Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CjweErX4cvTkT6Ekqp3H9xdDY7RkmhuTp36U3hBy2rDk/0/323830343a316435633a3a2f33322d3438203d3e20323634333634.roa
File:                     323830343a316435633a3a2f33322d3438203d3e20323634333634.roa (raw, json)
Hash identifier:          OugCzK4bfxjUhQPJl/4WBsNsWwQQLWyB/ahVeLG7cBc=
Subject key identifier:   C7:63:1A:74:FC:3C:C5:C8:10:61:9F:77:99:14:D2:8F:92:73:FF:9F
Certificate issuer:       /CN=07250C92A6B7FDE61EAF85D540E7C1CAD3114FE5
Certificate serial:       3C935AE5763CFF61364C7AD7860670B309E3651E
Authority key identifier: 07:25:0C:92:A6:B7:FD:E6:1E:AF:85:D5:40:E7:C1:CA:D3:11:4F:E5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07250C92A6B7FDE61EAF85D540E7C1CAD3114FE5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CjweErX4cvTkT6Ekqp3H9xdDY7RkmhuTp36U3hBy2rDk/0/323830343a316435633a3a2f33322d3438203d3e20323634333634.roa
Signing time:             Mon 04 Apr 2022 21:41:05 +0000
ROA not before:           Mon 04 Apr 2022 21:36:05 +0000
ROA not after:            Tue 04 Apr 2023 21:41:05 +0000
asID:                     264364
IP address blocks:        2804:1d5c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:93:5a:e5:76:3c:ff:61:36:4c:7a:d7:86:06:70:b3:09:e3:65:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=07250C92A6B7FDE61EAF85D540E7C1CAD3114FE5
        Validity
            Not Before: Apr  4 21:36:05 2022 GMT
            Not After : Apr  4 21:41:05 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:39:d6:27:3b:b6:76:50:86:2b:ce:90:d6:d6:
                    22:f4:31:c5:1c:bf:de:1f:96:7d:22:d9:bb:5c:30:
                    93:19:50:94:ee:b9:2e:8f:12:7e:02:f1:83:9c:05:
                    41:12:7e:53:2f:d3:f0:2d:ad:7f:ef:f7:0c:b2:19:
                    eb:03:6d:66:5a:29:43:39:96:bd:19:8f:03:1d:de:
                    62:8a:6a:fa:5e:94:97:ea:e8:6e:13:20:51:c5:cb:
                    d6:08:ed:60:01:25:de:c5:4b:22:b2:eb:98:3c:77:
                    f7:3b:c3:21:4b:6b:98:c4:19:d7:09:16:90:a3:a4:
                    d6:5b:b1:d0:7f:4d:3b:9b:09:59:d3:de:a1:6b:04:
                    8a:5c:d9:f1:e2:a7:7a:bb:5c:96:69:83:26:17:98:
                    4e:1a:b4:39:32:26:44:bf:ce:50:c2:37:ed:20:04:
                    da:4b:cb:86:96:89:ae:3e:76:54:32:ca:56:64:d4:
                    ee:59:95:68:df:cf:ec:bc:f0:6a:44:3a:6f:9c:6e:
                    48:a8:ae:3f:6f:22:4f:4e:ef:99:14:2d:1e:57:8e:
                    b8:66:9d:98:24:17:af:30:78:7c:69:d9:b4:b3:07:
                    ed:f8:4c:ca:33:58:d1:6e:c8:92:e4:fc:67:6b:80:
                    da:e3:89:c8:8c:9b:88:c0:39:77:68:6d:37:69:7c:
                    b3:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:63:1A:74:FC:3C:C5:C8:10:61:9F:77:99:14:D2:8F:92:73:FF:9F
            X509v3 Authority Key Identifier:
                keyid:07:25:0C:92:A6:B7:FD:E6:1E:AF:85:D5:40:E7:C1:CA:D3:11:4F:E5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CjweErX4cvTkT6Ekqp3H9xdDY7RkmhuTp36U3hBy2rDk/0/07250C92A6B7FDE61EAF85D540E7C1CAD3114FE5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/07250C92A6B7FDE61EAF85D540E7C1CAD3114FE5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CjweErX4cvTkT6Ekqp3H9xdDY7RkmhuTp36U3hBy2rDk/0/323830343a316435633a3a2f33322d3438203d3e20323634333634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1d5c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b9:b7:55:5c:0e:3b:ac:77:df:1d:60:95:af:5b:8a:47:7a:7d:
         42:e8:23:84:9b:96:da:07:b1:83:ba:38:c2:32:82:2b:42:f2:
         24:a7:18:78:74:a5:9c:23:f1:e0:82:db:82:fc:65:ad:20:cd:
         06:6d:fd:e0:88:42:86:18:1f:59:42:23:72:7d:3d:42:de:e4:
         83:01:f1:2d:70:9c:1c:63:68:15:47:f6:55:02:39:15:98:9d:
         47:1f:8c:8b:d1:3b:cd:cc:c3:45:68:07:9e:b3:9f:eb:9e:47:
         98:11:06:76:7a:fe:d8:52:93:ec:10:b3:53:f9:37:eb:dc:be:
         98:1a:e9:b1:9c:66:75:59:d4:1e:71:a0:01:95:64:40:89:f7:
         e7:b7:f9:31:40:4a:ce:e6:41:b4:d8:01:9d:ad:cf:1f:f4:a4:
         51:72:02:ee:d9:20:c3:85:cd:1d:ff:bf:99:15:da:a3:43:52:
         56:ec:8e:ee:b5:2c:ae:cd:05:5f:13:69:23:42:0e:73:68:63:
         c3:ea:2c:ee:cc:bf:a8:3f:73:14:99:e0:07:fe:1f:dd:11:56:
         d2:67:a4:a7:ea:2c:01:67:95:f9:af:c3:2a:90:31:57:d9:96:
         31:9c:a1:b3:f6:4c:c6:36:3e:7c:fa:23:fc:0e:1e:32:b1:35:
         09:be:0c:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:18 2024 by rpki-client on console-ams.rpki-client.org