Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a6564383a3a2f33322d3438203d3e203238333433.roa
File:                     323830343a6564383a3a2f33322d3438203d3e203238333433.roa (raw, json)
Hash identifier:          xmBwdpvL2bXZB3RokqqUT6Aj7noKR4UyFnxa0Zifvqs=
Subject key identifier:   0A:6D:AD:BD:F3:34:4B:B3:AC:CE:77:28:BC:CD:7D:27:C1:AE:BF:56
Certificate issuer:       /CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
Certificate serial:       3A9DAC28A0E4B3B5BD0A209ED5A17B662F46256A
Authority key identifier: 1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a6564383a3a2f33322d3438203d3e203238333433.roa
Signing time:             Thu 28 Apr 2022 13:29:23 +0000
ROA not before:           Thu 28 Apr 2022 13:24:23 +0000
ROA not after:            Thu 27 Apr 2023 13:29:23 +0000
asID:                     28343
IP address blocks:        2804:ed8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:9d:ac:28:a0:e4:b3:b5:bd:0a:20:9e:d5:a1:7b:66:2f:46:25:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5B4FC400F86480C8797BBBC2D09745F20F7188
        Validity
            Not Before: Apr 28 13:24:23 2022 GMT
            Not After : Apr 27 13:29:23 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f6:72:49:ac:1c:5b:05:ba:89:8e:b9:ce:9c:92:
                    f2:d7:24:78:d6:7a:42:70:7d:db:c5:fc:e9:e6:7c:
                    42:94:fe:cc:f8:cb:b6:c6:15:87:1f:b0:a9:4f:59:
                    7c:7f:ea:8e:bd:c7:be:c7:a3:3b:bd:1b:5a:54:eb:
                    af:27:48:3d:57:ca:85:25:f4:ee:7d:6b:35:e4:37:
                    3d:26:1e:46:f6:a2:f3:4d:a4:a9:85:92:cf:0e:7f:
                    e7:6d:3c:c3:c0:21:13:10:03:38:00:0c:dc:ba:02:
                    d2:90:38:51:b4:b5:b5:ce:80:ac:7c:ad:25:0e:04:
                    84:17:5f:0b:87:da:ff:29:92:56:05:05:2d:68:d4:
                    ad:9a:7e:cc:7f:6e:0c:42:76:64:54:14:9e:92:98:
                    54:ac:ef:d5:c0:62:50:bb:e5:ea:8c:08:79:d3:08:
                    19:2f:90:d2:97:ac:88:dd:35:16:83:df:0a:98:56:
                    db:50:ce:ed:14:a5:68:72:44:1c:ed:7a:13:3f:64:
                    14:68:2a:e7:e6:b3:6f:9d:ab:33:a5:ec:f1:cd:31:
                    07:d9:a1:fd:75:ff:17:a1:93:06:5a:55:65:7d:26:
                    0b:34:39:28:d2:b3:c7:d1:56:bf:34:41:e4:ff:a0:
                    1f:44:4d:ba:98:95:75:30:58:7f:6e:11:5c:43:89:
                    d8:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:6D:AD:BD:F3:34:4B:B3:AC:CE:77:28:BC:CD:7D:27:C1:AE:BF:56
            X509v3 Authority Key Identifier:
                keyid:1C:5B:4F:C4:00:F8:64:80:C8:79:7B:BB:C2:D0:97:45:F2:0F:71:88

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5B4FC400F86480C8797BBBC2D09745F20F7188.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/0/323830343a6564383a3a2f33322d3438203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ed8::/32

    Signature Algorithm: sha256WithRSAEncryption
         16:a9:f9:0a:51:36:79:e1:99:ed:85:1c:7c:68:bc:19:29:9d:
         2c:4a:95:66:20:90:1e:7c:f1:f2:57:c4:2e:62:8a:cb:b2:0e:
         52:58:7f:89:d3:84:4b:cf:14:68:39:5d:6d:e5:49:92:c1:86:
         ce:3d:0f:f8:77:54:fd:b4:44:bb:7f:e5:cd:df:4e:12:2d:25:
         cc:28:99:ab:0d:92:f6:9d:5c:3b:e6:42:bc:c6:8f:a4:0a:92:
         ca:56:ff:ef:9d:05:5e:bc:6e:f0:24:62:9e:78:aa:ca:8d:59:
         30:81:b6:7d:b1:4a:5e:a4:40:45:b9:84:35:01:d9:e3:f6:2d:
         57:5c:33:07:2a:b2:54:2e:a3:be:6e:96:da:5b:e6:40:8a:1e:
         a5:1b:a6:8f:07:85:41:e6:d5:e3:1c:d9:f2:dd:fb:35:69:0c:
         8d:c1:72:32:d0:41:37:06:7c:be:20:ad:1e:ff:b7:05:db:89:
         b1:da:4a:ff:cb:fc:81:cc:21:40:a6:dc:98:5e:c2:c6:40:a5:
         6a:26:b9:69:98:d5:16:49:1d:0e:c0:b6:f9:19:26:6e:ca:b4:
         a7:06:d8:ae:04:3c:df:74:e6:61:78:c9:b6:88:bf:c5:34:6b:
         0f:47:b2:aa:8b:ae:c5:28:f9:ac:f7:d7:37:31:d6:04:1a:2e:
         6f:db:3f:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:11 2024 by rpki-client on console-ams.rpki-client.org