Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a613030303a3a2f33352d3335203d3e20323731313130.roa
File:                     323830343a373636383a613030303a3a2f33352d3335203d3e20323731313130.roa (raw, json)
Hash identifier:          l2kZ5yF++z0Qqu4mLpa7HC18VHaNSeod8xgagsApH0w=
Subject key identifier:   03:74:F8:CD:54:A3:82:15:94:6E:03:25:66:C0:9C:87:42:F9:56:59
Certificate issuer:       /CN=8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE
Certificate serial:       4E3C6A20338190099373F3AC3987A865887D7278
Authority key identifier: 85:25:A6:BC:54:DB:2B:C4:E1:43:9E:F1:72:B9:07:CD:EF:59:A2:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a613030303a3a2f33352d3335203d3e20323731313130.roa
Signing time:             Thu 21 Jul 2022 20:07:39 +0000
ROA not before:           Thu 21 Jul 2022 20:02:39 +0000
ROA not after:            Thu 20 Jul 2023 20:07:39 +0000
asID:                     271110
IP address blocks:        2804:7668:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:3c:6a:20:33:81:90:09:93:73:f3:ac:39:87:a8:65:88:7d:72:78
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE
        Validity
            Not Before: Jul 21 20:02:39 2022 GMT
            Not After : Jul 20 20:07:39 2023 GMT
        Subject: CN=0374F8CD54A38215946E032566C09C8742F95659
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:88:3b:0e:88:dd:32:18:f8:65:ac:bd:f0:5a:
                    55:18:b1:6f:f2:cd:74:13:0e:f3:c7:e2:e1:bc:63:
                    69:d4:89:cc:15:34:14:e4:14:f1:41:06:2b:49:20:
                    d3:54:95:65:6c:28:c2:75:15:d3:fd:5a:34:ef:4a:
                    a4:ff:cc:76:2b:72:a1:1e:01:83:9d:91:ee:7a:a8:
                    fe:80:11:50:51:a5:82:57:c9:ae:8a:10:41:36:c1:
                    ef:b8:9f:b9:e6:e4:24:3b:38:6b:f3:a6:fa:85:78:
                    62:0b:3a:98:39:de:da:97:9d:2e:d7:91:ea:90:1f:
                    87:fe:fb:8e:41:a5:8c:59:1f:89:f8:e6:54:a9:31:
                    d3:03:c7:ed:5c:5b:58:83:8d:82:db:9b:0b:f0:df:
                    df:02:e0:3b:b4:ec:36:70:08:d4:66:a0:c3:71:ae:
                    f2:2f:e6:27:00:8e:b8:c8:03:b9:28:8d:2b:9f:55:
                    9b:20:05:92:17:8a:d8:72:d1:ba:c6:65:03:7a:ca:
                    6b:98:08:01:7a:cf:7b:f2:3c:69:d1:30:33:42:5e:
                    8e:a0:4e:fc:32:6a:7a:ff:9b:40:d8:bf:a9:ed:c1:
                    09:01:30:b2:86:91:22:a7:d3:19:47:6c:55:75:3b:
                    8b:7e:1e:82:26:63:bf:37:96:ba:c5:33:5f:74:cb:
                    32:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:74:F8:CD:54:A3:82:15:94:6E:03:25:66:C0:9C:87:42:F9:56:59
            X509v3 Authority Key Identifier:
                keyid:85:25:A6:BC:54:DB:2B:C4:E1:43:9E:F1:72:B9:07:CD:EF:59:A2:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8525A6BC54DB2BC4E1439EF172B907CDEF59A2FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5omUtCaURF3atuHuxC6sDVsS5EaDUqcGZeX8hSoAuqmi/0/323830343a373636383a613030303a3a2f33352d3335203d3e20323731313130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7668:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         98:9e:38:26:fa:f0:14:d3:b2:27:c4:9f:e3:bc:32:0c:ca:d4:
         fd:50:46:0e:4d:c9:fb:61:64:1b:2d:24:30:a8:72:0f:56:25:
         20:a5:1a:1f:79:db:17:cd:a8:9a:2e:82:5a:11:87:e8:dc:a7:
         a3:20:0d:17:63:8e:e9:5c:4f:ee:04:e7:a3:5f:49:c8:7e:34:
         74:d4:10:2c:b9:5c:fb:87:7f:e9:3b:e6:06:8c:c8:32:5d:aa:
         a9:6d:aa:45:d5:f0:bf:59:42:68:e4:1d:7e:fa:cb:1d:a4:93:
         a3:92:b2:4d:8f:35:fd:4e:a8:08:61:21:dc:ee:2e:24:ec:f2:
         83:9e:e4:6f:08:9a:4b:e5:47:51:e4:c6:8e:20:2f:0d:41:72:
         86:9e:42:ae:b1:dd:64:47:cc:eb:7f:88:f4:42:bf:fa:90:77:
         a7:d1:7c:c1:98:e9:ff:0c:9f:04:0d:b6:8b:59:88:3e:a9:19:
         96:83:7d:b3:d4:db:47:23:7b:ed:c8:1d:ef:45:79:0b:3e:94:
         e2:d3:8c:14:e2:b8:a9:fd:3a:ca:bc:75:f6:89:87:48:16:d0:
         c7:5a:7b:7f:9d:24:1f:99:95:61:d1:2e:4d:ed:b1:2a:b3:4b:
         ac:96:6e:a4:e6:e5:76:32:51:ff:7b:5b:b5:b7:56:e3:13:fe:
         50:18:ce:69
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:10 2024 by rpki-client on console-ams.rpki-client.org