Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/323830343a353462633a3a2f33322d3332203d3e20323638363637.roa
File:                     323830343a353462633a3a2f33322d3332203d3e20323638363637.roa (raw, json)
Hash identifier:          4dzxOCD9iy1PSWjTtcAIkgKHldjN+Jq4QPkpJqj1Tyw=
Subject key identifier:   32:3C:1B:31:E3:4F:A8:DB:40:BA:33:3B:F2:28:29:2E:00:7C:43:9A
Certificate issuer:       /CN=1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44
Certificate serial:       1FA4D462DC0CA10D1CCE265AA8D4A6676C0B4B03
Authority key identifier: 1C:4A:D4:14:B6:D5:C6:E6:82:A2:1C:57:99:DA:3B:57:58:CB:8A:44
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/323830343a353462633a3a2f33322d3332203d3e20323638363637.roa
Signing time:             Mon 15 Aug 2022 21:30:52 +0000
ROA not before:           Mon 15 Aug 2022 21:25:52 +0000
ROA not after:            Mon 14 Aug 2023 21:30:52 +0000
asID:                     268667
IP address blocks:        2804:54bc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:a4:d4:62:dc:0c:a1:0d:1c:ce:26:5a:a8:d4:a6:67:6c:0b:4b:03
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44
        Validity
            Not Before: Aug 15 21:25:52 2022 GMT
            Not After : Aug 14 21:30:52 2023 GMT
        Subject: CN=323C1B31E34FA8DB40BA333BF228292E007C439A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:35:09:8f:cc:ad:98:1a:e6:0c:91:01:ed:b8:
                    8a:59:04:d1:2f:7e:64:9a:f8:cd:f1:18:78:6e:f6:
                    1f:7f:c6:49:e0:12:91:3f:27:50:cb:fa:94:16:8f:
                    e0:57:ae:b6:55:f4:83:d0:25:7f:0a:60:53:eb:a9:
                    b8:7e:13:5a:b7:1b:e0:21:da:72:9a:ca:9f:18:ea:
                    e2:dd:49:a9:a7:47:51:f7:b3:21:18:61:2f:89:b4:
                    13:d0:e1:51:c8:47:d4:89:e4:23:83:5b:02:a2:5f:
                    9c:b6:b1:7d:55:02:11:88:44:b1:b2:31:23:bc:94:
                    41:8b:65:52:56:eb:dd:d9:bc:8c:34:b0:e3:80:be:
                    9e:c9:8b:7c:d3:a7:9b:3d:20:21:a0:09:e2:ef:47:
                    9f:2f:57:9b:e8:da:89:0e:dd:66:d6:cc:8d:56:c3:
                    69:a8:d0:c1:5d:f0:50:65:bd:f4:8a:7a:05:82:d3:
                    e0:54:11:84:c8:e6:d0:f4:da:89:90:a4:e4:ad:04:
                    db:f5:4a:7d:b6:78:88:08:06:29:c6:f8:4f:f2:20:
                    c5:b6:7e:3c:53:79:cf:10:86:3e:04:df:97:44:83:
                    56:00:40:bc:16:96:03:69:a0:ad:d0:34:41:6f:6c:
                    f1:e8:c5:e6:17:71:c2:88:f2:70:be:9c:f6:90:1e:
                    31:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:3C:1B:31:E3:4F:A8:DB:40:BA:33:3B:F2:28:29:2E:00:7C:43:9A
            X509v3 Authority Key Identifier:
                keyid:1C:4A:D4:14:B6:D5:C6:E6:82:A2:1C:57:99:DA:3B:57:58:CB:8A:44

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C4AD414B6D5C6E682A21C5799DA3B5758CB8A44.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8JBt68V5XzfNw5HbYNeYAnsbYqvdikFzY8mqFmhTNVp7/0/323830343a353462633a3a2f33322d3332203d3e20323638363637.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54bc::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:50:b7:24:1a:42:ac:7e:97:92:85:3b:8d:33:ee:c3:5e:d9:
         11:95:d8:71:62:e9:ea:a9:db:d6:7e:77:5b:9f:d1:f9:08:91:
         db:c0:d6:ba:59:4e:ce:ff:c8:46:96:f4:df:bc:8b:36:88:d5:
         85:aa:2a:fa:d5:fd:e7:be:65:69:da:f2:e8:21:ad:1b:98:bc:
         b3:22:9e:6e:8f:91:a2:e7:4e:b6:91:a6:cb:47:c8:7f:6d:27:
         07:74:6c:db:f0:2a:02:c4:62:48:6a:7c:62:c3:14:95:e8:ad:
         f9:b9:ac:b4:a1:2b:dc:96:74:8e:09:39:e6:8d:6a:9d:5b:9f:
         b1:da:21:ba:17:24:ca:67:e1:36:98:16:9d:d6:a8:a1:a7:db:
         d9:e7:62:8d:5b:ef:4d:f4:e9:3a:3d:6e:32:4d:7d:78:33:bc:
         d2:f3:07:7a:06:a9:5a:11:29:79:9f:32:66:db:3b:b2:a6:9c:
         a8:c9:24:50:23:d1:2e:87:81:c2:cf:f6:73:04:59:dd:97:2e:
         39:5b:b0:0c:ab:f6:e7:74:9a:11:8f:3d:44:e2:ea:86:2e:5f:
         c6:0c:2e:01:b6:4d:3f:72:c5:16:4a:e7:57:e5:d6:4e:c3:e3:
         35:1f:4b:22:54:66:6d:ae:f1:5a:da:68:6f:4d:50:e7:eb:ae:
         58:43:a6:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:58 2024 by rpki-client on console-fra.rpki-client.org