Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3230303a3a2f34302d3430203d3e20323730363834.roa
File:                     323830343a366663383a3230303a3a2f34302d3430203d3e20323730363834.roa (raw, json)
Hash identifier:          x5NI0F3AwBCAow9qofDPGsFuWhmqJwSl0radbclRWcQ=
Subject key identifier:   C6:51:D0:17:64:D9:A3:FB:41:78:B1:6C:C7:28:44:BF:E7:A7:56:C9
Certificate issuer:       /CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
Certificate serial:       7A4C0D1C4C43D434210D567DAEF3C6AA408C6EF1
Authority key identifier: 52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3230303a3a2f34302d3430203d3e20323730363834.roa
Signing time:             Sat 03 Feb 2024 21:18:14 +0000
ROA not before:           Sat 03 Feb 2024 21:13:14 +0000
ROA not after:            Sat 01 Feb 2025 21:18:14 +0000
asID:                     270684
IP address blocks:        2804:6fc8:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:4c:0d:1c:4c:43:d4:34:21:0d:56:7d:ae:f3:c6:aa:40:8c:6e:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=52AC7BEFBFD4E57267873291AA9A74E79E82B31B
        Validity
            Not Before: Feb  3 21:13:14 2024 GMT
            Not After : Feb  1 21:18:14 2025 GMT
        Subject: CN=C651D01764D9A3FB4178B16CC72844BFE7A756C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:9e:3e:80:b7:b5:db:64:2a:0a:2c:0e:82:c5:
                    f9:7f:d7:48:f6:f5:99:e1:9a:8f:9e:bc:98:45:d3:
                    ca:f8:9f:b8:58:d5:d7:03:c7:01:4c:a4:b0:d2:6f:
                    23:8b:b7:cb:3b:3d:9e:15:d6:7d:f0:03:dd:66:a0:
                    e7:ee:cf:b4:2a:25:dd:bc:7c:5e:a2:c5:02:45:94:
                    17:83:27:7f:59:8e:49:f8:f8:74:5b:c8:d3:f6:c9:
                    23:67:16:24:70:b7:27:29:c0:c6:1e:92:ca:8d:e7:
                    92:99:79:fe:03:bb:bf:9c:c6:eb:20:7a:8a:70:88:
                    3b:52:12:7a:dc:29:21:0b:c3:7d:b0:fa:8c:60:dc:
                    26:00:14:0c:27:5a:2c:e7:da:7a:10:87:91:f8:ab:
                    a3:da:08:01:05:73:eb:c3:f5:ff:b8:a8:de:4e:43:
                    4c:3c:3e:b4:7b:18:76:62:1b:81:21:8a:4b:27:e1:
                    39:43:2c:10:15:c6:19:af:b5:f5:cc:39:ab:28:6b:
                    9d:10:fd:79:d0:90:20:3a:74:ff:bb:f0:fe:f2:ae:
                    4c:3b:d9:bf:e3:5a:ee:70:e1:51:53:bc:e0:1e:7b:
                    c8:b9:55:9d:d4:66:d9:03:74:35:62:81:6b:16:07:
                    b4:de:a8:06:aa:5c:d7:de:3a:91:ed:bd:5d:87:2f:
                    d6:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:51:D0:17:64:D9:A3:FB:41:78:B1:6C:C7:28:44:BF:E7:A7:56:C9
            X509v3 Authority Key Identifier:
                keyid:52:AC:7B:EF:BF:D4:E5:72:67:87:32:91:AA:9A:74:E7:9E:82:B3:1B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/52AC7BEFBFD4E57267873291AA9A74E79E82B31B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AYaq4uTQKQzLduyxtRuqnpfT2QwBwN2c5ocLQpYBzi6v/0/323830343a366663383a3230303a3a2f34302d3430203d3e20323730363834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fc8:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         64:09:a0:03:21:39:58:c6:5e:c5:55:5a:7b:07:0b:19:a4:02:
         90:d5:66:10:2a:dc:43:62:0b:5c:a7:f0:59:e9:73:3b:54:21:
         c8:20:d9:be:52:89:7a:33:e7:77:52:c1:64:86:41:45:23:aa:
         ea:e6:f0:7b:18:82:0e:44:db:b9:c3:73:9f:6b:0c:0c:13:75:
         a1:7a:70:2e:3a:c6:5f:6a:f1:d3:d2:f1:da:a1:1f:d7:bb:bd:
         fd:51:c0:cf:88:b9:18:81:59:36:b7:95:a4:8a:37:e7:aa:0a:
         68:27:6f:ea:70:fd:61:bf:b0:0f:fe:80:55:8e:d8:b9:21:7e:
         e9:8d:8d:7c:14:81:48:95:8f:a9:af:b4:2a:d1:e5:3b:0c:75:
         c8:9a:6f:85:f1:80:57:a0:5e:5e:06:7f:48:27:78:09:33:60:
         82:08:57:0a:eb:84:92:ac:ff:25:a7:9c:ff:69:f8:ce:e5:3b:
         24:45:d8:24:db:bb:de:7e:d1:9d:6a:0b:5f:87:29:30:a6:e9:
         bf:39:d7:b0:df:04:a4:c5:c1:6e:f2:a9:b8:dd:b4:35:9d:79:
         66:7e:8f:cc:20:be:f9:26:2a:c1:b8:d0:ac:db:a5:a0:c2:1f:
         6f:1a:72:fa:e9:c4:26:1d:6d:06:01:36:5e:fe:eb:f6:fc:03:
         4d:33:e9:04
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org