Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/323830343a356664633a313030303a3a2f33362d3336203d3e20323639313238.roa
File:                     323830343a356664633a313030303a3a2f33362d3336203d3e20323639313238.roa (raw, json)
Hash identifier:          kU1t352L0DWOFeAsiBXJqfPmbwnDa21eRqNdjcMSvow=
Subject key identifier:   A5:4C:5A:37:09:21:60:B3:3B:1A:10:B2:A0:52:CF:24:8A:7F:1C:C2
Certificate issuer:       /CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
Certificate serial:       1C2C9418A71E12F9C67E5D29074BF85C2BC950FC
Authority key identifier: BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/323830343a356664633a313030303a3a2f33362d3336203d3e20323639313238.roa
Signing time:             Tue 16 May 2023 02:18:56 +0000
ROA not before:           Tue 16 May 2023 02:13:56 +0000
ROA not after:            Tue 14 May 2024 02:18:56 +0000
asID:                     269128
IP address blocks:        2804:5fdc:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:2c:94:18:a7:1e:12:f9:c6:7e:5d:29:07:4b:f8:5c:2b:c9:50:fc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC
        Validity
            Not Before: May 16 02:13:56 2023 GMT
            Not After : May 14 02:18:56 2024 GMT
        Subject: CN=A54C5A37092160B33B1A10B2A052CF248A7F1CC2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:33:de:6f:f8:7c:4e:76:b6:d3:86:22:d7:8e:
                    73:db:40:24:76:45:20:f5:7b:52:c1:75:f7:21:11:
                    31:59:0e:b4:71:9e:cf:8f:cb:f0:4f:48:77:64:aa:
                    42:4e:c7:08:46:cd:7e:dd:bf:6c:55:5e:c3:b9:e9:
                    93:38:60:81:fe:b0:5a:f6:da:ca:ef:e9:02:70:4d:
                    cc:31:65:13:a4:b3:3d:69:46:c4:95:4b:e0:6d:31:
                    b6:a6:35:16:61:cf:88:17:42:62:1c:6a:b8:e2:fb:
                    48:11:b8:ed:38:66:9d:55:9c:86:fd:22:a0:b1:1c:
                    91:5e:99:34:cf:56:b1:9d:3f:92:99:85:20:bb:3f:
                    84:b0:e5:90:6e:4b:49:7d:9a:49:79:ff:cc:7d:c1:
                    da:40:f2:28:fb:75:a6:4c:39:b3:a7:11:ea:ce:ea:
                    f2:f1:76:40:29:63:d8:26:da:49:08:1f:c9:64:fa:
                    9e:71:3d:06:8e:e2:fe:60:75:c7:31:da:d3:7b:a3:
                    c9:81:56:9b:79:56:b5:1a:18:53:ba:15:87:88:f5:
                    72:56:27:23:9e:9d:40:2c:73:b3:24:a5:6e:eb:80:
                    2f:fb:6e:8f:c9:37:a2:9b:c1:e5:f7:d6:de:78:6e:
                    9b:f3:6a:c7:85:24:60:84:30:02:7d:da:69:d2:30:
                    ee:9b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A5:4C:5A:37:09:21:60:B3:3B:1A:10:B2:A0:52:CF:24:8A:7F:1C:C2
            X509v3 Authority Key Identifier:
                keyid:BF:7A:58:A6:49:FD:43:21:DA:7A:DA:A6:3E:2C:FC:E7:A3:13:02:CC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BF7A58A649FD4321DA7ADAA63E2CFCE7A31302CC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Advjh7aXF3VLn684prXxZG1cq4gQw6JJpsaguwK1Gjkq/0/323830343a356664633a313030303a3a2f33362d3336203d3e20323639313238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5fdc:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         58:2a:cd:eb:c1:9d:30:35:63:83:42:69:36:fc:05:b5:8b:0d:
         4c:31:04:0a:f1:90:38:0c:8c:a9:db:e3:8f:d5:87:67:95:37:
         4f:e4:57:8a:02:06:19:98:e5:d8:bf:30:d5:c1:a8:47:54:99:
         b3:cf:76:30:78:24:19:21:31:55:ce:8b:19:77:4d:45:38:55:
         96:19:50:e9:61:6c:a3:09:4b:ce:48:59:63:d2:9f:c3:fa:8d:
         35:07:26:de:e2:a3:81:53:1f:4c:0f:2c:49:76:d4:4b:2c:bd:
         79:13:60:58:fb:bc:7e:2f:7f:a1:c3:78:98:08:e0:38:b1:06:
         01:0d:6a:63:1a:dc:ec:ed:a6:ad:50:bb:fa:61:a7:9e:41:49:
         dd:e0:44:a4:b2:74:a4:4b:13:e9:bd:b9:bf:93:20:13:b0:7e:
         e0:87:a6:29:68:ef:d0:05:1b:d9:16:ff:c2:de:9f:d1:ec:cb:
         22:4a:5e:70:5e:c4:14:ee:9e:26:d3:50:4d:b6:33:3d:68:de:
         2b:e8:c6:92:6d:24:12:c2:39:90:60:1e:90:91:7b:ba:eb:a5:
         ac:46:dc:e8:f0:ae:7d:22:68:20:77:d0:48:45:09:b1:d3:00:
         68:57:63:13:5d:4c:1b:b7:59:c6:2c:e2:c3:bf:00:27:68:21:
         e3:b1:36:99
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:31 2024 by rpki-client on console-ams.rpki-client.org