Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a626262623a3a2f34382d3438203d3e20323637323138.roa
File:                     323830343a346131383a626262623a3a2f34382d3438203d3e20323637323138.roa (raw, json)
Hash identifier:          25A30v0nil19n60FvsLhSSuwb1T9miAlrVUdTUq81pY=
Subject key identifier:   8A:C4:00:08:40:E5:CD:98:1F:85:76:22:DE:21:EA:6C:F1:9E:B1:34
Certificate issuer:       /CN=8A625A2C7A687327755280A68A944EED49133491
Certificate serial:       7A896A3F16D858EF6F340FAEEC273DE405027489
Authority key identifier: 8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a626262623a3a2f34382d3438203d3e20323637323138.roa
Signing time:             Sun 18 Feb 2024 03:17:42 +0000
ROA not before:           Sun 18 Feb 2024 03:12:42 +0000
ROA not after:            Sun 16 Feb 2025 03:17:42 +0000
asID:                     267218
IP address blocks:        2804:4a18:bbbb::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:89:6a:3f:16:d8:58:ef:6f:34:0f:ae:ec:27:3d:e4:05:02:74:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8A625A2C7A687327755280A68A944EED49133491
        Validity
            Not Before: Feb 18 03:12:42 2024 GMT
            Not After : Feb 16 03:17:42 2025 GMT
        Subject: CN=8AC4000840E5CD981F857622DE21EA6CF19EB134
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:d2:19:89:5b:3b:04:b5:99:31:c9:f9:bf:c7:
                    13:0c:59:e4:b7:4e:16:10:b3:94:fa:8a:be:4c:01:
                    3b:b5:61:bb:15:3f:a1:37:69:10:4e:9f:be:9b:1e:
                    c3:f2:24:c9:8f:d8:9e:cb:a4:e8:c9:f5:d9:d0:4a:
                    44:40:34:8d:fd:32:5d:ff:3e:10:73:d8:8f:64:d1:
                    e9:95:e1:68:34:ad:93:41:e8:62:78:e5:9b:24:c0:
                    42:53:59:74:7b:98:e8:e9:b8:3a:aa:94:c2:c6:29:
                    f2:79:32:2c:66:08:cb:9e:04:cd:d9:64:94:6c:9f:
                    cf:42:76:4a:37:9c:ad:44:16:2f:25:79:14:ed:45:
                    ee:32:8e:78:f5:a5:cf:09:d5:27:9c:e1:06:53:8d:
                    7d:d7:99:f0:23:82:eb:e7:da:d5:3d:25:57:d1:2d:
                    9f:76:3e:16:45:37:dc:2b:d0:73:c1:05:c0:44:5b:
                    12:15:dc:c2:85:8f:1a:1a:6a:64:13:b6:53:65:91:
                    34:c8:43:c2:7a:f2:16:ca:fd:47:72:57:69:14:73:
                    00:a9:07:25:6f:3c:79:a9:92:99:f6:51:98:60:1b:
                    87:f0:b4:c6:eb:2e:6f:86:26:5d:c5:c5:4f:b1:59:
                    d5:cb:7f:2b:da:10:6a:ed:56:6e:bc:de:45:19:51:
                    b5:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:C4:00:08:40:E5:CD:98:1F:85:76:22:DE:21:EA:6C:F1:9E:B1:34
            X509v3 Authority Key Identifier:
                keyid:8A:62:5A:2C:7A:68:73:27:75:52:80:A6:8A:94:4E:ED:49:13:34:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/8A625A2C7A687327755280A68A944EED49133491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8A625A2C7A687327755280A68A944EED49133491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5y5LR1TQqMPdKMFa4gqMLtxZzTZY9avStQDaqzLRLdV1/0/323830343a346131383a626262623a3a2f34382d3438203d3e20323637323138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a18:bbbb::/48

    Signature Algorithm: sha256WithRSAEncryption
         f2:0e:e9:ad:d8:3f:d5:5b:a0:45:7e:f1:63:86:b7:22:80:01:
         9a:15:ca:19:22:d7:67:33:be:50:77:6e:1f:05:63:4a:04:c2:
         c0:91:5b:59:26:86:31:ce:f1:56:ae:d7:91:e4:67:cd:84:05:
         d2:4f:b1:1c:42:18:c8:e8:24:2a:94:12:f4:56:d6:a0:96:52:
         2f:86:1c:e0:4c:6c:37:48:b3:1b:f2:3f:78:da:ea:58:5e:47:
         1d:bd:61:d2:9f:31:8a:8a:cf:70:b5:0f:eb:64:b0:c6:67:e6:
         49:d5:5b:de:b7:13:b5:3a:91:3a:b0:bf:96:da:ac:df:ac:ce:
         d2:a5:7a:48:83:ab:aa:9f:77:50:fd:86:10:6e:60:0c:10:9a:
         02:3f:f4:85:a6:86:3a:6d:d0:4d:59:67:2c:55:0e:a0:43:a6:
         80:7b:8b:de:08:7e:aa:40:60:a1:01:6e:d0:3e:0c:be:4f:88:
         59:7c:8e:d6:6c:72:6f:eb:04:b3:1e:83:b4:32:69:d9:02:82:
         86:8d:e1:9b:3b:90:58:86:b3:2f:34:67:9e:62:7e:cf:cd:09:
         0e:39:e6:ac:50:25:75:7a:f1:99:63:03:64:ef:79:3b:49:67:
         fe:de:f7:ab:04:d6:f6:ce:52:2a:5b:0e:7f:01:cb:29:da:3c:
         2b:62:d2:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org