Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a313130303a3a2f34302d3430203d3e20323638313036.roa
File:                     323830343a353831383a313130303a3a2f34302d3430203d3e20323638313036.roa (raw, json)
Hash identifier:          z5YwyNnfbzx/R9bd89Y+UeDess9Q/a9EedqfUtehVKc=
Subject key identifier:   21:7C:AA:3E:E3:C1:1A:47:CE:95:BD:D3:FE:8E:D4:FD:31:80:60:65
Certificate issuer:       /CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
Certificate serial:       7F3550BCE8F67FB6A250C59A257B0B3C03601989
Authority key identifier: B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a313130303a3a2f34302d3430203d3e20323638313036.roa
Signing time:             Mon 07 Feb 2022 12:09:16 +0000
ROA not before:           Mon 07 Feb 2022 12:04:16 +0000
ROA not after:            Mon 06 Feb 2023 12:09:16 +0000
asID:                     268106
IP address blocks:        2804:5818:1100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:35:50:bc:e8:f6:7f:b6:a2:50:c5:9a:25:7b:0b:3c:03:60:19:89
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B2614F2D35FDF04FB428DEB46E60713A8DCF6B49
        Validity
            Not Before: Feb  7 12:04:16 2022 GMT
            Not After : Feb  6 12:09:16 2023 GMT
        Subject: CN=217CAA3EE3C11A47CE95BDD3FE8ED4FD31806065
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:e9:b5:49:4b:ad:15:6c:f4:48:14:e6:78:e5:
                    c3:45:b8:bf:1e:28:12:1e:58:43:38:50:39:91:b0:
                    01:c8:7f:8c:3f:30:cd:65:5d:47:ad:2f:65:f2:a2:
                    9b:2d:6b:9b:ec:00:81:85:95:79:87:6e:d4:dd:02:
                    35:27:2a:b6:52:32:c4:06:07:e0:2b:1b:90:f5:49:
                    73:a5:5e:ec:b6:08:3a:40:2a:fd:80:ac:1e:b8:13:
                    70:06:1d:fa:26:2b:ef:44:8b:21:11:d7:7b:30:2d:
                    83:10:9a:0b:c5:97:ad:bb:ba:db:f8:3a:06:fa:ab:
                    47:11:dd:d7:bd:78:ea:93:a8:35:0c:4a:b5:d3:8e:
                    4d:7c:62:69:81:21:d2:61:45:ff:cf:3d:e7:3c:5e:
                    d3:85:fb:0e:75:ed:66:95:24:86:09:eb:4f:5d:4a:
                    66:64:da:f4:66:b0:7d:38:2e:fd:f4:b8:d5:9f:4f:
                    b9:34:f1:5d:c9:80:5a:96:75:af:22:aa:b3:d2:1e:
                    7a:1d:3f:5e:41:1c:f6:f4:c3:e2:a2:12:b8:9d:70:
                    6a:5d:b9:8a:b4:3f:9c:99:66:71:cc:63:6f:b9:c1:
                    0a:9f:37:c6:3d:ac:69:ee:4c:e3:73:89:fc:86:ba:
                    aa:cd:6d:34:aa:61:9e:e9:07:d4:ac:7f:15:e0:71:
                    3f:67
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:7C:AA:3E:E3:C1:1A:47:CE:95:BD:D3:FE:8E:D4:FD:31:80:60:65
            X509v3 Authority Key Identifier:
                keyid:B2:61:4F:2D:35:FD:F0:4F:B4:28:DE:B4:6E:60:71:3A:8D:CF:6B:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B2614F2D35FDF04FB428DEB46E60713A8DCF6B49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BRZdpT1jqUkqVnPvWuWfeYuQxgSS63vCRF2Ef86of8nw/0/323830343a353831383a313130303a3a2f34302d3430203d3e20323638313036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5818:1100::/40

    Signature Algorithm: sha256WithRSAEncryption
         c0:7f:42:03:fd:8f:34:07:cb:aa:4c:e9:04:b7:a4:45:77:6b:
         3e:0b:73:d7:89:2f:ac:13:3d:b1:07:a6:73:90:7b:a7:1c:13:
         29:b1:c6:5c:ff:36:58:bb:d1:00:ca:33:b3:a9:76:1a:69:8a:
         b2:1b:b9:db:d0:ba:4e:27:c6:6e:09:a3:76:b7:77:33:a0:68:
         2d:83:f4:f6:33:1f:44:99:c9:7b:3d:7a:5b:ea:e3:d0:bd:85:
         67:3d:14:d1:12:e9:b0:bd:07:31:8b:0d:24:46:65:b9:af:15:
         eb:75:d9:e9:e2:79:da:91:3b:17:58:c7:b6:02:00:d9:7c:0b:
         05:48:3a:1c:db:54:22:ab:8f:95:e0:a6:81:49:47:6a:80:75:
         41:96:3f:e1:55:fe:41:49:ce:17:fa:ac:3e:7b:43:5b:55:06:
         5d:8f:5f:8c:67:04:c0:0b:13:42:8f:79:9e:ab:ad:c1:fa:2a:
         c9:2f:ac:8f:3b:d6:f4:eb:48:43:37:e8:d8:1d:3a:d6:21:35:
         da:dc:c3:15:7e:6a:64:ad:22:10:fb:1e:d2:c9:7b:d7:f6:97:
         c2:bf:df:1a:1c:af:b4:f2:18:03:b9:a1:78:c6:e0:d1:53:39:
         7f:f7:d7:c1:97:38:24:27:fa:37:3d:9a:1b:61:eb:64:8b:14:
         a0:fe:7e:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org