Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3230303a3a2f34302d3430203d3e20323638363338.roa
File:                     323830343a353434343a3230303a3a2f34302d3430203d3e20323638363338.roa (raw, json)
Hash identifier:          +VBPP/2H3uJt3fEXLqBGDU9uEa73bck3K+6L3esmQes=
Subject key identifier:   AE:D8:50:DC:B7:69:57:35:C3:6D:46:05:09:C6:FE:96:D8:E3:90:09
Certificate issuer:       /CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
Certificate serial:       3F09DA37800AF20CFFA1DB2CB7FEA0B3261FEC28
Authority key identifier: EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3230303a3a2f34302d3430203d3e20323638363338.roa
Signing time:             Fri 24 Mar 2023 14:06:23 +0000
ROA not before:           Fri 24 Mar 2023 14:01:23 +0000
ROA not after:            Fri 22 Mar 2024 14:06:23 +0000
asID:                     268638
IP address blocks:        2804:5444:200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:09:da:37:80:0a:f2:0c:ff:a1:db:2c:b7:fe:a0:b3:26:1f:ec:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC
        Validity
            Not Before: Mar 24 14:01:23 2023 GMT
            Not After : Mar 22 14:06:23 2024 GMT
        Subject: CN=AED850DCB7695735C36D460509C6FE96D8E39009
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:5f:86:71:4d:c5:60:3d:d3:2d:f3:fc:c7:30:
                    3e:6f:d8:a5:1b:0c:2d:11:a1:55:93:f1:82:05:3a:
                    8a:cc:ba:3b:f7:ab:2f:d9:19:f4:b8:f5:24:0a:41:
                    5a:00:58:ce:d4:d7:16:1a:6f:cf:0c:98:f4:8c:5d:
                    7d:06:a0:e4:6a:5d:8b:b4:2d:f4:da:3e:79:d3:9b:
                    73:e5:74:7c:67:38:23:dd:34:b9:2d:98:c6:e8:de:
                    b2:ab:ee:5e:3e:80:b0:5b:e0:c5:44:13:c5:4d:74:
                    c7:54:92:05:44:69:cb:8d:b8:be:8e:cc:dc:a4:1b:
                    3e:d4:a3:5c:13:32:3b:3e:50:25:ab:44:8a:20:df:
                    88:65:14:e7:0d:b8:96:ce:33:ad:b1:f6:83:84:cb:
                    6b:28:3f:82:53:43:9f:97:29:5e:25:ba:8c:24:97:
                    64:29:9d:57:cf:f1:de:5b:a0:11:e8:a8:e7:d7:21:
                    b8:ab:93:33:2e:22:6d:af:c1:2c:0a:b6:f9:bd:ed:
                    36:08:83:c9:35:15:7d:20:03:26:89:b8:e8:59:41:
                    51:4f:fe:0f:79:f9:70:52:c2:52:a8:6e:e6:38:9b:
                    22:53:eb:a6:27:d6:d5:b1:89:07:64:4d:b4:85:51:
                    69:9f:bc:21:18:66:ac:70:3e:99:40:43:ef:76:3c:
                    3b:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AE:D8:50:DC:B7:69:57:35:C3:6D:46:05:09:C6:FE:96:D8:E3:90:09
            X509v3 Authority Key Identifier:
                keyid:EB:46:1C:9E:98:28:2C:93:4A:7C:B4:FF:1A:B2:45:0F:FC:2C:A0:AC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EB461C9E98282C934A7CB4FF1AB2450FFC2CA0AC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DmyLDjMgaeUsYnfjUCfi8BYTx4tsZvsFPDws5wDs4xFa/0/323830343a353434343a3230303a3a2f34302d3430203d3e20323638363338.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5444:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         23:62:b4:66:db:f4:ac:d6:f1:11:e1:cf:75:dc:e2:e5:14:13:
         79:03:18:ab:c3:ec:03:74:37:9f:3d:e6:81:32:24:56:eb:1f:
         c6:8c:8a:56:e2:19:a7:12:e3:94:2a:7e:10:65:2e:02:2c:b2:
         a8:51:93:db:4a:36:61:db:36:f3:ca:c9:e9:47:cd:0b:10:41:
         9c:ee:4a:a4:b7:4b:5a:a6:ff:fa:5a:95:d0:1d:51:7a:63:4a:
         f1:13:26:d8:9b:f7:89:e4:69:18:fc:e0:38:ad:ed:7b:90:42:
         07:6e:e7:a0:b9:05:41:dd:09:87:bc:ae:c1:2d:de:c5:16:a3:
         da:b8:55:a4:b9:24:8b:70:a3:89:30:0a:8a:e0:d4:a2:fc:4d:
         cf:a0:7f:27:5f:09:48:81:f1:07:8b:5b:fc:aa:c6:c6:0c:7d:
         a0:ed:90:fa:74:c5:bd:a6:69:99:bc:4f:f3:a8:9c:ca:c1:a8:
         db:8b:1b:d8:e2:51:fe:fe:02:10:16:82:02:b2:d8:78:81:bf:
         17:f1:4d:5e:83:9f:19:72:88:74:7b:52:07:39:bc:39:3f:36:
         6f:d3:b3:67:f4:6d:cd:70:51:10:88:20:3a:b8:bb:ba:7b:2d:
         0f:4d:7b:9e:46:ab:ab:91:77:35:a2:ca:1d:ce:fe:09:20:c7:
         4d:04:82:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org