Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33342d3334203d3e20323635323536.roa
File:                     323830343a326430303a3a2f33342d3334203d3e20323635323536.roa (raw, json)
Hash identifier:          1gmvCoGY7oeDitXtahJhiwDV56/0XBdRwKC+Rr/rTW0=
Subject key identifier:   BF:4D:2D:B1:2D:F7:5A:64:51:BB:A0:7E:EE:50:47:F2:EB:EA:14:D1
Certificate issuer:       /CN=053D41A1BE5107E4C134842B74EB54E8F9483E4C
Certificate serial:       643D13B4DD8E1C4B9734369C9FA7FE529C5D30E7
Authority key identifier: 05:3D:41:A1:BE:51:07:E4:C1:34:84:2B:74:EB:54:E8:F9:48:3E:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/053D41A1BE5107E4C134842B74EB54E8F9483E4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33342d3334203d3e20323635323536.roa
Signing time:             Tue 20 Dec 2022 15:21:27 +0000
ROA not before:           Tue 20 Dec 2022 15:16:27 +0000
ROA not after:            Tue 19 Dec 2023 15:21:27 +0000
asID:                     265256
IP address blocks:        2804:2d00::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:3d:13:b4:dd:8e:1c:4b:97:34:36:9c:9f:a7:fe:52:9c:5d:30:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=053D41A1BE5107E4C134842B74EB54E8F9483E4C
        Validity
            Not Before: Dec 20 15:16:27 2022 GMT
            Not After : Dec 19 15:21:27 2023 GMT
        Subject: CN=BF4D2DB12DF75A6451BBA07EEE5047F2EBEA14D1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:71:3f:0c:8d:53:54:dc:cf:28:9d:9c:63:0c:
                    82:dc:71:5c:c4:b6:7f:32:5d:02:4a:03:3c:ae:ec:
                    9c:8f:42:f6:5d:35:f5:42:1a:6d:68:60:6b:0a:5f:
                    e0:8a:2d:37:3c:74:2c:5a:cb:bb:35:76:72:68:5b:
                    7a:38:0f:d7:73:88:ed:e4:41:ad:81:bb:89:aa:c9:
                    d2:f1:1e:fa:f2:94:10:e4:fa:70:e2:a2:2a:5f:ee:
                    9e:7d:a6:9f:2c:08:ec:73:01:a8:d5:7a:f7:8c:67:
                    f5:24:7c:8e:59:33:4d:89:93:f0:91:9c:be:c1:a0:
                    79:6d:ec:e9:bc:1a:bc:e2:3b:b9:3f:12:a3:b4:e2:
                    c8:6b:76:cd:e5:f0:64:04:8b:49:c0:08:5c:ba:86:
                    54:fe:d8:03:fd:d4:ac:2b:65:37:12:a7:56:03:b1:
                    28:7c:58:e5:dd:46:85:26:82:58:b3:af:d0:7f:ff:
                    89:d9:ac:1d:a7:7d:09:6f:37:b8:d8:6d:a8:af:0a:
                    50:db:12:ec:11:42:de:a5:30:f0:72:d8:31:2d:30:
                    2b:06:5f:b7:a4:5b:d1:7f:1d:f7:db:98:c7:a8:da:
                    1e:bb:e5:43:4e:39:b5:5a:1b:ab:c9:2b:f3:b1:15:
                    a2:b6:7e:4a:74:ce:65:77:e5:c9:ae:20:1b:89:a1:
                    1e:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:4D:2D:B1:2D:F7:5A:64:51:BB:A0:7E:EE:50:47:F2:EB:EA:14:D1
            X509v3 Authority Key Identifier:
                keyid:05:3D:41:A1:BE:51:07:E4:C1:34:84:2B:74:EB:54:E8:F9:48:3E:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/053D41A1BE5107E4C134842B74EB54E8F9483E4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/053D41A1BE5107E4C134842B74EB54E8F9483E4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5kh7U1maB7CEk94NychBpWi1YzXFG9EV5xRaanL9wV3v/0/323830343a326430303a3a2f33342d3334203d3e20323635323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d00::/34

    Signature Algorithm: sha256WithRSAEncryption
         32:1c:4c:02:74:12:14:52:8f:7d:55:f7:fb:53:40:94:bd:1e:
         5f:5d:2d:a4:6d:5b:21:59:c6:eb:18:66:71:b0:45:57:c5:b9:
         d1:2f:e2:98:43:f2:f4:d7:72:88:ba:0f:e1:b2:d2:b6:a6:63:
         df:7d:56:91:ee:e1:fd:9f:58:5c:3a:bb:e1:fe:73:63:b8:f9:
         50:f5:6e:e6:21:db:bd:7b:5a:74:17:50:db:fc:dd:c3:6a:b1:
         33:9b:9a:51:ac:6f:cb:04:3f:e6:65:48:2f:ab:c8:25:bc:7b:
         c9:98:4b:b3:53:ba:1a:74:f7:7b:92:80:1b:09:20:ac:38:b1:
         5f:65:4e:ad:14:d4:7d:07:95:f5:0b:ef:a6:d0:a7:41:d1:ea:
         75:7e:45:2b:57:8d:48:b3:f6:c1:67:20:04:f7:40:c2:a6:42:
         19:24:0b:48:c2:3f:8f:08:06:41:3b:55:2d:7d:d5:fb:31:54:
         06:90:7d:e3:0e:1e:a1:f6:66:c3:33:5e:5d:97:46:3e:fc:84:
         16:e0:a1:0e:9e:82:14:7a:05:69:af:19:00:0a:1e:be:e1:f8:
         b4:56:3e:6b:a3:77:95:2e:c4:ca:23:e1:0a:2f:d8:2d:94:28:
         eb:e9:14:56:5a:78:e1:4b:0d:af:93:01:a2:c9:b7:34:07:e7:
         8b:dc:e4:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org