Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/323830343a313231633a383030303a3a2f34352d3435203d3e20323633343537.roa
File:                     323830343a313231633a383030303a3a2f34352d3435203d3e20323633343537.roa (raw, json)
Hash identifier:          KlcoLRClLqI0Eb2R+ynu3QqewbpcRwytuo6UA0YalC8=
Subject key identifier:   B4:DC:8A:0B:1D:46:B6:30:69:DD:62:79:0E:A6:F9:E9:8E:EA:BD:07
Certificate issuer:       /CN=C1B35906E3AD7284768AEE5DB6ED4265B2056E9F
Certificate serial:       10367A3FF4BD833A7CD0BE2ECADA091868252B11
Authority key identifier: C1:B3:59:06:E3:AD:72:84:76:8A:EE:5D:B6:ED:42:65:B2:05:6E:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/323830343a313231633a383030303a3a2f34352d3435203d3e20323633343537.roa
Signing time:             Thu 18 Jan 2024 13:11:37 +0000
ROA not before:           Thu 18 Jan 2024 13:06:37 +0000
ROA not after:            Thu 16 Jan 2025 13:11:37 +0000
asID:                     263457
IP address blocks:        2804:121c:8000::/45 maxlen: 45

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:36:7a:3f:f4:bd:83:3a:7c:d0:be:2e:ca:da:09:18:68:25:2b:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C1B35906E3AD7284768AEE5DB6ED4265B2056E9F
        Validity
            Not Before: Jan 18 13:06:37 2024 GMT
            Not After : Jan 16 13:11:37 2025 GMT
        Subject: CN=B4DC8A0B1D46B63069DD62790EA6F9E98EEABD07
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:fd:92:1a:21:1d:d2:3c:f2:2a:4d:a6:10:31:
                    64:3a:d0:80:ca:a5:f5:86:ff:81:dd:2c:f0:c2:03:
                    5b:4d:f0:e9:8b:8f:5f:27:bf:15:6b:fc:51:8f:df:
                    fa:37:a2:f9:ff:cb:c8:1b:18:a6:11:65:f0:e4:4c:
                    a5:21:25:78:7a:f4:c3:5c:ab:e9:48:ff:e4:ca:7f:
                    1c:40:e0:be:d1:a9:ce:f4:d8:a2:2e:15:90:f4:49:
                    dd:0a:81:7d:9a:93:64:48:f4:91:41:c1:f7:1d:3c:
                    be:81:e2:4e:44:24:92:96:82:13:9c:01:0a:ea:b1:
                    9b:84:d8:f0:73:84:5e:54:24:4c:82:93:f2:ca:06:
                    19:f5:38:f9:79:65:1c:98:38:23:27:f1:34:db:49:
                    a3:c1:98:04:8d:55:f6:4b:b7:ad:c4:99:9b:5b:fc:
                    fc:40:be:93:53:41:78:44:11:b7:f6:db:c4:a1:a6:
                    bd:6e:e6:65:26:f3:e1:0a:68:7f:95:30:b4:90:75:
                    b3:05:1a:49:5c:8a:4e:48:7a:f5:02:f1:01:c1:71:
                    b4:cd:fa:c1:3c:6a:f4:46:1b:c5:4a:27:b1:ec:61:
                    76:76:42:13:24:a7:37:60:2e:ca:41:d2:c8:ea:0e:
                    8c:c0:ee:dc:c4:28:7d:e0:b9:6a:af:e3:32:a8:5a:
                    76:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:DC:8A:0B:1D:46:B6:30:69:DD:62:79:0E:A6:F9:E9:8E:EA:BD:07
            X509v3 Authority Key Identifier:
                keyid:C1:B3:59:06:E3:AD:72:84:76:8A:EE:5D:B6:ED:42:65:B2:05:6E:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C1B35906E3AD7284768AEE5DB6ED4265B2056E9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E5ASGsgvGmWL8arbwYfopEU2JyNaeNSb99Mdn4a8eqmX/0/323830343a313231633a383030303a3a2f34352d3435203d3e20323633343537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:121c:8000::/45

    Signature Algorithm: sha256WithRSAEncryption
         3b:15:50:a7:80:5b:2d:b4:db:16:2f:90:5e:4d:89:36:5f:8d:
         1a:a6:33:a4:99:ca:11:d5:c9:eb:e8:ab:69:43:a4:50:c6:1f:
         c1:85:20:9e:4d:63:63:53:b8:21:ea:f8:e5:17:6c:26:61:b0:
         2e:aa:1e:88:78:0a:0d:4a:f3:85:a8:43:95:ba:56:d0:e0:5a:
         d8:0c:3a:c3:66:45:d4:3f:2e:07:47:32:fe:02:b9:50:cf:1c:
         e1:7d:fd:c7:1d:4b:51:87:a2:a5:b2:b2:0d:0c:40:e3:d1:29:
         43:79:8f:03:73:a3:dc:bc:54:62:7c:85:aa:f6:e8:e5:6d:07:
         da:7d:98:99:09:56:fc:81:18:83:5f:f0:b7:f2:65:d9:79:c8:
         1c:41:70:88:a1:e1:07:4a:b7:67:f7:14:05:44:10:e3:27:d7:
         fc:7e:de:2a:6f:30:a9:5c:db:56:da:27:33:1e:31:c7:bd:08:
         6f:31:de:b4:d9:61:5b:c7:2d:2e:d3:01:57:7e:bd:8c:ad:d5:
         75:06:f0:d6:a9:36:73:21:6b:19:98:13:62:05:9d:9d:a6:a2:
         98:66:1c:e1:ed:4c:2d:3b:96:27:38:76:da:f4:c2:5e:78:4e:
         7c:fa:d7:6e:d3:de:ed:f6:67:8d:9b:70:46:21:c0:3c:a9:60:
         2e:06:b2:60
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org