Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/0/323830343a386230303a323030303a3a2f33352d3335203d3e20323733373036.roa
File:                     323830343a386230303a323030303a3a2f33352d3335203d3e20323733373036.roa (raw, json)
Hash identifier:          +yFryHtivE3FXpl+bSA7wwSZbvvjiRcdeeuXO+Q53KE=
Subject key identifier:   68:F0:F9:20:76:FB:A4:D4:5D:6A:B4:51:3B:FD:89:05:CF:C5:C1:22
Certificate issuer:       /CN=052C2086B149287907F10D1784E2342E79636DC2
Certificate serial:       173A5F343F5BC6A8907C6BB65854742F031776B9
Authority key identifier: 05:2C:20:86:B1:49:28:79:07:F1:0D:17:84:E2:34:2E:79:63:6D:C2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/052C2086B149287907F10D1784E2342E79636DC2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/0/323830343a386230303a323030303a3a2f33352d3335203d3e20323733373036.roa
Signing time:             Mon 04 Mar 2024 22:55:35 +0000
ROA not before:           Mon 04 Mar 2024 22:50:35 +0000
ROA not after:            Mon 03 Mar 2025 22:55:35 +0000
asID:                     273706
IP address blocks:        2804:8b00:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:3a:5f:34:3f:5b:c6:a8:90:7c:6b:b6:58:54:74:2f:03:17:76:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=052C2086B149287907F10D1784E2342E79636DC2
        Validity
            Not Before: Mar  4 22:50:35 2024 GMT
            Not After : Mar  3 22:55:35 2025 GMT
        Subject: CN=68F0F92076FBA4D45D6AB4513BFD8905CFC5C122
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:80:81:f7:c2:ca:33:95:da:70:a6:0f:7f:3a:
                    b9:a5:36:6e:c6:0a:1b:c0:56:31:a9:8e:87:8b:3f:
                    a1:f5:61:6f:e4:2c:41:5a:12:8d:ad:2e:b5:1d:07:
                    fd:c0:a3:ad:91:2f:f2:ee:10:8f:f1:df:d1:67:5f:
                    01:7b:99:58:a9:5e:5a:94:38:ab:0e:5a:52:3c:c5:
                    17:59:05:39:86:e1:a0:ee:41:8f:6c:34:72:97:18:
                    2f:b4:3c:22:79:8a:e5:1f:d1:dc:04:8e:80:de:cb:
                    ae:b9:57:75:b5:6a:cc:34:f4:c6:75:3e:31:43:9d:
                    c9:8e:38:36:c5:f4:b1:dc:4b:e6:f6:dc:0a:5d:9b:
                    1f:11:70:7e:95:df:e3:6a:90:2c:bf:35:57:2b:fe:
                    6b:94:25:15:fe:dd:84:44:47:14:1d:01:ca:a7:95:
                    37:04:5a:66:08:91:1c:fb:83:37:77:6a:ef:65:69:
                    7a:7b:61:e0:60:04:9d:ed:13:bd:23:c6:f4:2c:c7:
                    67:d4:9c:94:a6:56:a7:e2:10:c9:b5:d2:60:a5:46:
                    cf:c1:8a:72:95:23:4b:30:90:20:de:e7:fd:7b:d2:
                    cc:42:24:93:70:55:ea:5a:e3:83:e0:88:93:b5:cf:
                    41:bb:9c:94:d6:17:04:96:08:10:72:b5:4d:5c:ae:
                    b4:bd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:F0:F9:20:76:FB:A4:D4:5D:6A:B4:51:3B:FD:89:05:CF:C5:C1:22
            X509v3 Authority Key Identifier:
                keyid:05:2C:20:86:B1:49:28:79:07:F1:0D:17:84:E2:34:2E:79:63:6D:C2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/0/052C2086B149287907F10D1784E2342E79636DC2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/052C2086B149287907F10D1784E2342E79636DC2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/94uJvpB2KArByfSRcrKT4JDWH1dJCNzcmmLupdvSstWv/0/323830343a386230303a323030303a3a2f33352d3335203d3e20323733373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8b00:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         2c:2b:a5:39:80:41:44:05:f3:70:7b:43:07:3f:a7:9e:17:b9:
         c5:ef:3d:7f:8b:7e:73:ff:29:d7:9d:c8:fa:a5:90:dc:64:7d:
         f7:a0:e1:9e:c0:28:fd:db:79:86:57:53:9a:46:b2:75:f5:74:
         46:20:6f:44:9a:67:d0:df:b3:ae:35:fa:29:6a:e1:96:07:60:
         4f:64:37:c2:f3:f1:2b:16:3d:22:26:05:a4:f1:a6:54:2d:b1:
         c6:0e:98:bc:b3:fd:21:78:47:d5:52:c4:81:d1:e1:77:51:47:
         61:6a:a2:a6:5b:f7:9d:2f:fa:c8:08:f4:aa:51:7e:37:b1:b9:
         ad:b0:ec:44:4d:38:14:e0:53:69:a1:dc:54:53:6a:e7:18:86:
         0a:45:ca:7d:34:09:6e:22:1a:e4:04:d2:64:f7:cc:a4:70:99:
         63:30:fc:78:aa:2d:35:12:3c:d8:6c:67:d4:d9:6a:63:d6:08:
         4e:3f:3c:d4:34:54:df:bb:cb:9d:cd:e8:b6:aa:9f:e3:95:f9:
         36:64:41:d9:ca:80:27:c6:a8:8d:69:ac:c5:61:7b:33:d3:80:
         e8:c0:7d:81:c8:ae:42:a9:aa:15:be:82:b3:90:1a:b2:71:c7:
         06:ea:0f:ff:71:12:40:7c:fb:9e:f7:b3:c7:78:2a:8c:76:ec:
         37:dc:8d:08
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org