Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161393a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a616161393a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          EEbUvoR9CfENBOqSpjVjrqipH1g53BIpDgF6glq2FuU=
Subject key identifier:   A8:EC:C0:B5:0E:C9:20:39:3B:BA:41:EB:D8:69:A5:F6:54:47:2D:A8
Certificate issuer:       /CN=8A625A2C7A687327755280A68A944EED49133491
Certificate serial:       1D9BA4B6EE1F2ACC985E4B8242F625AE6D892B2D
Authority key identifier: 8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161393a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Sun 18 Feb 2024 03:17:28 +0000
ROA not before:           Sun 18 Feb 2024 03:12:28 +0000
ROA not after:            Sun 16 Feb 2025 03:17:28 +0000
asID:                     267218
IP address blocks:        2804:4a18:aaa9::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:9b:a4:b6:ee:1f:2a:cc:98:5e:4b:82:42:f6:25:ae:6d:89:2b:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A625A2C7A687327755280A68A944EED49133491
        Validity
            Not Before: Feb 18 03:12:28 2024 GMT
            Not After : Feb 16 03:17:28 2025 GMT
        Subject: CN=A8ECC0B50EC920393BBA41EBD869A5F654472DA8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:c8:1d:82:16:7e:29:28:dd:1d:97:ba:1b:12:
                    fc:e2:d5:d3:6b:0a:24:56:e1:83:44:04:e9:82:21:
                    0f:fc:f2:85:d2:dd:51:b0:9d:2b:0f:0a:5e:96:4d:
                    b7:01:dd:dd:f0:ad:62:55:73:0b:c3:dc:d7:3c:a2:
                    9c:9f:87:6c:c6:a0:f7:88:2b:d8:f6:69:ad:93:2a:
                    c1:87:0f:b0:e4:82:71:74:32:ad:76:04:2c:21:68:
                    21:cf:31:7b:6e:83:57:73:d7:80:79:64:2f:06:02:
                    b0:76:4a:51:53:84:9e:a5:5a:25:eb:4c:e4:ba:cc:
                    33:03:fd:5f:c1:d5:84:2b:61:97:8e:41:54:34:c2:
                    9a:dd:65:71:8f:6d:e5:b2:1c:20:31:58:cb:ac:01:
                    bc:26:ae:e1:b6:de:d0:4d:b5:e8:40:77:b1:7b:08:
                    e8:88:d3:a0:0e:27:8c:99:f1:c2:a0:0a:19:42:5c:
                    d3:5d:fe:cf:1b:05:7a:55:40:30:ca:0b:10:18:64:
                    fc:b7:ae:9d:ef:09:c0:22:87:54:a9:5d:a0:48:bc:
                    b7:78:fa:3b:63:c7:63:ba:13:ed:4e:1b:ec:c5:b8:
                    8e:1f:1a:9a:bc:67:04:0f:39:d3:28:a2:85:30:85:
                    11:32:e6:68:f2:7f:ce:38:87:86:21:ba:38:52:84:
                    82:65
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:EC:C0:B5:0E:C9:20:39:3B:BA:41:EB:D8:69:A5:F6:54:47:2D:A8
            X509v3 Authority Key Identifier:
                keyid:8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161393a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:aaa9::/48

    Signature Algorithm: sha256WithRSAEncryption
         ed:57:8f:29:4a:c8:f4:2d:ca:9a:50:b2:60:e2:b1:49:ce:b6:
         79:5e:9e:5e:74:41:ce:b3:e1:28:b3:db:e5:ee:d9:8c:d2:ea:
         6d:6b:ba:2f:67:fd:64:8e:c3:4b:40:7c:6a:42:ca:28:86:d5:
         1b:51:08:39:42:d8:59:f5:33:fd:06:88:b4:20:e7:45:82:10:
         7f:34:c5:4e:6d:7f:9a:71:35:94:84:4f:05:ab:d2:8b:41:d2:
         78:38:1d:2a:72:ce:ff:1c:e1:32:c3:ef:5a:17:61:d5:0e:a9:
         b7:30:8c:d9:55:46:e0:e1:2c:0e:74:6f:5f:17:b5:a4:db:45:
         25:d2:5c:5b:cf:eb:4d:8e:f0:7a:8d:bc:bd:af:03:de:c0:77:
         bc:cc:75:06:36:71:ef:11:81:26:03:c7:06:1f:f1:15:a8:1c:
         af:e0:ac:d4:e6:00:27:59:85:8a:ce:fe:20:18:fd:38:8b:6c:
         7e:32:8e:e4:90:79:09:a6:82:47:1b:a2:c6:02:4f:9c:eb:d6:
         66:d7:8e:2d:06:44:2b:37:f0:f9:ea:4a:38:24:86:0d:36:6c:
         5c:c8:4a:3f:df:b1:4d:7a:a5:2c:5d:35:0a:97:e1:86:df:9a:
         a8:80:86:fe:6d:e2:43:c9:bb:5e:73:47:0d:15:5c:01:bf:e9:
         7e:f0:b9:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org