Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa
File:                     323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa (raw, json)
Hash identifier:          H6RGiEJO6pUD0bj9bE2CGTj3NYnu0qLfykTGGvKehFs=
Subject key identifier:   05:39:4F:87:AB:80:EE:54:BA:5B:50:0B:69:1A:0F:54:54:E5:A9:29
Certificate issuer:       /CN=2C8F79E76852475DDED25004F5D935390FAB63C4
Certificate serial:       51B304A4C085F7AD29733D60A4AE611E0ED002C4
Authority key identifier: 2C:8F:79:E7:68:52:47:5D:DE:D2:50:04:F5:D9:35:39:0F:AB:63:C4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8F79E76852475DDED25004F5D935390FAB63C4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa
Signing time:             Thu 20 Apr 2023 14:26:29 +0000
ROA not before:           Thu 20 Apr 2023 14:21:29 +0000
ROA not after:            Thu 18 Apr 2024 14:26:29 +0000
asID:                     266563
IP address blocks:        2804:3dec:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:b3:04:a4:c0:85:f7:ad:29:73:3d:60:a4:ae:61:1e:0e:d0:02:c4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2C8F79E76852475DDED25004F5D935390FAB63C4
        Validity
            Not Before: Apr 20 14:21:29 2023 GMT
            Not After : Apr 18 14:26:29 2024 GMT
        Subject: CN=05394F87AB80EE54BA5B500B691A0F5454E5A929
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:00:d9:38:ff:43:5d:79:d8:3e:50:d1:03:9a:
                    5e:6b:1e:cc:fc:97:93:1b:b5:a6:21:86:5e:df:9e:
                    b1:9b:6e:cc:05:f7:9f:81:72:b4:df:dc:ed:cb:a5:
                    59:6b:f1:48:21:2c:2b:92:70:98:dc:ab:24:dc:7e:
                    56:0a:30:5e:e0:1a:84:42:ce:4d:73:ef:2c:b3:0e:
                    01:22:f5:d2:2a:83:36:f8:9c:ae:5c:39:19:34:f3:
                    89:41:81:6a:50:e7:c9:fa:79:9f:7d:04:31:ce:70:
                    0b:ac:fa:37:ce:99:2a:7f:c7:6e:fc:1a:45:da:a9:
                    66:c9:e1:2e:e0:77:c3:8b:40:d3:93:b6:32:85:1b:
                    a9:9d:85:81:8e:ec:b3:83:f2:6f:1c:8e:87:b7:4e:
                    99:c2:97:3e:24:f3:55:9d:4d:99:c0:b0:f9:ba:ec:
                    51:ed:4a:86:9d:21:05:1f:dc:ff:00:23:ae:1a:86:
                    1d:f4:42:41:f8:30:82:06:0a:54:6b:62:a3:8a:a7:
                    74:14:48:e7:9d:41:03:5f:c0:f6:68:18:2a:49:92:
                    d8:b3:83:22:42:fb:18:d5:79:7d:28:e7:28:89:a7:
                    48:82:13:38:65:de:93:8a:8d:ee:a0:72:80:41:21:
                    ec:f8:ef:5e:86:c1:01:22:35:14:af:b3:fc:88:a5:
                    7d:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                05:39:4F:87:AB:80:EE:54:BA:5B:50:0B:69:1A:0F:54:54:E5:A9:29
            X509v3 Authority Key Identifier:
                keyid:2C:8F:79:E7:68:52:47:5D:DE:D2:50:04:F5:D9:35:39:0F:AB:63:C4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/2C8F79E76852475DDED25004F5D935390FAB63C4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2C8F79E76852475DDED25004F5D935390FAB63C4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5qbiT6RMp9thCn1GofUaPqhL7SwVZxU6XV5GYuN9s8Bo/1/323830343a336465633a383030303a3a2f34302d3430203d3e20323636353633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dec:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         03:da:62:56:a5:f0:5f:0c:e1:57:bb:10:fb:ed:bd:60:53:36:
         df:e9:35:c3:e5:71:69:9f:47:16:b3:c3:00:ec:4a:89:0e:06:
         12:a6:1b:5a:2c:1c:db:b4:85:d2:dd:3c:75:89:c1:78:d5:a6:
         1b:35:79:9a:de:2f:f2:e7:00:61:96:f4:32:07:87:b7:91:a1:
         68:b1:b5:85:cf:10:91:df:e4:77:01:55:cb:56:96:7e:3f:9b:
         65:26:8f:b0:6e:58:f8:23:74:f3:95:1f:66:88:8b:22:d4:25:
         ab:0d:fa:6d:03:62:84:a4:92:bd:38:a5:23:f8:8d:c6:36:89:
         69:58:f7:9a:57:a9:95:05:cb:c7:28:dd:fe:97:c2:62:18:11:
         07:af:c7:48:33:44:1a:42:f2:88:72:5a:ab:8f:99:9c:b9:ac:
         89:60:f7:ec:c9:6b:66:b7:13:41:ba:21:5d:fd:96:3f:78:ab:
         ce:af:ed:07:98:69:e9:e8:2f:53:2e:9f:cb:e2:01:a8:0a:58:
         90:68:f9:12:b8:51:56:82:f0:37:12:b3:c0:46:a9:75:03:fb:
         a4:a2:ef:a4:98:4e:52:97:00:0e:c8:95:87:1b:67:e3:ba:06:
         b7:60:94:e6:bb:e8:77:86:aa:e1:1c:85:02:c7:3b:d8:b4:78:
         29:a1:9d:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org