Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383430303a3a2f34302d3430203d3e20323633393234.roa
File:                     323830343a323764343a383430303a3a2f34302d3430203d3e20323633393234.roa (raw, json)
Hash identifier:          Zds5hVMWaSR4y6Bd1z9wA+DLAS8xdCx2qjR9Nj/vwCs=
Subject key identifier:   60:90:A6:BA:5A:2B:50:EF:31:A0:D1:E5:54:96:38:CF:77:5A:50:44
Certificate issuer:       /CN=37920E0FA868864513370CCCA4671F6B43B65F22
Certificate serial:       33C0943C3AD740BAC84F97F14E718E76B2212F1A
Authority key identifier: 37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383430303a3a2f34302d3430203d3e20323633393234.roa
Signing time:             Mon 07 Feb 2022 12:09:20 +0000
ROA not before:           Mon 07 Feb 2022 12:04:20 +0000
ROA not after:            Mon 06 Feb 2023 12:09:20 +0000
asID:                     263924
IP address blocks:        2804:27d4:8400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:c0:94:3c:3a:d7:40:ba:c8:4f:97:f1:4e:71:8e:76:b2:21:2f:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=37920E0FA868864513370CCCA4671F6B43B65F22
        Validity
            Not Before: Feb  7 12:04:20 2022 GMT
            Not After : Feb  6 12:09:20 2023 GMT
        Subject: CN=6090A6BA5A2B50EF31A0D1E5549638CF775A5044
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8d:ba:94:a4:9e:40:13:3c:3e:c9:0b:c3:c3:
                    7d:b7:f8:c3:a8:91:73:49:28:81:d7:e5:d8:76:11:
                    a7:9d:6d:7b:c5:4f:40:19:20:67:c2:2f:29:3c:04:
                    37:8c:1c:30:38:05:0c:9b:04:78:16:24:b3:f2:be:
                    3d:3c:70:af:54:5f:35:6a:d9:f6:9c:3d:80:fd:e6:
                    ae:19:0f:8d:4d:6b:28:26:9f:7a:ea:05:a0:e4:47:
                    c4:29:85:d8:de:b0:e9:a3:ba:28:b8:60:16:31:dd:
                    f3:01:d8:47:64:53:5b:08:6c:9a:e5:da:fa:14:70:
                    02:7e:86:de:ab:51:e3:11:26:de:d9:20:e3:7d:ff:
                    1f:6c:38:65:e5:d0:ba:47:47:28:2a:00:3c:db:4b:
                    00:7b:21:36:ce:bf:8b:b7:35:98:4b:46:2d:15:51:
                    76:36:39:45:be:61:ee:25:9e:41:65:25:9a:eb:61:
                    5d:ec:dc:23:bb:db:71:ae:00:a3:6b:6d:40:a5:2f:
                    c3:7a:34:f7:2b:fd:0c:11:0d:7c:ff:5e:25:68:ec:
                    f1:cf:f4:d0:4d:a0:27:f1:87:81:99:e6:9e:6b:28:
                    88:f6:c6:d6:19:6a:d8:36:25:2a:c3:8e:65:aa:88:
                    d8:a8:ac:2c:74:57:91:54:f0:6a:39:23:3c:03:5a:
                    97:2d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:90:A6:BA:5A:2B:50:EF:31:A0:D1:E5:54:96:38:CF:77:5A:50:44
            X509v3 Authority Key Identifier:
                keyid:37:92:0E:0F:A8:68:86:45:13:37:0C:CC:A4:67:1F:6B:43:B6:5F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/37920E0FA868864513370CCCA4671F6B43B65F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/37920E0FA868864513370CCCA4671F6B43B65F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Bzwj8Yjsd8JDmgPUGodn7jBPMnd7ud8QbR2eK15onnHf/0/323830343a323764343a383430303a3a2f34302d3430203d3e20323633393234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:27d4:8400::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:a9:ed:3b:6a:35:5a:10:89:a4:cd:ce:94:1b:85:75:ad:76:
         31:cd:6a:57:47:c1:21:f4:23:c2:dd:3b:31:63:ea:1b:10:5f:
         be:bb:34:8c:ef:61:24:9a:67:3f:44:e7:fe:6b:ec:c8:bc:d6:
         a1:81:1c:6d:11:92:fe:4e:d8:3d:19:af:88:39:51:30:30:18:
         2b:f4:0a:16:28:5f:86:9c:d9:b8:0f:8b:5d:3d:74:39:4b:3f:
         6a:46:87:cf:47:bf:1f:26:77:79:21:d2:a6:aa:a0:48:3c:c4:
         ca:4d:04:7f:63:74:54:49:82:0c:cb:5e:54:0f:45:38:5e:8d:
         b8:f4:5f:09:f2:88:1c:3d:ae:45:56:1f:22:b6:ec:d1:59:87:
         29:23:15:09:13:ba:0c:c6:b6:e1:1f:c7:4a:06:09:ad:3f:6e:
         80:53:79:08:24:de:7d:5d:13:ba:ce:4d:99:b1:d6:e9:d1:04:
         75:27:48:c2:35:ed:1c:11:fc:8d:a8:2e:d4:1e:f6:b8:84:32:
         e5:ef:1c:20:91:1b:d4:40:37:13:b6:1d:d9:b1:0c:66:a4:7a:
         7a:fa:a5:dc:43:6a:ae:62:20:5b:1a:26:cc:91:18:61:70:84:
         b3:7e:72:28:33:92:e4:49:c5:6d:c1:3a:b7:f8:38:0a:f9:77:
         df:25:de:d1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org