Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/323830343a353462633a383030303a3a2f33332d3333203d3e20323638363637.roa
File:                     323830343a353462633a383030303a3a2f33332d3333203d3e20323638363637.roa (raw, json)
Hash identifier:          BokG6iUKLOKCKxvv02ueMonuskwWipGEu1duwMO1Uy4=
Subject key identifier:   35:A2:54:BE:F0:95:DF:6D:B0:63:AE:B7:4E:E6:AB:B1:97:B2:3C:51
Certificate issuer:       /CN=1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44
Certificate serial:       57028093809330E501C94880779462F02A9D1CA7
Authority key identifier: 1C:4A:D4:14:B6:D5:C6:E6:82:A2:1C:57:99:DA:3B:57:58:CB:8A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/323830343a353462633a383030303a3a2f33332d3333203d3e20323638363637.roa
Signing time:             Mon 15 Aug 2022 21:30:06 +0000
ROA not before:           Mon 15 Aug 2022 21:25:06 +0000
ROA not after:            Mon 14 Aug 2023 21:30:06 +0000
asID:                     268667
IP address blocks:        2804:54bc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:02:80:93:80:93:30:e5:01:c9:48:80:77:94:62:f0:2a:9d:1c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44
        Validity
            Not Before: Aug 15 21:25:06 2022 GMT
            Not After : Aug 14 21:30:06 2023 GMT
        Subject: CN=35A254BEF095DF6DB063AEB74EE6ABB197B23C51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:fd:06:da:18:55:0a:66:90:6b:a2:91:5a:99:
                    d0:a7:fd:79:d7:29:c0:2d:59:78:5f:be:31:33:6c:
                    9e:44:37:20:21:3e:ac:d0:9e:fc:b7:2a:ee:87:1b:
                    2d:8f:cc:fb:eb:d9:8a:86:cb:64:47:8d:88:c5:6f:
                    8a:3b:29:33:58:be:6c:d0:62:44:f8:cf:54:1b:4e:
                    0c:7a:86:3d:52:39:52:24:0a:09:c6:41:85:32:14:
                    74:eb:28:6f:d2:07:2f:c0:70:c7:72:a2:e1:9b:64:
                    72:53:a8:a4:49:7a:76:1b:fd:73:8f:38:06:c4:3a:
                    4a:74:3c:1a:77:e8:97:c2:3e:95:bd:4b:bf:ac:93:
                    d8:26:66:e3:f9:1a:51:4c:55:63:c0:0c:59:fa:a4:
                    f2:e7:6c:42:74:ae:f7:c7:42:cd:dd:24:2e:c2:44:
                    f9:20:59:ee:0e:81:89:d3:f9:40:cd:e8:bc:00:fa:
                    3d:9e:47:06:f3:00:69:6f:a4:78:da:4b:5c:01:3d:
                    0d:bf:7c:17:b5:94:d7:44:0d:30:05:4e:65:95:ce:
                    ac:c5:74:dc:fc:84:8a:ec:31:9f:8c:2f:84:6c:6f:
                    14:b1:db:8a:84:e6:98:c3:e0:e5:25:e1:14:36:92:
                    07:50:63:f5:d4:e0:f4:4f:99:52:bd:17:93:d1:85:
                    0c:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:A2:54:BE:F0:95:DF:6D:B0:63:AE:B7:4E:E6:AB:B1:97:B2:3C:51
            X509v3 Authority Key Identifier:
                keyid:1C:4A:D4:14:B6:D5:C6:E6:82:A2:1C:57:99:DA:3B:57:58:CB:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/323830343a353462633a383030303a3a2f33332d3333203d3e20323638363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54bc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         1b:24:34:77:ca:e5:0a:3c:4e:c3:df:f5:33:6a:58:26:93:f3:
         ef:06:b2:52:ec:72:a8:e0:06:0a:3c:be:88:ee:08:98:fc:db:
         2e:e7:9d:d6:87:40:f9:15:14:89:f9:4c:05:a9:76:43:ea:d6:
         dc:87:a0:bc:a5:46:ab:f0:67:64:dd:80:0f:5c:4e:29:cd:56:
         63:e1:64:38:be:53:71:b3:d9:57:94:1a:fc:d3:23:93:9e:96:
         2e:6a:e4:d6:dd:fd:9e:29:27:c8:93:37:9c:29:50:ee:6d:99:
         57:f5:1b:6d:7e:b4:3a:51:fa:c8:26:98:8a:b1:0e:20:a7:7f:
         63:c4:86:e3:d4:e1:e4:c7:4c:f1:d6:87:b9:b9:bc:78:e5:f7:
         28:96:89:15:4a:cf:49:05:79:92:e0:d6:1d:61:ca:95:0d:03:
         e3:2e:51:06:1b:63:16:51:81:7c:73:f5:33:55:46:4a:de:ad:
         7e:2e:6b:9e:41:18:12:40:c8:11:d1:0d:90:32:92:2c:6a:2c:
         63:f3:9a:2a:0b:27:6e:d9:84:d1:77:6b:7a:aa:1b:49:61:cc:
         52:a2:48:03:70:aa:53:df:aa:35:10:01:32:80:e7:a5:a2:54:
         b6:1d:be:02:1d:c8:ed:47:42:52:49:3b:25:25:50:c3:b5:37:
         d4:ab:30:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:48 2024 by rpki-client on console-ams.rpki-client.org