Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/323830343a363161383a3a2f33322d313238203d3e20323639323438.roa
File:                     323830343a363161383a3a2f33322d313238203d3e20323639323438.roa (raw, json)
Hash identifier:          3u9p5aCPL/k6O46fFi2SjXLrw+9LC2XHgUSH2FvMzV8=
Subject key identifier:   2F:B5:8D:0D:22:BC:D7:2E:6E:E8:95:72:EE:BF:02:F9:4B:E5:4E:D2
Certificate issuer:       /CN=52BAB277EABEAC0C8226FA6A4BB2C41191CD5464
Certificate serial:       5A8D572475E66ED99646C1ECC4F2BB9EE1F8828E
Authority key identifier: 52:BA:B2:77:EA:BE:AC:0C:82:26:FA:6A:4B:B2:C4:11:91:CD:54:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52BAB277EABEAC0C8226FA6A4BB2C41191CD5464.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/323830343a363161383a3a2f33322d313238203d3e20323639323438.roa
Signing time:             Sat 17 Feb 2024 02:23:02 +0000
ROA not before:           Sat 17 Feb 2024 02:18:02 +0000
ROA not after:            Sat 15 Feb 2025 02:23:02 +0000
asID:                     269248
IP address blocks:        2804:61a8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5a:8d:57:24:75:e6:6e:d9:96:46:c1:ec:c4:f2:bb:9e:e1:f8:82:8e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52BAB277EABEAC0C8226FA6A4BB2C41191CD5464
        Validity
            Not Before: Feb 17 02:18:02 2024 GMT
            Not After : Feb 15 02:23:02 2025 GMT
        Subject: CN=2FB58D0D22BCD72E6EE89572EEBF02F94BE54ED2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:db:ab:cb:8c:7e:6c:ad:cb:9a:2f:e3:ff:b7:
                    e6:bb:0a:20:4e:a3:14:0c:ee:50:fb:e1:11:be:8c:
                    31:58:96:0d:5e:89:39:8c:a9:4d:17:de:eb:d2:1b:
                    60:4d:41:60:96:69:13:ec:c5:23:ff:72:bb:7f:4e:
                    57:98:24:07:21:7c:9a:39:3b:ef:cd:2e:11:45:03:
                    57:57:01:88:1e:be:ba:f7:c9:3b:e7:86:3e:b0:16:
                    74:f4:c5:91:03:84:e8:f6:21:a6:d3:35:c6:ae:47:
                    eb:02:c3:4c:52:a2:41:ae:3f:e6:fa:bd:0f:cb:3e:
                    d8:d4:cf:76:bc:1d:22:b3:b5:31:4e:c0:db:de:ab:
                    f2:c6:4c:8e:32:b4:5b:f2:6e:b3:89:c3:40:c8:ed:
                    2f:c5:7c:b8:e7:27:89:a1:dc:f3:6d:07:87:94:77:
                    1f:02:ea:5c:c1:78:c9:cd:bc:75:94:58:4e:b8:47:
                    39:cf:c7:81:24:3a:da:da:c7:b3:46:e4:17:e9:16:
                    58:88:61:04:fc:37:a9:c1:16:c7:89:d2:fa:f8:d4:
                    c0:e5:c2:a2:cd:30:1f:f1:94:80:10:fe:8f:92:b6:
                    ff:65:92:24:42:5b:fc:c8:70:96:5a:92:ae:d4:c1:
                    d0:b7:2e:b3:4c:f0:ec:da:13:e0:23:44:ae:b3:41:
                    2d:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:B5:8D:0D:22:BC:D7:2E:6E:E8:95:72:EE:BF:02:F9:4B:E5:4E:D2
            X509v3 Authority Key Identifier:
                keyid:52:BA:B2:77:EA:BE:AC:0C:82:26:FA:6A:4B:B2:C4:11:91:CD:54:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/52BAB277EABEAC0C8226FA6A4BB2C41191CD5464.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52BAB277EABEAC0C8226FA6A4BB2C41191CD5464.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/992w3k6QGLtMxbXHBCXVSxq4MjyRjcnJugP2SrCSKHVL/0/323830343a363161383a3a2f33322d313238203d3e20323639323438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:61a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         87:46:f0:a3:fd:fb:e8:e5:f4:8a:0e:fd:09:71:5c:31:a1:54:
         f5:b3:57:fd:52:89:c7:59:4b:90:54:f3:82:a5:f9:40:79:6c:
         26:00:4c:99:f4:48:cd:23:36:0d:62:fa:f5:11:5d:f8:15:af:
         4b:27:ad:96:5d:12:f8:d5:f0:8b:fb:e5:0a:a9:aa:a7:5b:e1:
         16:19:59:50:af:18:38:08:d8:25:88:c3:30:9f:51:e1:75:00:
         5d:91:99:bb:31:d7:63:c2:3a:65:3d:bb:80:ef:c7:76:00:14:
         2d:9c:76:5f:b9:e9:50:9c:9e:14:4e:c0:87:0e:ec:79:1a:16:
         72:e6:04:c6:c2:21:2f:34:61:3b:02:27:f0:36:17:61:b5:87:
         05:22:c6:b5:9a:db:da:70:26:1c:20:b5:7b:b9:56:00:76:49:
         2f:9c:11:5c:36:2c:0c:56:a0:6d:fa:d2:c4:05:ba:4f:8c:07:
         41:3f:d8:3a:21:e7:18:77:fe:66:0c:d7:8f:6e:31:e8:0f:25:
         9c:13:0d:ae:56:92:31:5e:e6:1b:0e:e6:14:25:e7:cc:ec:07:
         ef:af:f8:ee:0d:c1:64:4d:2d:26:f1:bb:81:8a:8c:bb:d3:48:
         12:be:32:11:53:4f:55:2d:8e:39:d8:84:23:dd:38:e4:c7:f1:
         89:16:9b:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org