Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161643a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a616161643a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          czMXQt280jkErM/e2168KsOWDKVdco8na3yh6fnQcbg=
Subject key identifier:   A8:25:CE:D3:D8:0B:98:0D:97:10:C4:F1:0F:94:B1:B9:9C:D6:0C:21
Certificate issuer:       /CN=8A625A2C7A687327755280A68A944EED49133491
Certificate serial:       7FC86F8F5615420F7A552AAB6EA1CC1E0E97685D
Authority key identifier: 8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161643a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Sun 18 Feb 2024 03:17:40 +0000
ROA not before:           Sun 18 Feb 2024 03:12:40 +0000
ROA not after:            Sun 16 Feb 2025 03:17:40 +0000
asID:                     267218
IP address blocks:        2804:4a18:aaad::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:c8:6f:8f:56:15:42:0f:7a:55:2a:ab:6e:a1:cc:1e:0e:97:68:5d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A625A2C7A687327755280A68A944EED49133491
        Validity
            Not Before: Feb 18 03:12:40 2024 GMT
            Not After : Feb 16 03:17:40 2025 GMT
        Subject: CN=A825CED3D80B980D9710C4F10F94B1B99CD60C21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d3:25:e4:3d:70:3b:b2:74:f5:8d:53:93:6c:e2:
                    65:0d:57:ff:3c:63:ff:33:6c:f6:b2:ec:6a:8b:56:
                    5c:c8:41:71:e8:ea:c4:d2:9f:16:f5:f6:ac:00:8b:
                    1a:58:3a:4d:7f:e0:0d:9c:c0:06:ce:14:b2:70:37:
                    01:2c:c3:8d:7a:02:e9:98:4f:4d:88:1e:c8:83:64:
                    87:33:a2:92:a0:e8:21:a3:5d:64:4f:8e:b8:58:a8:
                    3c:c1:2d:b7:97:5d:71:d5:3e:0a:e1:68:ba:5a:c7:
                    6d:44:1c:06:23:2a:e7:24:06:20:41:83:45:48:ae:
                    36:7e:31:ef:fb:d1:08:1c:1d:28:cd:9f:35:15:64:
                    18:06:19:81:e1:d9:e0:f4:b1:ff:3f:fa:f0:9b:67:
                    81:a3:c6:2f:6c:45:b0:2d:dc:1e:6c:37:c7:83:e4:
                    4b:18:18:8b:be:97:45:6c:aa:c6:b7:20:11:d0:92:
                    6f:6b:de:92:6c:13:48:b0:11:dd:cd:8f:db:2a:1d:
                    04:e2:4d:0b:6b:26:8f:3d:ed:6b:97:ac:e8:24:8f:
                    43:ab:dd:a2:38:af:90:2b:d7:a2:0f:bb:cb:ac:17:
                    5d:7c:4d:15:dc:09:d6:cd:b8:5c:e8:aa:92:9a:77:
                    2c:d8:4e:e3:f0:bd:e3:2f:97:e5:33:24:33:58:62:
                    02:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A8:25:CE:D3:D8:0B:98:0D:97:10:C4:F1:0F:94:B1:B9:9C:D6:0C:21
            X509v3 Authority Key Identifier:
                keyid:8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a616161643a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:aaad::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:ee:87:22:bc:c4:3e:fb:6e:8c:45:33:e4:ab:33:9b:70:d0:
         7b:ae:24:ad:1a:6d:4d:b0:76:aa:17:c0:fb:1f:d8:a2:61:a4:
         b7:cc:9c:fd:09:25:dc:71:5d:73:89:25:07:c2:d2:1b:1f:f3:
         50:6a:f8:2f:26:2b:7a:38:05:0f:3a:b0:de:80:0c:5b:0b:c7:
         75:5d:2d:5e:41:5c:d3:61:7d:f1:1c:39:b1:0f:62:5f:60:d4:
         ad:49:02:39:e2:ad:e0:09:d4:94:61:c8:a2:12:42:cd:18:db:
         4e:91:60:8e:9d:07:96:b1:01:d8:6e:6d:ec:9c:2d:8f:83:d2:
         6c:1b:a7:7e:cd:ac:8e:d1:2d:41:68:41:d6:57:8e:a2:38:9f:
         99:cc:bd:b0:24:34:1a:88:47:2b:e6:dc:de:ea:94:54:d4:90:
         d5:c2:ec:f8:00:41:27:f3:86:75:b5:1d:c9:c1:51:94:cc:d8:
         e2:df:85:52:40:31:ff:d5:90:e8:ba:e3:e6:c7:83:db:7d:29:
         1f:3e:6d:e0:86:3d:c6:88:28:be:16:f2:c7:bb:75:86:9a:36:
         f5:d6:d1:33:89:d7:6e:fd:8f:9c:fb:a5:f1:f3:f5:82:21:45:
         10:98:43:86:a5:9f:59:e2:5a:f8:23:ac:64:c4:f6:8e:c2:67:
         48:c9:6c:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org