Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a343030303a3a2f33342d3334203d3e20323634353532.roa
File:                     323830343a323136343a343030303a3a2f33342d3334203d3e20323634353532.roa (raw, json)
Hash identifier:          /Wbw0F28FqtLRZrvSl5nFjlSnb0mnyxm1QvZqgnncyE=
Subject key identifier:   47:51:D0:C4:91:BD:3F:FC:2F:19:D4:BB:64:14:4A:D9:EF:8C:4C:7C
Certificate issuer:       /CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
Certificate serial:       37F7F4239283ED958C9E054B531C04A3EF9EFD5A
Authority key identifier: 2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a343030303a3a2f33342d3334203d3e20323634353532.roa
Signing time:             Thu 23 Mar 2023 13:23:59 +0000
ROA not before:           Thu 23 Mar 2023 13:18:59 +0000
ROA not after:            Thu 21 Mar 2024 13:23:59 +0000
asID:                     264552
IP address blocks:        2804:2164:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:f7:f4:23:92:83:ed:95:8c:9e:05:4b:53:1c:04:a3:ef:9e:fd:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
        Validity
            Not Before: Mar 23 13:18:59 2023 GMT
            Not After : Mar 21 13:23:59 2024 GMT
        Subject: CN=4751D0C491BD3FFC2F19D4BB64144AD9EF8C4C7C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e2:78:41:eb:0e:91:4a:c4:9f:43:6b:b5:a4:87:
                    07:4f:89:ae:c4:42:70:03:d4:75:a5:9f:f3:9b:72:
                    26:33:c6:e3:57:6e:0c:30:13:77:73:bf:79:2e:8a:
                    a0:d5:5b:89:8d:b0:41:12:37:a5:e7:f5:17:64:bd:
                    35:86:fb:68:4c:c5:6f:5a:ad:ad:e8:d9:5a:fe:2a:
                    04:ec:4f:6f:43:65:fa:e0:4c:ab:60:9a:40:87:4a:
                    15:bf:00:a7:66:b6:aa:f0:e5:23:ae:85:14:75:07:
                    2a:e7:2b:b9:9e:2e:2b:02:28:b0:a1:b9:75:5d:81:
                    b9:f4:dd:03:51:be:54:95:b9:c1:6a:40:25:87:49:
                    52:6a:64:14:19:f1:29:d9:02:c6:14:9a:ef:f1:7d:
                    9c:61:3e:f1:0e:13:bb:2f:f3:09:ff:2b:fe:38:dd:
                    27:d2:9a:f2:38:87:02:ca:7b:ad:cf:7e:3d:4f:61:
                    ee:be:6b:a1:77:97:28:42:a3:31:ff:0c:57:d8:13:
                    72:59:1e:1b:f8:4c:32:08:03:ef:39:6a:90:f4:28:
                    57:62:47:53:cf:bc:68:c2:08:84:f1:50:20:a7:b2:
                    3e:07:03:65:79:6e:c8:44:77:f6:f2:d3:48:0a:1e:
                    f2:a4:3d:66:6a:b6:37:b6:a4:25:46:58:a5:9a:a3:
                    bc:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:51:D0:C4:91:BD:3F:FC:2F:19:D4:BB:64:14:4A:D9:EF:8C:4C:7C
            X509v3 Authority Key Identifier:
                keyid:2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a343030303a3a2f33342d3334203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2164:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:fa:d8:52:59:aa:ab:3a:05:1d:e4:77:bf:c7:ec:e8:22:0e:
         ba:f1:d2:73:5c:93:99:a3:e4:77:f7:3b:2d:67:b5:bf:91:dd:
         f2:9e:06:28:53:47:ad:85:1b:54:ad:3d:36:c6:6d:ff:ca:28:
         42:84:d7:73:b1:61:0f:40:8b:97:4f:5e:2f:81:55:07:eb:f3:
         6b:9f:cb:54:6f:79:bb:1a:d8:b5:37:6e:21:d8:65:13:f6:6e:
         7a:46:c0:4b:60:40:a1:43:0d:bd:4c:47:46:08:25:a4:c1:83:
         47:fb:d0:47:c3:d3:17:05:05:06:51:0f:6f:7d:13:de:88:59:
         fe:bb:70:12:2d:34:a6:13:5d:15:b9:e6:1a:22:a0:e8:00:fe:
         65:a5:80:35:a3:49:13:b5:97:38:76:63:d2:6a:c7:5b:de:93:
         28:1e:a5:48:e6:71:9d:a3:9a:fa:47:04:d9:13:a3:77:e6:b3:
         3c:d6:38:8e:c5:32:fa:10:9e:a0:9c:aa:ad:24:d9:ac:e7:39:
         6f:aa:94:f0:3e:d0:45:a7:05:88:ed:b0:7c:f4:bf:cc:db:4c:
         a1:79:05:61:a0:17:45:ae:51:b9:c6:42:f7:35:9f:f9:f9:59:
         56:ed:1f:1a:34:0f:a2:89:ad:8b:10:22:b6:ff:47:e2:77:2a:
         a1:3c:1f:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:05 2024 by rpki-client on console-ams.rpki-client.org