Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a3a2f33332d3333203d3e20323634353532.roa
File:                     323830343a323136343a3a2f33332d3333203d3e20323634353532.roa (raw, json)
Hash identifier:          CeE+tYt9CR1MqjTXpoLQz68GSPoRNVf4K3AE1nUPaSE=
Subject key identifier:   5D:29:BB:5E:7A:2C:7C:94:7B:62:7B:46:B3:46:B8:B4:26:89:C3:99
Certificate issuer:       /CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
Certificate serial:       34089285DB86273E8F3EA1548B3652AA88E22BBF
Authority key identifier: 2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a3a2f33332d3333203d3e20323634353532.roa
Signing time:             Thu 25 Aug 2022 23:49:03 +0000
ROA not before:           Thu 25 Aug 2022 23:44:03 +0000
ROA not after:            Thu 24 Aug 2023 23:49:03 +0000
asID:                     264552
IP address blocks:        2804:2164::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:08:92:85:db:86:27:3e:8f:3e:a1:54:8b:36:52:aa:88:e2:2b:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
        Validity
            Not Before: Aug 25 23:44:03 2022 GMT
            Not After : Aug 24 23:49:03 2023 GMT
        Subject: CN=5D29BB5E7A2C7C947B627B46B346B8B42689C399
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:9a:87:72:73:2c:8f:93:cf:4d:54:6f:d8:8e:
                    d2:87:ee:57:96:f7:8f:78:a1:73:99:b8:0a:06:16:
                    76:6f:8f:df:47:ee:b3:80:a1:ea:aa:d7:a3:8b:38:
                    62:5d:fd:ea:6b:37:52:2f:c2:bb:4d:73:62:28:42:
                    3f:9a:ce:eb:b9:b0:a0:9e:4b:b2:59:dc:8a:a7:e6:
                    c5:a1:97:d8:d7:11:fe:58:aa:b3:2b:97:2f:d7:b7:
                    c8:1a:06:7e:3a:9a:55:58:83:25:2b:02:86:e3:80:
                    c8:d1:db:5e:87:12:78:63:59:04:39:78:8c:5c:ec:
                    d9:15:60:08:68:dd:df:2a:52:32:00:cb:fd:38:ca:
                    b9:83:32:a2:4e:e1:b1:73:b8:78:e2:c5:b9:31:67:
                    85:9c:42:de:58:1c:f8:45:a7:5b:8f:29:e3:e7:ea:
                    6e:91:2a:16:e0:6a:85:1c:1b:b8:d4:2f:6f:a6:a9:
                    57:7f:5a:84:de:7c:c6:f9:a6:90:8c:ca:79:7b:09:
                    78:b3:1f:83:0a:97:57:e4:a5:d0:90:2b:2b:c7:4a:
                    2b:8f:67:8d:0f:bb:e1:d6:5a:b0:fd:fe:d3:65:9c:
                    59:f5:38:65:d6:d0:79:5d:b7:93:73:d1:8a:fe:12:
                    35:fa:96:7b:1a:2e:e8:2d:ad:ac:87:52:6e:51:9a:
                    5f:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:29:BB:5E:7A:2C:7C:94:7B:62:7B:46:B3:46:B8:B4:26:89:C3:99
            X509v3 Authority Key Identifier:
                keyid:2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a3a2f33332d3333203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2164::/33

    Signature Algorithm: sha256WithRSAEncryption
         6b:b1:13:2a:42:74:9e:92:3a:7c:ff:92:12:84:98:b6:2c:42:
         bb:88:15:89:a1:f6:61:57:b5:10:7a:af:b7:33:2c:23:3d:a7:
         ae:49:6c:9e:fc:6a:91:6e:72:bb:60:ac:01:1c:6a:13:a6:6d:
         52:1e:89:87:85:9f:20:2f:53:0b:37:c5:ec:0b:3b:15:c1:2a:
         b0:66:eb:f8:fe:99:86:9a:13:f0:2d:c7:28:e1:34:e5:b0:4c:
         78:33:67:b0:f2:8d:6c:9f:18:25:3a:c7:95:8a:4e:ba:d8:2c:
         2c:6a:06:06:c3:1c:9c:6e:ae:9e:b5:38:59:3f:bc:be:7c:55:
         33:b5:c5:d4:88:5c:d7:2b:f8:8a:df:5a:2f:dd:b9:54:32:24:
         5f:74:fd:23:7c:98:33:7c:f3:88:81:29:3d:77:6a:6e:37:0c:
         f7:f9:13:ca:d6:77:5d:d1:28:68:a5:19:36:ef:33:4e:3f:cd:
         59:e3:2c:2e:81:ee:ed:e8:ac:d1:69:a7:43:80:20:d9:4c:b0:
         f2:1a:ab:16:9b:f2:c4:82:b4:2f:cc:da:8f:fb:eb:7b:86:ca:
         f2:2f:e9:27:2d:d1:cb:ee:2c:ad:96:3f:9d:f5:9f:4c:b1:6a:
         65:3a:53:c6:3d:b2:91:4d:68:53:39:65:ca:69:cb:f0:05:a1:
         8c:8d:15:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org