Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a383030303a3a2f33332d3333203d3e20323638393933.roa
File:                     323830343a356463633a383030303a3a2f33332d3333203d3e20323638393933.roa (raw, json)
Hash identifier:          kdYDR3wimUd77kQgdbkGpjholZ9iQBReCHMRsc/1VCI=
Subject key identifier:   B6:56:9A:5B:EC:D5:C5:96:23:FA:9E:CC:D6:A3:3F:0C:0E:C3:A0:70
Certificate issuer:       /CN=A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529
Certificate serial:       03AC3008E4AF7F7A7E5F95276EF5D44BA25DBAB7
Authority key identifier: A0:D7:66:0A:3C:83:EB:FF:AE:77:D7:07:A6:61:DA:8C:4D:4F:E5:29
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a383030303a3a2f33332d3333203d3e20323638393933.roa
Signing time:             Tue 14 Feb 2023 12:15:54 +0000
ROA not before:           Tue 14 Feb 2023 12:10:54 +0000
ROA not after:            Tue 13 Feb 2024 12:15:54 +0000
asID:                     268993
IP address blocks:        2804:5dcc:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:ac:30:08:e4:af:7f:7a:7e:5f:95:27:6e:f5:d4:4b:a2:5d:ba:b7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529
        Validity
            Not Before: Feb 14 12:10:54 2023 GMT
            Not After : Feb 13 12:15:54 2024 GMT
        Subject: CN=B6569A5BECD5C59623FA9ECCD6A33F0C0EC3A070
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:e1:b4:32:f6:7c:bd:d5:a2:6b:7d:b8:7f:ea:
                    b8:43:68:29:df:7f:cb:fa:12:67:ba:85:e0:eb:98:
                    63:43:22:5a:bc:81:c9:b4:7c:6d:51:d5:fb:79:5a:
                    31:b1:4e:09:03:aa:c1:44:77:ab:bc:40:4f:32:b9:
                    46:a2:f5:10:dd:7f:38:6a:f5:d8:ce:d3:1d:1d:f0:
                    56:d8:6f:7f:63:ab:b6:b7:b9:9f:ea:a8:0d:fe:bb:
                    5f:4f:d3:06:46:cd:45:35:ef:b8:02:3c:1d:96:28:
                    c0:3f:90:81:7a:e9:4d:fe:65:e5:45:e1:39:9f:06:
                    b3:4e:aa:aa:c5:e4:45:11:8e:90:ce:9b:1c:d3:d7:
                    b2:9d:ac:47:be:2b:c1:3e:8d:97:93:e4:25:e9:49:
                    a5:38:b6:d7:83:f2:91:23:90:a6:16:49:36:36:0f:
                    93:a1:0a:57:15:82:07:78:98:7e:52:93:05:8c:4c:
                    06:6d:4f:06:1b:a1:24:39:1c:19:8e:36:51:50:b3:
                    3f:9b:2e:cd:8b:65:a8:83:44:af:52:83:07:c4:97:
                    a4:ad:39:7d:5e:b7:fa:4e:7d:76:50:20:f8:1c:95:
                    ef:17:4d:53:56:f7:56:94:9a:b8:b2:e0:f2:e9:80:
                    d8:23:65:dc:19:d8:b1:46:ab:18:fb:a9:78:58:6e:
                    5c:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:56:9A:5B:EC:D5:C5:96:23:FA:9E:CC:D6:A3:3F:0C:0E:C3:A0:70
            X509v3 Authority Key Identifier:
                keyid:A0:D7:66:0A:3C:83:EB:FF:AE:77:D7:07:A6:61:DA:8C:4D:4F:E5:29

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A0D7660A3C83EBFFAE77D707A661DA8C4D4FE529.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C5FHKaFkiPPpZkN7MJ2hEmzq5HCh3g3nakLhVXh2Ds34/0/323830343a356463633a383030303a3a2f33332d3333203d3e20323638393933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5dcc:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         52:67:94:77:24:62:ea:c2:c5:97:03:42:5a:15:ab:7a:8e:dd:
         f8:c8:e1:2c:dc:4c:79:b8:1f:0b:16:96:ba:5f:90:ad:f2:71:
         07:54:02:1e:41:98:ca:c9:1d:ea:13:28:e3:bc:ea:3b:94:07:
         d3:e0:e0:6e:2d:42:46:24:6e:a2:2f:4d:ad:fb:b7:ef:7a:b4:
         02:36:98:2e:8f:27:08:8e:58:91:d7:96:c2:be:57:3f:8d:22:
         f4:71:ce:27:f2:eb:38:cf:ac:64:f1:46:0e:61:95:f6:45:52:
         67:98:46:b7:21:70:19:06:68:12:b0:96:95:7d:3d:ef:85:cf:
         c2:a4:43:66:75:51:bf:ca:3a:30:05:84:ec:23:37:96:cd:99:
         04:23:45:41:44:5f:e6:2f:68:0f:dc:bd:0b:0f:88:95:40:84:
         e7:bd:a4:53:21:0b:ad:b9:ba:97:c7:ab:58:1c:94:93:b8:f9:
         14:a7:73:8a:8a:d5:5d:95:9d:3c:a0:41:72:18:6e:23:ab:43:
         fa:60:a9:ae:e2:12:bc:4f:24:09:33:27:82:b3:6a:bc:6e:78:
         44:ea:3f:c4:d5:11:9e:ce:35:2d:79:5d:60:fc:02:53:1f:a4:
         bf:76:de:e7:fd:3b:dc:6a:89:1c:5e:a4:3b:f9:5a:f7:85:95:
         23:a5:f4:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:22 2024 by rpki-client on console-fra.rpki-client.org