Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161633a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a616161633a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          tsR/EfvnudcJRrnJTluOs4zE9pyIwp3LvjeZUSvFOE0=
Subject key identifier:   15:4F:6A:80:69:10:A3:CA:94:E4:41:2F:88:96:46:2F:BA:A0:B3:36
Certificate issuer:       /CN=8A625A2C7A687327755280A68A944EED49133491
Certificate serial:       7E7AFE7B96C0D5F321AA770FF3685FC53559B7DE
Authority key identifier: 8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161633a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Sun 18 Feb 2024 03:17:36 +0000
ROA not before:           Sun 18 Feb 2024 03:12:36 +0000
ROA not after:            Sun 16 Feb 2025 03:17:36 +0000
asID:                     267218
IP address blocks:        2804:4a18:aaac::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:7a:fe:7b:96:c0:d5:f3:21:aa:77:0f:f3:68:5f:c5:35:59:b7:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A625A2C7A687327755280A68A944EED49133491
        Validity
            Not Before: Feb 18 03:12:36 2024 GMT
            Not After : Feb 16 03:17:36 2025 GMT
        Subject: CN=154F6A806910A3CA94E4412F8896462FBAA0B336
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:15:16:2d:ca:10:9e:25:51:df:82:f5:2b:4b:
                    68:de:a7:74:6b:40:c7:db:b9:27:bb:07:13:d5:9f:
                    53:7e:95:72:58:3d:a2:c4:58:3b:42:8d:40:24:44:
                    38:76:a1:4b:b5:0d:92:42:dd:b1:93:a9:64:23:cd:
                    fa:bf:09:6c:9c:6d:55:5b:c5:64:5c:94:7d:62:73:
                    dd:6d:ff:ec:5a:b2:dc:ed:e2:69:f5:97:f9:2e:d5:
                    ed:46:d6:dc:45:35:73:8b:c7:3a:9b:1e:2d:51:16:
                    58:ce:a7:58:e3:b2:11:c4:2f:cb:14:a1:77:de:68:
                    9f:ab:f3:49:c6:53:09:4c:07:88:8e:6f:df:d5:b5:
                    d1:d9:a4:22:ab:64:3b:e0:a2:ed:d2:9a:8f:e8:d6:
                    ab:30:89:68:4a:8a:1f:2f:11:c0:d0:2a:fa:2b:cd:
                    97:3f:80:bb:09:e3:09:c0:99:52:4e:df:a7:36:81:
                    b1:d4:68:c5:3e:b9:71:b8:2d:42:41:a3:ae:e1:a4:
                    39:c9:82:b1:dc:db:3b:95:4d:5a:b7:ae:cd:99:1e:
                    78:e2:55:4a:ce:30:cb:2b:7d:b3:63:6a:64:32:6d:
                    c3:8a:4a:cb:14:74:d9:71:b6:24:51:3f:24:04:1d:
                    85:72:82:7e:75:23:7c:87:06:46:80:3f:fb:d8:c1:
                    5c:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:4F:6A:80:69:10:A3:CA:94:E4:41:2F:88:96:46:2F:BA:A0:B3:36
            X509v3 Authority Key Identifier:
                keyid:8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161633a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:aaac::/48

    Signature Algorithm: sha256WithRSAEncryption
         f9:29:14:b1:db:91:fb:71:19:f5:eb:98:37:b9:b0:43:af:dc:
         76:f1:45:63:f2:71:fd:c1:55:74:59:30:36:53:2f:26:07:fc:
         b3:6e:ae:71:c5:39:8a:a1:93:01:50:89:ec:8c:15:65:b9:ea:
         a6:22:33:71:7c:e7:ce:08:19:0e:67:ea:dc:ff:44:c4:0f:a8:
         02:4b:ef:ac:bd:fc:73:cf:8b:6b:7a:21:e2:13:e4:85:2b:94:
         21:0e:03:76:04:c0:3c:5d:ac:b9:3f:8b:d4:b1:ca:7f:48:a9:
         f6:7b:77:7a:d7:f1:6e:5f:e0:37:2b:74:a8:dd:e1:73:8c:ef:
         b2:2d:9d:ce:d1:c1:53:03:45:9a:69:a3:8d:82:08:7b:18:3b:
         aa:e9:c1:6b:fb:58:8d:14:ed:cc:60:ca:c0:aa:93:ea:da:e1:
         25:67:cb:47:b8:5f:ff:bd:7c:e9:12:92:b9:0b:ac:5c:f2:6c:
         6c:00:db:9d:27:49:59:0b:94:cf:43:59:9f:2b:ab:bf:36:1b:
         74:cc:25:10:15:4d:d2:55:ff:a1:c4:e6:c6:d7:07:2e:0d:02:
         19:8b:0b:e2:9b:73:54:79:4e:9e:0c:4e:80:ed:d4:c1:51:0b:
         08:e3:f4:41:78:62:b0:d9:93:0e:fe:2b:75:62:d2:ba:ba:c9:
         25:f5:1c:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:44 2024 by rpki-client on console-fra.rpki-client.org