Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/0/323830343a356534343a3a2f33322d3336203d3e20323639303232.roa
File:                     323830343a356534343a3a2f33322d3336203d3e20323639303232.roa (raw, json)
Hash identifier:          aZ4e62dpIv0X70vhn7n/ZULK4BzO624xXJqjQ9qI4iM=
Subject key identifier:   81:25:1D:7F:87:78:D6:5E:FD:C4:57:E2:27:12:80:A4:6E:9E:A9:89
Certificate issuer:       /CN=85318E38F0022CA01B9801C5C2C525A6337F70C3
Certificate serial:       1F55556E5F06DDFB456CD14E11B74A55538A2A26
Authority key identifier: 85:31:8E:38:F0:02:2C:A0:1B:98:01:C5:C2:C5:25:A6:33:7F:70:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85318E38F0022CA01B9801C5C2C525A6337F70C3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/0/323830343a356534343a3a2f33322d3336203d3e20323639303232.roa
Signing time:             Fri 10 Nov 2023 13:19:25 +0000
ROA not before:           Fri 10 Nov 2023 13:14:25 +0000
ROA not after:            Fri 08 Nov 2024 13:19:25 +0000
asID:                     269022
IP address blocks:        2804:5e44::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:55:55:6e:5f:06:dd:fb:45:6c:d1:4e:11:b7:4a:55:53:8a:2a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=85318E38F0022CA01B9801C5C2C525A6337F70C3
        Validity
            Not Before: Nov 10 13:14:25 2023 GMT
            Not After : Nov  8 13:19:25 2024 GMT
        Subject: CN=81251D7F8778D65EFDC457E2271280A46E9EA989
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:28:54:a1:2a:18:e1:6d:e8:4d:2f:f0:7a:6c:
                    21:ec:7a:53:60:0f:82:2f:ea:54:6c:e0:6c:b5:b6:
                    06:ca:8a:01:6b:fe:68:10:46:b8:40:bd:f2:d4:bf:
                    9d:0b:d9:ee:cf:7b:e4:9c:f1:79:c1:cd:35:60:c2:
                    9c:43:56:a1:a6:63:f5:b8:61:f8:07:78:d4:9a:9f:
                    16:6d:0d:58:9f:9a:76:0b:7b:7f:df:b0:7f:2e:54:
                    e9:7c:5e:cf:7d:6b:88:20:02:f8:c7:61:e9:5a:83:
                    8f:da:7e:6f:68:74:c1:f8:66:ec:1f:ce:1f:57:88:
                    11:c3:99:89:3e:02:d5:49:f4:61:9f:12:5f:62:83:
                    c0:f7:96:a5:e3:75:7e:6d:65:ec:32:a1:1c:79:ce:
                    e3:d4:86:f6:0c:20:58:3b:22:61:b3:9d:ba:71:87:
                    9f:6a:c3:e0:f6:fc:76:26:e5:33:27:14:63:84:d6:
                    8d:b3:33:bf:ee:42:ee:50:eb:9e:51:f5:11:a7:77:
                    b3:3c:cc:24:c2:48:8c:09:5c:74:d5:87:c9:fb:22:
                    a2:57:a8:69:8f:ba:5d:15:2e:a7:8e:6d:fa:3b:6f:
                    04:a1:96:ba:d8:0d:09:30:81:4c:22:4c:f5:2f:b1:
                    0f:0b:35:7f:63:d4:5f:6b:46:16:01:6b:c7:bc:21:
                    55:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:25:1D:7F:87:78:D6:5E:FD:C4:57:E2:27:12:80:A4:6E:9E:A9:89
            X509v3 Authority Key Identifier:
                keyid:85:31:8E:38:F0:02:2C:A0:1B:98:01:C5:C2:C5:25:A6:33:7F:70:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/0/85318E38F0022CA01B9801C5C2C525A6337F70C3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/85318E38F0022CA01B9801C5C2C525A6337F70C3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8wVEGHpPsBuGfwY1D9xVBNDCR6wR6w6eihtaZ6ND3Cx8/0/323830343a356534343a3a2f33322d3336203d3e20323639303232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5e44::/32

    Signature Algorithm: sha256WithRSAEncryption
         18:46:66:47:71:58:ab:fc:5c:e8:6e:d2:fd:96:04:35:4b:5c:
         02:ad:40:37:76:c9:f3:a9:e9:21:1b:dc:34:71:39:ec:dc:27:
         0f:e5:f3:90:0a:a5:36:c1:6d:d5:84:73:0b:b9:f4:40:ff:dc:
         25:2c:85:ae:a0:ec:5b:68:bd:b8:e9:35:85:50:23:0c:f0:b3:
         80:4c:90:7e:5a:9d:9b:cf:2c:78:7c:6e:bc:5b:63:17:71:69:
         67:24:0b:d1:8b:fd:cf:38:05:18:28:6e:1b:b2:ad:f8:07:ae:
         64:82:58:f3:99:05:0c:4b:85:f4:4e:c2:08:06:d2:f5:c5:36:
         c8:c9:80:42:c1:6b:67:6b:18:5e:f0:b1:37:ed:3c:04:75:c6:
         66:2d:e1:b5:66:f2:e8:32:18:c5:da:c2:bb:ed:e8:5a:7d:ef:
         4d:fd:92:1e:dd:a7:f8:65:37:df:48:87:5c:50:27:bc:7d:77:
         88:02:21:e4:67:75:30:82:20:cc:77:b2:e7:5c:9c:55:fc:93:
         a1:2c:51:8c:12:68:65:fa:26:b6:28:ec:6b:69:e0:1f:92:73:
         75:55:17:ac:3a:c8:bc:59:07:a5:ac:85:ad:d0:8d:eb:04:dc:
         f9:96:a3:7b:38:3b:53:21:1c:ad:a3:3d:25:0c:9a:75:a2:b3:
         d3:1f:e2:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org