Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a353032303a3a2f34342d3438203d3e20323632393737.roa
File:                     323830343a313661343a353032303a3a2f34342d3438203d3e20323632393737.roa (raw, json)
Hash identifier:          xo40Pl6ytbRcokQTmYSeWE+JPEybO6kNMqvGMIfX848=
Subject key identifier:   54:65:E6:31:DE:C6:3E:7C:C8:D0:C2:87:EB:BC:BE:53:32:F2:22:AC
Certificate issuer:       /CN=67724750DD34F78DA4B937A6D8029AF5959396B8
Certificate serial:       4ED7550CC40333A0A03E47A4B8A2EEC44B6B2754
Authority key identifier: 67:72:47:50:DD:34:F7:8D:A4:B9:37:A6:D8:02:9A:F5:95:93:96:B8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67724750DD34F78DA4B937A6D8029AF5959396B8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a353032303a3a2f34342d3438203d3e20323632393737.roa
Signing time:             Sat 08 Oct 2022 02:50:57 +0000
ROA not before:           Sat 08 Oct 2022 02:45:57 +0000
ROA not after:            Sat 07 Oct 2023 02:50:57 +0000
asID:                     262977
IP address blocks:        2804:16a4:5020::/44 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:d7:55:0c:c4:03:33:a0:a0:3e:47:a4:b8:a2:ee:c4:4b:6b:27:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=67724750DD34F78DA4B937A6D8029AF5959396B8
        Validity
            Not Before: Oct  8 02:45:57 2022 GMT
            Not After : Oct  7 02:50:57 2023 GMT
        Subject: CN=5465E631DEC63E7CC8D0C287EBBCBE5332F222AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:7e:df:f1:a2:73:ff:a9:80:b9:f9:0e:b6:d4:
                    85:51:f6:25:10:2b:70:af:f7:44:78:c7:6c:a9:41:
                    d9:ed:0d:86:3f:c7:52:5b:b1:4e:9b:10:ce:e9:ab:
                    d9:13:8d:47:e2:29:1a:7d:56:27:a2:92:2a:07:ab:
                    bb:11:96:f7:e5:16:17:bb:09:e1:b1:bd:57:d3:aa:
                    9f:93:b7:2e:dc:20:d4:e8:73:60:10:0c:ca:3a:3e:
                    d7:dc:75:5c:01:72:ac:63:c5:e5:99:64:89:27:97:
                    62:f8:8b:c2:0d:68:49:20:32:60:a1:8c:e9:82:17:
                    07:39:32:77:49:ec:4f:2e:6c:91:80:44:fb:24:40:
                    f3:8f:13:5d:1b:e4:32:08:73:05:b1:20:de:cb:7e:
                    93:13:4c:c0:d1:ef:be:c4:82:cf:41:04:79:b6:11:
                    d0:52:da:22:2c:bc:c5:1f:73:c4:bd:c3:4d:84:26:
                    0c:b8:3f:9c:f0:fd:b4:82:f1:02:4b:2c:d4:a0:99:
                    33:f5:0b:27:89:f8:8f:f2:73:0f:cd:7f:67:b4:da:
                    77:66:80:2c:b8:56:5c:8f:69:39:06:3d:18:e8:39:
                    3f:54:23:11:6d:8b:6e:36:d2:9a:81:82:33:ba:2d:
                    e3:4d:a3:94:e5:b3:06:98:9e:56:c2:9f:65:c2:ee:
                    fe:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:65:E6:31:DE:C6:3E:7C:C8:D0:C2:87:EB:BC:BE:53:32:F2:22:AC
            X509v3 Authority Key Identifier:
                keyid:67:72:47:50:DD:34:F7:8D:A4:B9:37:A6:D8:02:9A:F5:95:93:96:B8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/67724750DD34F78DA4B937A6D8029AF5959396B8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/67724750DD34F78DA4B937A6D8029AF5959396B8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a353032303a3a2f34342d3438203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16a4:5020::/44

    Signature Algorithm: sha256WithRSAEncryption
         2b:36:d8:cb:82:0c:3e:be:bf:ac:d6:c8:bc:1c:d0:e2:1f:f2:
         1f:19:18:6c:e7:43:35:ea:f6:06:21:63:31:11:3c:eb:4a:69:
         38:94:5b:e3:21:7f:47:95:79:a2:39:55:a6:c3:2d:73:90:c0:
         77:ae:d6:b9:44:2f:7b:30:1d:75:5b:4d:72:b1:92:c0:27:37:
         90:e7:13:d6:07:6b:7a:b9:3c:2a:20:49:91:de:07:9b:9b:d3:
         f9:77:bc:c7:b3:cc:70:18:f6:0b:01:ad:44:32:e6:4f:48:5a:
         32:55:fe:b1:b3:3d:41:08:5e:f9:fb:66:23:e1:05:e2:b8:2e:
         5b:dc:bd:ca:c0:33:24:ca:24:34:bb:9f:5f:bc:d4:37:bc:d5:
         bc:00:c1:05:04:a8:7d:c4:18:a2:88:53:79:9d:2b:9a:a9:3e:
         c2:b4:a8:a8:c4:06:f6:9a:d3:d9:10:90:9c:0f:d7:99:08:91:
         5b:ba:bc:d0:11:b4:0e:e9:19:0a:1d:53:8c:62:27:47:57:ea:
         5c:b0:43:71:0a:87:37:2b:8e:23:66:11:1e:79:24:cd:c7:e9:
         aa:53:40:de:ee:df:c7:98:f9:97:aa:df:f8:b4:a3:4c:45:6f:
         ee:91:ac:44:24:ce:45:6e:0e:6d:3f:49:c8:b9:7c:d4:28:42:
         ea:67:81:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:26 2024 by rpki-client on console-ams.rpki-client.org