Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161623a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a616161623a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          gEL1lFjbiJUSUEBVF5qaTPwKWptHtCZh92kvFV09BCk=
Subject key identifier:   37:03:5C:B8:E1:6B:91:43:65:CC:14:AB:16:9F:0A:21:DC:3B:88:93
Certificate issuer:       /CN=8A625A2C7A687327755280A68A944EED49133491
Certificate serial:       0D09F1A8F365D76642DD7FD4281F1160C91B98DA
Authority key identifier: 8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161623a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Sun 18 Feb 2024 03:17:34 +0000
ROA not before:           Sun 18 Feb 2024 03:12:34 +0000
ROA not after:            Sun 16 Feb 2025 03:17:34 +0000
asID:                     267218
IP address blocks:        2804:4a18:aaab::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0d:09:f1:a8:f3:65:d7:66:42:dd:7f:d4:28:1f:11:60:c9:1b:98:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A625A2C7A687327755280A68A944EED49133491
        Validity
            Not Before: Feb 18 03:12:34 2024 GMT
            Not After : Feb 16 03:17:34 2025 GMT
        Subject: CN=37035CB8E16B914365CC14AB169F0A21DC3B8893
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:59:c8:52:81:27:48:ab:a2:71:9c:53:e5:78:
                    d6:66:72:07:ee:5b:08:2c:2f:81:7f:41:57:33:66:
                    49:3e:57:6b:e3:bb:b3:2b:ea:42:09:62:07:31:26:
                    ad:ed:50:73:27:7d:07:d8:df:14:06:84:18:fc:6c:
                    1f:62:b0:b6:12:98:25:8b:1a:87:44:39:03:9b:3e:
                    95:6a:20:ce:36:43:de:92:fb:04:77:8f:22:c6:e4:
                    5e:a3:10:59:fe:7f:60:ac:66:ab:50:79:7a:f8:6d:
                    65:2c:2c:dc:60:e0:28:9c:96:00:30:f0:94:93:33:
                    b0:b0:76:04:35:a7:c8:49:4a:48:a1:53:41:c0:e3:
                    50:10:5a:e7:fe:30:eb:dc:66:a1:5c:6f:16:a9:b9:
                    1d:a3:72:b0:36:1c:2b:0f:02:3e:fd:33:0a:fa:a5:
                    82:28:98:68:e8:c0:b9:23:bb:65:dc:ba:2c:bd:4f:
                    68:d5:e1:0a:9e:e1:b5:01:68:b4:f2:c6:1b:5d:24:
                    1f:3d:9e:4d:39:3a:f2:b6:75:49:5a:e9:99:02:e3:
                    86:5b:59:0d:38:40:79:6b:ab:7a:fe:53:f8:7d:5b:
                    0e:cb:78:54:9e:26:d0:db:35:c9:ba:91:ee:68:f5:
                    bd:14:4f:f9:81:25:27:b4:5b:19:7d:55:4d:b9:9d:
                    72:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:03:5C:B8:E1:6B:91:43:65:CC:14:AB:16:9F:0A:21:DC:3B:88:93
            X509v3 Authority Key Identifier:
                keyid:8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161623a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:aaab::/48

    Signature Algorithm: sha256WithRSAEncryption
         7a:8d:c0:94:87:96:b5:7f:a3:36:c6:1e:91:b1:a4:b6:a3:b1:
         60:95:14:fb:96:55:23:47:9d:8c:67:a6:4a:0b:a9:34:69:92:
         8a:7d:f0:bb:26:a8:98:0d:46:a7:6a:ca:bf:68:f8:49:30:7b:
         6c:6f:e3:f8:a0:41:8e:77:1c:1c:48:b0:85:4f:25:52:40:a9:
         48:51:05:a0:06:50:b1:78:3a:31:27:3c:0c:6a:6c:cb:7e:d8:
         34:0b:c0:16:88:d8:82:38:a2:a1:cf:df:e2:77:b7:9b:3a:d7:
         f6:ea:16:11:f2:c8:c2:3f:41:c1:80:4c:0d:ef:ba:41:87:64:
         e8:f8:4b:4d:c0:a1:a7:4f:55:b9:01:40:0a:de:ab:91:5f:18:
         6d:12:1a:ee:ac:dd:04:37:2e:2b:16:3f:f7:18:e8:c4:fe:49:
         3b:5a:9a:5e:f4:b5:9c:e7:cc:92:9d:d7:3a:3d:d0:c9:da:9e:
         eb:2d:34:51:49:b5:12:66:98:49:d5:82:d1:a5:e7:b0:69:16:
         b5:06:3d:ab:7c:3f:82:35:b2:03:c9:d3:00:b9:25:96:7a:9d:
         4a:f5:6f:b6:80:47:5e:e0:cd:7f:8d:3c:d5:86:d0:1a:33:28:
         f0:4a:e1:d8:ed:1a:0f:ea:15:ef:73:f0:08:b0:48:cc:95:9c:
         62:14:a9:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org