7772BF66753580C3F4588BD984B000C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24E0959AB7772BF66753580C3F4588BD984B000C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5K1B5DiMshpCtxwzjWU9WxcyRDZG2xJ8DJGryqBL6yaG/0/323830343a366262343a663030303a3a2f34312d3431203d3e20323730343138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6bb4:f000::/41

    Signature Algorithm: sha256WithRSAEncryption
         21:dd:c6:14:53:79:17:3c:58:c0:c3:39:39:bc:d9:d1:3b:2a:
         be:d8:6e:3d:61:c9:f8:69:d4:3c:19:c9:22:ff:6a:fe:5a:9c:
         b6:e2:e4:ff:e2:fe:f6:34:3e:7d:2d:18:f6:21:a1:25:31:03:
         21:bb:f1:de:53:cc:de:60:78:ee:6b:06:23:53:b9:44:d9:4b:
         5a:f7:3b:72:b3:48:c6:95:ce:8e:2c:e7:79:f4:56:7d:03:60:
         6d:08:59:27:3b:79:c7:64:70:87:d3:bd:9a:43:38:57:84:c4:
         ef:7a:3a:e9:e9:6a:b2:ae:f9:5a:29:bc:fd:1e:a3:9f:5e:36:
         9e:7c:cb:19:f6:1d:fa:8b:8c:a9:c3:d6:af:78:73:35:8e:eb:
         91:5c:5f:e7:bb:69:31:ed:87:bc:39:7b:6e:d5:15:2d:4d:e9:
         52:a4:e6:e2:70:89:b5:68:b5:27:c0:8d:cc:56:c9:ad:23:cf:
         b3:ac:92:66:41:4e:26:ce:e2:c9:25:63:06:9e:a4:87:aa:b8:
         4b:a8:f8:aa:ab:67:6c:aa:b0:f1:c7:3b:fb:af:e8:63:ef:18:
         c6:13:8f:ed:43:74:da:c7:0c:36:ca:79:d7:8b:85:f9:66:eb:
         d1:fb:8f:e6:5f:b7:ad:a3:ec:ec:30:29:df:74:10:30:39:5c:
         2b:73:6b:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org