Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a633030303a3a2f34302d3430203d3e20323634353532.roa
File:                     323830343a323136343a633030303a3a2f34302d3430203d3e20323634353532.roa (raw, json)
Hash identifier:          c2/xspP2UMEryessdZqHZoPffqnac7xpRWyIyMKVxHM=
Subject key identifier:   C8:A2:F1:11:42:FC:A1:5F:46:B0:89:DD:FC:95:A8:91:A1:A5:33:BD
Certificate issuer:       /CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
Certificate serial:       3B2F139C3D3643ADA815C48D80BBDA6E403C92DB
Authority key identifier: 2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a633030303a3a2f34302d3430203d3e20323634353532.roa
Signing time:             Thu 25 Aug 2022 23:49:02 +0000
ROA not before:           Thu 25 Aug 2022 23:44:02 +0000
ROA not after:            Thu 24 Aug 2023 23:49:02 +0000
asID:                     264552
IP address blocks:        2804:2164:c000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:2f:13:9c:3d:36:43:ad:a8:15:c4:8d:80:bb:da:6e:40:3c:92:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23
        Validity
            Not Before: Aug 25 23:44:02 2022 GMT
            Not After : Aug 24 23:49:02 2023 GMT
        Subject: CN=C8A2F11142FCA15F46B089DDFC95A891A1A533BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ca:5c:63:cf:ca:d4:a2:29:47:f6:cf:37:7a:
                    f5:3d:a9:88:32:0a:d1:28:7c:46:5a:6c:8b:4e:bf:
                    c1:8c:e1:6b:88:c7:b3:b7:01:7e:05:70:e3:3a:02:
                    ee:a5:13:c8:a5:d1:e8:ec:ef:26:f2:5b:94:5c:ad:
                    f5:09:64:b5:9b:ce:78:bb:ef:d1:3b:81:f9:60:7b:
                    c0:65:21:43:2f:c8:b9:5e:62:48:81:33:e7:63:dd:
                    18:2a:99:06:f1:8f:8a:cf:15:23:9c:e9:d1:bd:43:
                    1c:73:dd:cf:9c:f8:40:f5:5a:6a:0b:24:96:c7:5f:
                    64:92:2f:ba:d6:fd:8a:e2:28:c7:5f:51:60:cd:a9:
                    f9:9f:0c:36:5f:f9:1e:85:81:cc:e2:1a:6b:d1:5f:
                    41:16:5c:62:d4:7f:09:5d:90:0d:45:c1:d4:5c:a5:
                    b0:5c:d4:f4:6f:6f:2f:97:3e:a3:de:8c:b3:5c:53:
                    0d:a5:28:52:bc:f4:3d:ac:6f:6b:65:a7:c7:b0:3f:
                    4f:6e:1f:3f:fb:af:59:fe:fd:bf:1b:6c:36:89:fd:
                    77:a9:7c:bb:6b:a6:ec:36:b5:b5:69:56:8e:6e:f4:
                    6c:7d:bf:74:b5:5d:c1:4f:d1:9c:bf:76:b8:7b:8a:
                    74:68:fa:17:bc:8c:22:d7:f4:0e:c7:50:09:59:a2:
                    14:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:A2:F1:11:42:FC:A1:5F:46:B0:89:DD:FC:95:A8:91:A1:A5:33:BD
            X509v3 Authority Key Identifier:
                keyid:2D:57:91:AB:CD:F8:9E:4D:D6:E3:B3:B0:E1:BC:61:A1:4A:14:7C:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2D5791ABCDF89E4DD6E3B3B0E1BC61A14A147C23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8vNEkNEnWwzqXfjTo9inRz8xy3ZTFnXTs1j2Pit1dJwV/0/323830343a323136343a633030303a3a2f34302d3430203d3e20323634353532.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2164:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5e:37:87:93:31:47:62:c2:dd:4e:6f:c8:1b:8e:ee:cc:93:f7:
         21:f0:68:b7:35:0f:03:e6:97:3a:ae:31:44:c2:d8:3e:d9:95:
         cd:b0:2e:70:c2:cd:40:fa:76:51:d9:19:68:fd:ad:dc:5d:17:
         47:aa:18:e6:5d:a4:39:4c:1c:36:4d:66:84:93:f4:67:46:f0:
         6d:88:52:7d:91:7f:28:3a:d7:fd:a4:0b:a8:6a:6e:6c:15:27:
         7b:9a:92:30:91:b5:8f:a5:8b:68:80:46:a2:08:ef:19:92:1d:
         ad:7a:99:a7:2b:a5:f2:81:60:99:97:34:aa:37:ab:4b:a6:e6:
         92:62:79:14:61:92:bb:0c:bd:13:c0:9e:32:25:45:db:92:31:
         2f:6b:06:b6:17:fa:80:3e:82:45:87:9b:b2:e5:b7:24:47:1f:
         ac:40:96:d3:72:8b:74:97:30:64:01:8d:a9:a1:c6:50:87:a1:
         c4:dc:f5:45:86:89:df:1a:20:bb:84:61:d7:c6:a2:d4:3e:ff:
         40:61:d2:c5:38:93:73:96:bb:27:64:9e:af:d4:93:71:56:8f:
         c5:ba:60:11:c3:b6:30:8d:19:cb:08:b8:85:39:06:3c:16:a9:
         9d:8a:87:30:7b:64:37:55:dd:9f:41:52:e5:cb:51:2d:12:d8:
         84:05:bd:41
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:06 2024 by rpki-client on console-ams.rpki-client.org