Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/323830343a356436303a3a2f33322d3438203d3e20323638393638.roa
File:                     323830343a356436303a3a2f33322d3438203d3e20323638393638.roa (raw, json)
Hash identifier:          n6n+CzBKl+LEljBBMbiiXjmMeR0KHqL/7evo3Qirp+o=
Subject key identifier:   88:FE:19:23:CF:63:2A:EE:AE:8A:61:E5:D0:42:1E:91:16:81:E6:47
Certificate issuer:       /CN=1A47D726E2A780A130E88105B672CBB18E9BCCBC
Certificate serial:       54EF895220F54BF6C369FF1FFE1B45031B7BBB19
Authority key identifier: 1A:47:D7:26:E2:A7:80:A1:30:E8:81:05:B6:72:CB:B1:8E:9B:CC:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A47D726E2A780A130E88105B672CBB18E9BCCBC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/323830343a356436303a3a2f33322d3438203d3e20323638393638.roa
Signing time:             Sat 25 Feb 2023 20:03:20 +0000
ROA not before:           Sat 25 Feb 2023 19:58:20 +0000
ROA not after:            Sat 24 Feb 2024 20:03:20 +0000
asID:                     268968
IP address blocks:        2804:5d60::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            54:ef:89:52:20:f5:4b:f6:c3:69:ff:1f:fe:1b:45:03:1b:7b:bb:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A47D726E2A780A130E88105B672CBB18E9BCCBC
        Validity
            Not Before: Feb 25 19:58:20 2023 GMT
            Not After : Feb 24 20:03:20 2024 GMT
        Subject: CN=88FE1923CF632AEEAE8A61E5D0421E911681E647
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:da:76:5f:b5:f2:91:55:4c:1a:1a:f5:5f:f5:36:
                    62:d3:e4:d1:85:6d:69:be:70:dc:a2:3e:73:c6:4a:
                    20:ca:d0:8a:dd:53:c2:71:43:a8:81:41:b9:56:83:
                    a9:2b:3b:3b:ab:2a:36:b2:f5:68:3e:77:61:bf:f1:
                    fa:82:55:d8:bc:1f:6f:17:29:96:44:54:cb:03:d0:
                    ef:b9:91:4e:ad:83:3a:4b:38:b9:59:4e:57:ca:ff:
                    ba:d6:ac:c6:63:1c:d4:3b:ed:90:91:57:82:f7:6a:
                    23:85:11:54:4f:58:05:df:78:52:08:ed:54:17:6e:
                    9d:70:4d:45:4c:23:89:e2:99:ac:73:03:cc:c5:9f:
                    26:20:90:42:29:d0:87:62:6b:fe:70:db:db:9b:bb:
                    11:c0:12:df:f3:1f:79:5b:72:21:05:05:1e:18:98:
                    49:2c:e6:b4:d8:8a:91:48:ac:25:dd:33:02:59:e6:
                    a6:d5:65:70:9c:f9:fb:c0:87:f5:3c:5f:f1:d3:27:
                    16:15:7c:aa:d3:58:91:62:7b:38:da:53:d6:72:53:
                    9a:9e:fe:22:f7:21:65:d7:be:ff:54:71:d9:96:f6:
                    33:16:94:f9:4f:a6:db:f4:2c:3a:ff:6e:e4:17:ea:
                    92:c9:c9:48:c5:1f:94:b8:ac:b0:9f:03:47:22:1b:
                    6c:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:FE:19:23:CF:63:2A:EE:AE:8A:61:E5:D0:42:1E:91:16:81:E6:47
            X509v3 Authority Key Identifier:
                keyid:1A:47:D7:26:E2:A7:80:A1:30:E8:81:05:B6:72:CB:B1:8E:9B:CC:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/1A47D726E2A780A130E88105B672CBB18E9BCCBC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A47D726E2A780A130E88105B672CBB18E9BCCBC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7STePPAJ4iWTdJYXbrWfmdur4RQSBM4dSQ2yHUUzb2Kx/0/323830343a356436303a3a2f33322d3438203d3e20323638393638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d60::/32

    Signature Algorithm: sha256WithRSAEncryption
         3b:f0:b2:95:6d:da:c2:c4:5e:65:9f:80:58:1b:7b:c9:9b:e3:
         6d:10:cd:55:a3:a9:28:27:e5:52:a5:8b:72:c6:ea:77:e3:bb:
         3e:b3:15:4a:5a:18:72:7a:ed:6c:e6:26:b2:b9:ae:92:cc:46:
         cc:4f:a8:10:75:0d:6e:fe:4b:9b:a8:c9:15:2a:02:1a:6b:b9:
         04:47:f6:6e:7f:ba:a5:99:c6:59:44:e0:3a:30:c2:c3:1c:5d:
         c8:76:92:ef:87:69:69:53:9a:f1:38:44:2f:24:f9:40:fb:c3:
         48:a3:3b:cc:2e:f3:da:b7:48:79:f8:19:0f:e2:1b:a3:1f:ed:
         57:6a:f3:06:c1:19:b1:ee:41:82:a8:81:9e:92:22:e8:b3:8f:
         85:78:74:41:45:98:46:7e:00:14:38:7a:c8:99:7f:4f:b8:fe:
         c9:89:a4:91:fd:c8:92:c5:92:25:29:39:3c:c5:ec:0b:8e:a2:
         f9:f9:a8:40:91:8a:37:16:79:b9:a5:9c:12:82:fe:5c:72:19:
         c9:9c:10:43:42:cc:1f:fb:a6:9c:06:6d:dc:65:c3:8a:f8:cc:
         e2:78:33:4f:c2:3c:7b:4b:47:d2:4d:47:0b:04:3b:16:86:e7:
         57:62:5d:76:2f:7e:fa:4e:7c:12:06:5b:25:4e:9b:d5:d1:92:
         f6:21:5c:46
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org