Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a3a2f33322d313238203d3e20323731313639.roa
File:                     323830343a373734633a3a2f33322d313238203d3e20323731313639.roa (raw, json)
Hash identifier:          vUE6bUfx/ro8HkWu6RCqOSdDePd9Skn7U6GTfR1eagw=
Subject key identifier:   86:22:BD:6A:CF:AF:2D:97:76:64:8C:16:05:07:19:B0:DC:AC:5C:2E
Certificate issuer:       /CN=A25FBDEB2FC42754CA1D76897E6D66E147B856E4
Certificate serial:       1F5B67FBDAC638E09DB3A79850FC7FF0F3DCBBB6
Authority key identifier: A2:5F:BD:EB:2F:C4:27:54:CA:1D:76:89:7E:6D:66:E1:47:B8:56:E4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a3a2f33322d313238203d3e20323731313639.roa
Signing time:             Wed 03 Apr 2024 17:35:54 +0000
ROA not before:           Wed 03 Apr 2024 17:30:54 +0000
ROA not after:            Wed 02 Apr 2025 17:35:54 +0000
asID:                     271169
IP address blocks:        2804:774c::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:5b:67:fb:da:c6:38:e0:9d:b3:a7:98:50:fc:7f:f0:f3:dc:bb:b6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A25FBDEB2FC42754CA1D76897E6D66E147B856E4
        Validity
            Not Before: Apr  3 17:30:54 2024 GMT
            Not After : Apr  2 17:35:54 2025 GMT
        Subject: CN=8622BD6ACFAF2D9776648C16050719B0DCAC5C2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:86:94:bd:dc:b1:7a:e3:35:0f:b7:63:d9:a0:98:
                    74:71:a4:52:fb:49:d9:45:46:b0:f7:1c:45:8a:de:
                    5d:07:c2:c0:d9:3e:e1:82:17:7e:88:84:73:00:f9:
                    a6:e8:c0:48:3e:d2:71:52:56:8e:e4:3a:23:02:17:
                    f0:37:08:4b:9d:0f:0a:e4:8b:64:20:8d:92:29:aa:
                    e9:7e:7a:d6:e7:5a:cd:c6:30:21:48:5c:eb:b7:f8:
                    47:e6:39:0e:17:41:38:c7:e7:06:62:e0:3e:8a:6d:
                    5b:82:c6:b7:e0:8a:7f:a6:f0:3e:ac:9e:75:ec:e3:
                    24:e5:70:96:b8:89:7b:57:04:1d:4c:07:24:13:0e:
                    87:83:e3:0d:4c:9d:d2:d6:8a:44:6f:9e:a6:3e:18:
                    30:3c:96:54:a8:61:7a:15:db:f0:8b:c3:f1:da:92:
                    b0:3c:7a:e8:93:96:8e:60:7c:55:30:db:57:56:5a:
                    cd:07:91:2a:46:7b:3a:2d:52:e3:ba:11:0b:5c:7a:
                    57:b1:4d:d6:45:20:da:1c:7f:eb:c3:00:c7:ca:83:
                    ae:75:72:76:bc:67:c2:e6:ce:39:3e:05:5f:98:32:
                    cb:54:90:5d:76:9e:a0:50:2b:b7:fd:08:df:26:f6:
                    10:32:99:4f:0d:26:d4:1f:ab:8c:77:60:b2:2e:77:
                    07:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:22:BD:6A:CF:AF:2D:97:76:64:8C:16:05:07:19:B0:DC:AC:5C:2E
            X509v3 Authority Key Identifier:
                keyid:A2:5F:BD:EB:2F:C4:27:54:CA:1D:76:89:7E:6D:66:E1:47:B8:56:E4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A25FBDEB2FC42754CA1D76897E6D66E147B856E4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CxpaigLYz2qCvPdeWQyPDTiK2fFW1aB8F6ELZDrQE7mz/0/323830343a373734633a3a2f33322d313238203d3e20323731313639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:774c::/32

    Signature Algorithm: sha256WithRSAEncryption
         10:07:a2:96:7b:fe:12:c4:3e:41:cc:89:c0:e6:48:11:cd:5d:
         c3:d7:63:d6:3f:5c:fe:ed:10:84:15:a5:a7:e1:d7:e0:ad:81:
         27:7f:2f:e6:33:e6:c5:9c:0a:8a:9a:42:cb:24:b1:00:e3:47:
         e8:ef:15:dd:f6:fc:78:dc:8c:c6:54:ec:7a:83:c4:82:78:d1:
         49:35:2d:b4:61:d3:68:c7:05:8c:0b:e8:cf:a9:ee:28:84:6e:
         d4:4a:ae:fd:00:74:85:84:98:d4:00:ca:aa:c2:b9:b6:63:9a:
         6d:94:bb:1a:be:c8:eb:78:1a:08:ee:9f:a8:a4:a6:ca:4a:f0:
         04:24:6a:66:83:09:2c:2f:95:51:a1:96:dd:36:34:7c:8b:1a:
         70:de:ff:ab:3e:2a:c2:03:60:71:92:fa:f6:e0:a2:9a:94:db:
         ba:45:29:61:03:01:7b:90:81:47:70:fe:75:17:cf:ce:7e:54:
         58:d2:5e:63:83:3b:0d:e7:07:a8:ff:77:3b:01:a1:94:4e:63:
         b2:24:1b:48:e0:9e:38:80:8f:ed:e0:d3:c9:c2:87:96:14:a0:
         c6:c6:12:b7:51:7a:ee:1e:43:2f:7c:03:ff:06:15:52:b7:8a:
         4f:de:45:08:64:cd:28:0d:8c:2d:e3:7e:9c:dc:2a:70:33:e7:
         54:7b:df:07
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:28 2024 by rpki-client on console-fra.rpki-client.org