Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161383a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a616161383a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          6FuhKguJjL41MDe3Rf/t2CHLtv2DDRdNVknzvKNGBHE=
Subject key identifier:   83:3E:8D:6A:64:2C:53:92:76:5B:3E:61:00:63:F3:7A:4F:85:BA:96
Certificate issuer:       /CN=8A625A2C7A687327755280A68A944EED49133491
Certificate serial:       3C0E012C482CEA45F7828839219E789E75D9E580
Authority key identifier: 8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161383a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Sun 18 Feb 2024 03:17:25 +0000
ROA not before:           Sun 18 Feb 2024 03:12:25 +0000
ROA not after:            Sun 16 Feb 2025 03:17:25 +0000
asID:                     267218
IP address blocks:        2804:4a18:aaa8::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:0e:01:2c:48:2c:ea:45:f7:82:88:39:21:9e:78:9e:75:d9:e5:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A625A2C7A687327755280A68A944EED49133491
        Validity
            Not Before: Feb 18 03:12:25 2024 GMT
            Not After : Feb 16 03:17:25 2025 GMT
        Subject: CN=833E8D6A642C5392765B3E610063F37A4F85BA96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:d5:dc:87:cc:4d:24:8a:c5:a1:ef:8d:70:88:
                    5d:3c:6b:23:34:26:19:67:40:4d:5f:61:85:0d:db:
                    f8:b0:dd:1f:37:19:24:34:2c:09:30:68:3c:2f:f4:
                    9a:f9:a6:ca:be:e6:67:67:4b:4f:5e:a0:bc:94:39:
                    63:23:65:41:39:2f:63:b2:13:f5:69:24:89:9e:64:
                    cf:e2:06:7f:72:a9:67:2e:3b:58:1b:2d:c6:00:69:
                    4f:8d:92:38:78:72:68:c4:79:9f:60:e4:57:1e:8a:
                    e8:f8:89:4e:e8:fe:89:02:ca:65:e0:a6:bb:d8:66:
                    0a:95:79:7e:1a:33:53:4d:25:ce:c7:11:e1:b9:e8:
                    2e:38:6c:f0:7d:fb:9d:fd:6a:e3:57:a4:7d:1a:fa:
                    a6:55:82:30:78:3f:44:71:c9:d9:ac:54:ad:ab:d8:
                    35:d3:2a:72:ee:a7:a0:2f:9f:4e:14:98:bd:f6:b4:
                    6c:04:7d:66:e3:eb:4c:49:63:b3:17:d7:15:ca:4c:
                    87:c3:34:83:3d:85:79:88:7a:db:86:c4:f7:81:19:
                    e5:ee:17:ad:cd:c2:80:d0:c0:b5:72:19:bb:f6:74:
                    68:44:51:cb:30:72:17:70:a4:12:b0:d5:8a:b3:41:
                    18:1b:60:5b:1d:ca:b9:b8:a2:5b:a4:d8:02:82:dd:
                    a4:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                83:3E:8D:6A:64:2C:53:92:76:5B:3E:61:00:63:F3:7A:4F:85:BA:96
            X509v3 Authority Key Identifier:
                keyid:8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161383a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:aaa8::/48

    Signature Algorithm: sha256WithRSAEncryption
         a2:b7:f6:38:f8:35:19:9e:05:5d:d7:75:4e:a8:e4:6c:a7:36:
         3a:b7:38:79:a5:46:f4:7b:31:7c:1f:32:d2:6a:09:b9:db:72:
         fd:6f:54:e7:e4:7f:33:8a:85:bf:2c:67:65:6c:2d:6e:6a:43:
         0d:3e:43:d0:bd:eb:a8:cc:17:71:cc:3c:8f:33:bd:2b:7a:ba:
         ac:01:58:15:51:4c:b1:fe:9a:3d:0f:80:6e:b7:e5:6d:b2:5b:
         b6:a0:e3:3b:9b:48:5c:41:5e:84:13:d4:d1:0b:84:5f:f1:c5:
         c4:28:4f:0d:37:1a:4b:d1:1c:3f:89:c6:e5:62:52:74:92:10:
         da:cc:03:8b:ad:3f:95:46:00:c3:42:56:79:09:ed:33:14:51:
         8c:5f:95:a7:3d:25:53:6f:cf:0b:f9:47:83:9e:ce:75:96:49:
         30:a8:62:aa:f0:63:7a:5a:bb:bb:4a:02:b5:b0:24:07:88:91:
         4e:36:0d:2a:c0:a4:5f:a4:f0:26:52:80:52:b6:4f:33:d1:c8:
         84:53:6a:b1:47:60:38:62:b0:74:df:aa:50:d4:cc:a5:85:a5:
         ff:66:86:31:67:69:fa:1b:d9:40:d1:84:57:29:94:d6:67:23:
         ab:1a:88:48:06:95:82:4a:b9:53:cf:04:e3:50:df:ef:7f:f0:
         7f:6e:41:6e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org