Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a383030303a3a2f33342d3334203d3e20323634353532.roa
File:                     323830343a323136343a383030303a3a2f33342d3334203d3e20323634353532.roa (raw, json)
Hash identifier:          bEtBQSFMLifXrDSNyaigwFiWWksfoctEOvGoksaOcBI=
Subject key identifier:   5B:70:DD:82:B8:48:CC:E0:51:CE:D7:0D:F9:B9:52:59:AD:FF:E3:69
Certificate issuer:       /CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
Certificate serial:       6F46350F3481A15B236B0E4A17B18EC9AA5D7B86
Authority key identifier: 2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a383030303a3a2f33342d3334203d3e20323634353532.roa
Signing time:             Thu 23 Mar 2023 13:23:58 +0000
ROA not before:           Thu 23 Mar 2023 13:18:58 +0000
ROA not after:            Thu 21 Mar 2024 13:23:58 +0000
asID:                     264552
IP address blocks:        2804:2164:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:46:35:0f:34:81:a1:5b:23:6b:0e:4a:17:b1:8e:c9:aa:5d:7b:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
        Validity
            Not Before: Mar 23 13:18:58 2023 GMT
            Not After : Mar 21 13:23:58 2024 GMT
        Subject: CN=5B70DD82B848CCE051CED70DF9B95259ADFFE369
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:ca:cb:09:39:6b:30:2c:cd:30:5e:02:5b:61:
                    3d:ea:9d:4f:27:b7:29:b3:d3:18:dc:fd:ec:f7:5a:
                    ec:c8:9c:ee:3b:f5:ca:ba:bf:a2:d4:71:f7:ac:80:
                    2f:c7:80:fe:2c:57:64:0c:5b:bc:b1:b3:6e:e6:fb:
                    f8:5c:32:bd:bf:ae:14:22:4e:8e:9f:de:92:ce:b2:
                    e5:20:3d:b1:77:5b:d6:59:7b:0e:fd:63:ac:e3:09:
                    8c:a2:27:2f:03:6c:3e:ed:fb:7c:93:2d:91:c9:b9:
                    da:73:08:73:a6:d5:db:9b:1d:67:a7:7a:f6:90:2e:
                    a6:02:26:86:03:40:65:2d:69:09:b8:f3:ad:03:32:
                    0c:49:fd:3a:8d:58:f4:ca:ed:01:a0:da:6a:e2:72:
                    5d:13:65:56:a9:bd:91:06:b7:ad:71:04:f8:49:fe:
                    04:90:e4:81:e9:e9:51:09:8f:e0:d0:50:4c:44:ae:
                    b8:f5:bd:5d:9c:18:14:75:85:4d:10:d7:e5:b5:ca:
                    e6:c4:41:20:cd:70:cd:39:74:61:c3:b9:c6:1a:65:
                    06:d5:d3:c2:c4:66:9f:25:cd:a9:30:72:25:08:80:
                    d5:88:78:be:9b:18:27:86:eb:95:ad:23:b5:d4:dc:
                    3d:9f:de:b6:10:e0:22:31:eb:d8:69:7d:80:a7:5f:
                    7f:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5B:70:DD:82:B8:48:CC:E0:51:CE:D7:0D:F9:B9:52:59:AD:FF:E3:69
            X509v3 Authority Key Identifier:
                keyid:2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a383030303a3a2f33342d3334203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2164:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         0e:d1:4a:77:f7:51:67:44:46:a8:96:de:41:d6:33:06:4e:59:
         5b:a7:8b:dc:b3:c3:b5:8b:c0:67:bc:0e:d6:af:a7:f2:4f:3e:
         41:a1:4f:0e:dc:77:26:84:a0:9f:c8:1a:4a:e2:c4:b2:eb:ac:
         fb:ff:fe:6d:bd:37:76:7b:d6:a4:c9:73:cf:a8:6f:b5:35:e7:
         b4:87:1b:9f:ea:aa:4d:c1:ff:64:d3:6c:49:22:30:e8:f4:fb:
         98:6b:36:b6:ee:f7:15:b1:f5:bf:93:c3:f5:32:fb:00:6f:2c:
         d6:bd:2f:e1:bc:2d:9e:e4:63:0a:f4:18:f9:d9:a4:9d:08:0e:
         28:cd:76:f1:02:ae:b0:29:36:ef:b4:a4:1a:a5:7e:91:1e:1e:
         97:b1:d1:96:13:43:7f:ff:32:c2:f2:78:be:3b:c3:2a:c0:d1:
         db:a7:c5:94:e5:c6:13:e4:97:e8:ca:9d:75:8e:97:97:38:ac:
         30:26:57:65:c0:12:51:16:87:40:71:16:e9:0a:20:14:2f:e9:
         88:c6:d2:10:f8:31:d4:3a:7f:8a:c4:0f:3a:75:c6:a2:47:ca:
         54:02:d7:d9:79:cf:a0:06:91:c3:59:b8:e2:aa:e4:02:1d:4d:
         0b:a5:66:ed:c7:b2:8d:42:6f:ee:ee:ee:93:ca:44:20:a4:37:
         03:e5:62:56
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org