Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a3a2f33322d3334203d3e20323637343536.roa
File:                     323830343a343163383a3a2f33322d3334203d3e20323637343536.roa (raw, json)
Hash identifier:          w1U5qd19iDoK/krX95SB8Yr7fr695WwKKouGBjs7sW0=
Subject key identifier:   6B:80:82:3F:8E:16:DD:E0:D1:1D:03:17:FB:31:DB:C3:44:7C:58:A6
Certificate issuer:       /CN=E5711985EAE3B534F72966F666DB5344CA5A04F1
Certificate serial:       59E8D3ED4EFCCBA450AA12F7125A333112415DDE
Authority key identifier: E5:71:19:85:EA:E3:B5:34:F7:29:66:F6:66:DB:53:44:CA:5A:04:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5711985EAE3B534F72966F666DB5344CA5A04F1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a3a2f33322d3334203d3e20323637343536.roa
Signing time:             Sat 13 Aug 2022 18:10:00 +0000
ROA not before:           Sat 13 Aug 2022 18:05:00 +0000
ROA not after:            Sat 12 Aug 2023 18:10:00 +0000
asID:                     267456
IP address blocks:        2804:41c8::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            59:e8:d3:ed:4e:fc:cb:a4:50:aa:12:f7:12:5a:33:31:12:41:5d:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E5711985EAE3B534F72966F666DB5344CA5A04F1
        Validity
            Not Before: Aug 13 18:05:00 2022 GMT
            Not After : Aug 12 18:10:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:03:ae:0e:c4:9b:e0:e2:e9:b6:15:af:38:01:
                    a4:0b:c5:ea:87:b0:ee:2b:9a:05:06:38:97:8e:13:
                    89:e2:bd:04:45:83:03:75:0f:e9:1f:2e:d3:6f:b9:
                    bd:63:04:23:16:76:22:fd:27:90:11:5f:10:8f:29:
                    b4:49:16:78:d2:4a:4b:8a:22:86:22:1a:03:03:7c:
                    89:d9:09:de:48:08:e9:14:a2:4e:58:34:8c:70:23:
                    e9:a3:0a:a1:77:ee:ee:0d:7d:2c:2c:fe:73:06:e5:
                    07:72:ba:83:f5:2c:64:91:c7:37:dc:8f:00:00:4c:
                    a8:8b:dd:92:21:ce:ca:5b:4c:f2:1e:2a:e3:00:eb:
                    8b:f3:01:54:8b:2c:b0:c1:22:90:14:d7:97:24:72:
                    f6:80:4b:81:9a:80:3a:f7:82:ed:ec:fb:ab:33:f5:
                    6f:d6:27:34:1b:65:82:f9:07:e8:b0:c5:a1:79:62:
                    ad:52:b5:fd:da:c4:d2:a6:d2:14:bb:ee:35:d8:21:
                    b8:a0:93:ff:56:dd:88:c3:17:e7:3c:38:20:7d:97:
                    22:f7:9e:93:90:e0:d7:6c:a7:b9:70:aa:86:74:4f:
                    59:fc:7f:61:8f:ba:7e:2f:67:9f:af:03:be:f3:b1:
                    f6:fc:e7:7d:fa:1a:a5:13:a9:e8:d9:d2:30:84:70:
                    e9:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:80:82:3F:8E:16:DD:E0:D1:1D:03:17:FB:31:DB:C3:44:7C:58:A6
            X509v3 Authority Key Identifier:
                keyid:E5:71:19:85:EA:E3:B5:34:F7:29:66:F6:66:DB:53:44:CA:5A:04:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/E5711985EAE3B534F72966F666DB5344CA5A04F1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E5711985EAE3B534F72966F666DB5344CA5A04F1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9uBdb5x8EajQT9LNa1yGx1Jf5k3n6vzb5nPY9owp1seB/0/323830343a343163383a3a2f33322d3334203d3e20323637343536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:5e:d4:20:27:0e:dd:c5:17:a7:76:e1:84:a0:f0:e3:73:b3:
         c7:e3:55:34:90:da:02:d3:80:16:89:96:a2:8e:92:75:ff:d8:
         51:fd:ae:f3:60:95:be:6f:00:b3:bd:62:2b:98:a5:7e:72:82:
         93:0e:5f:1b:72:30:5e:d1:7b:56:bb:80:03:83:1b:4f:e6:6d:
         1b:f8:30:21:a5:ff:25:9d:7d:d3:c9:07:57:f2:78:83:8d:13:
         c6:cb:6e:3f:5a:fd:7b:d1:63:94:93:20:a5:8b:a1:62:85:a9:
         7e:12:6c:d3:0d:05:30:69:ea:d8:7b:1e:4d:f7:33:47:19:4f:
         bf:e8:99:4f:e0:b2:55:bf:fa:6e:64:d6:04:3e:b1:49:63:f5:
         9f:e9:aa:84:51:23:53:cb:b1:26:d7:eb:09:8e:67:b3:6e:d3:
         d4:08:54:75:5e:60:e1:b8:97:15:44:44:94:d4:7f:db:e4:d4:
         a3:a3:3f:35:6f:c0:f3:4f:dd:35:49:78:45:4d:ab:4b:b4:2a:
         cc:f6:ec:06:92:fc:ac:2c:80:19:51:ea:e4:e6:4e:3c:7f:c0:
         a5:30:2e:d5:39:cd:ab:9e:b9:69:25:56:ef:1a:e6:93:0c:e2:
         be:bc:db:a1:89:a2:66:c2:8b:5c:97:d7:30:35:92:f4:1a:dc:
         db:98:b7:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:24 2024 by rpki-client on console-ams.rpki-client.org