Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a343030303a3a2f34302d3430203d3e20323634353532.roa
File:                     323830343a323136343a343030303a3a2f34302d3430203d3e20323634353532.roa (raw, json)
Hash identifier:          iW1JlI3PfkAjsRmDFawRs8s59hVONYm01zBrGl3pOMk=
Subject key identifier:   C2:CF:3E:6D:79:94:26:13:10:3C:1E:A9:F0:79:68:09:35:09:E4:D5
Certificate issuer:       /CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
Certificate serial:       6BD08E54544E45D3DAC034E6DDB26DB6029790DB
Authority key identifier: 2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a343030303a3a2f34302d3430203d3e20323634353532.roa
Signing time:             Thu 25 Aug 2022 23:49:02 +0000
ROA not before:           Thu 25 Aug 2022 23:44:02 +0000
ROA not after:            Thu 24 Aug 2023 23:49:02 +0000
asID:                     264552
IP address blocks:        2804:2164:4000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:d0:8e:54:54:4e:45:d3:da:c0:34:e6:dd:b2:6d:b6:02:97:90:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
        Validity
            Not Before: Aug 25 23:44:02 2022 GMT
            Not After : Aug 24 23:49:02 2023 GMT
        Subject: CN=C2CF3E6D79942613103C1EA9F07968093509E4D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:9d:e1:e5:e4:d8:73:8e:b9:0b:10:23:2a:26:
                    32:bb:64:c9:a1:d9:5c:75:28:c6:6a:49:68:f3:17:
                    34:84:d2:c9:2a:e8:3d:65:32:3b:b8:b8:73:ee:84:
                    70:29:06:ec:80:14:90:18:11:13:d1:77:82:a2:be:
                    12:6d:ec:58:f5:5b:fe:b7:f4:38:e0:7b:6a:66:e3:
                    b8:37:8e:7e:d0:97:17:c0:bc:b7:63:15:ea:34:ff:
                    c2:fd:7e:dc:98:3f:88:cf:b9:29:bf:23:64:41:85:
                    18:95:4d:52:af:a3:29:d7:2d:40:c4:86:29:81:88:
                    38:e7:01:55:e2:a9:b7:50:08:1a:47:db:08:a9:0d:
                    a7:71:6c:fe:33:b4:e0:58:cd:a8:15:9d:0f:ec:bc:
                    7f:32:75:0e:3a:ec:39:a1:47:45:8e:ad:a0:38:0f:
                    c2:d3:32:6a:fa:28:3a:d3:6c:0c:88:f7:3b:3c:78:
                    65:6b:37:02:d2:b0:28:a9:8a:0a:af:0f:fb:57:d9:
                    64:ba:45:c3:8b:46:58:fa:7a:e2:be:66:cf:4e:9e:
                    d6:f1:42:d8:0e:4c:6f:0a:7d:b7:1c:53:ae:71:6e:
                    7c:81:91:93:e0:b7:16:e5:33:71:e6:67:55:37:c7:
                    10:a7:de:41:31:c4:05:52:5e:c9:fa:83:8a:e4:3d:
                    74:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CF:3E:6D:79:94:26:13:10:3C:1E:A9:F0:79:68:09:35:09:E4:D5
            X509v3 Authority Key Identifier:
                keyid:2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a343030303a3a2f34302d3430203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2164:4000::/40

    Signature Algorithm: sha256WithRSAEncryption
         42:51:48:aa:a6:35:6f:ac:19:91:7e:5e:d9:80:5a:2f:bf:7e:
         9e:8a:8f:83:f7:1d:5f:bf:c0:ca:c5:7d:1f:05:65:02:f9:56:
         70:dd:b4:0a:3f:4e:9f:b2:ae:48:a0:3a:ba:18:bb:49:a5:71:
         05:ad:1b:03:03:8b:2a:4f:2d:2d:8c:2d:63:2a:f2:fd:76:e4:
         02:51:8c:97:2d:80:61:45:25:56:cf:e5:23:cd:81:3c:8d:2a:
         98:53:76:1a:8b:a0:75:59:9b:77:e9:d0:01:d6:67:b8:f3:20:
         cc:b5:10:b5:7b:fa:be:b3:a4:d8:13:c8:9a:54:d4:91:89:22:
         7d:7c:cd:00:7b:f5:ba:77:6b:f6:26:02:22:5a:b3:61:60:6d:
         77:c9:05:2c:27:c1:ff:87:90:a5:e1:9c:15:14:88:35:82:bc:
         7d:c5:5e:bc:89:35:e4:5e:27:e4:57:5a:08:ee:91:eb:ed:e2:
         18:cb:2a:f8:59:44:62:43:56:a2:4b:07:97:f3:e5:ef:7b:ac:
         0b:0d:ab:c5:50:1b:a2:7a:61:33:5b:32:d4:81:7e:bc:bd:06:
         06:d1:a8:c6:44:20:6d:f5:04:96:cd:5a:6b:d9:ee:e8:a4:ab:
         4e:ff:49:e5:33:03:9a:55:13:b9:9b:64:d2:3a:2c:c1:b8:fb:
         39:e8:59:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org