Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/323830343a323333633a3a2f33322d3438203d3e20323634313530.roa
File:                     323830343a323333633a3a2f33322d3438203d3e20323634313530.roa (raw, json)
Hash identifier:          XgKHvu10A+ov5/Eas+JtVtLiKwcaIQTIO/cYLuDxQfg=
Subject key identifier:   7E:1C:16:2B:15:60:0B:F5:8B:03:01:6A:DC:75:26:D7:61:A3:08:F7
Certificate issuer:       /CN=CEA18BE7E56B5BF4C23355D07180FFABCC52E18F
Certificate serial:       0886B2B14468666638B25C8D98176E721CE1FD7D
Authority key identifier: CE:A1:8B:E7:E5:6B:5B:F4:C2:33:55:D0:71:80:FF:AB:CC:52:E1:8F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEA18BE7E56B5BF4C23355D07180FFABCC52E18F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/323830343a323333633a3a2f33322d3438203d3e20323634313530.roa
Signing time:             Thu 26 May 2022 14:40:01 +0000
ROA not before:           Thu 26 May 2022 14:35:01 +0000
ROA not after:            Thu 25 May 2023 14:40:01 +0000
asID:                     264150
IP address blocks:        2804:233c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:86:b2:b1:44:68:66:66:38:b2:5c:8d:98:17:6e:72:1c:e1:fd:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CEA18BE7E56B5BF4C23355D07180FFABCC52E18F
        Validity
            Not Before: May 26 14:35:01 2022 GMT
            Not After : May 25 14:40:01 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:d5:28:77:ab:da:69:44:7e:87:bb:ae:64:a2:
                    39:81:ac:f6:28:54:16:0a:1f:a8:ed:63:f5:9d:c7:
                    20:0a:f2:d0:a1:c4:33:ff:43:67:8f:ed:47:cc:6e:
                    3b:5b:d9:4d:da:97:6b:21:23:17:23:99:49:6e:09:
                    27:92:33:ef:11:88:56:cd:07:4f:7d:da:c3:37:a7:
                    3e:ec:c6:fe:b5:4a:94:d3:f4:76:dd:0a:5c:a6:f5:
                    ec:92:6e:f7:fb:6c:78:0f:4c:e3:b3:84:53:aa:72:
                    07:6b:39:23:77:29:94:9e:c2:d3:74:53:5d:c0:c6:
                    bb:a1:1f:d2:5c:2c:d5:50:84:e5:b5:e4:31:49:0f:
                    05:bb:fa:ca:ff:0e:97:b8:2f:cd:5e:a7:74:81:ca:
                    42:f7:d8:17:a8:80:ae:5a:6f:86:9e:06:15:8a:3d:
                    de:67:ca:9f:3a:a2:19:f5:18:80:81:c0:9e:e9:2e:
                    25:67:2c:c4:e1:b7:ec:1e:aa:09:c9:0b:e2:79:2e:
                    53:b5:d6:8d:e5:59:81:81:85:4b:a2:72:93:c7:2e:
                    e0:23:cb:59:59:8c:50:42:09:18:97:1a:05:70:80:
                    d3:10:c4:b9:06:31:77:67:45:5e:d2:d3:35:ff:42:
                    19:8c:88:8f:bb:1d:5a:8f:be:15:78:ad:df:e4:1c:
                    8c:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7E:1C:16:2B:15:60:0B:F5:8B:03:01:6A:DC:75:26:D7:61:A3:08:F7
            X509v3 Authority Key Identifier:
                keyid:CE:A1:8B:E7:E5:6B:5B:F4:C2:33:55:D0:71:80:FF:AB:CC:52:E1:8F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/CEA18BE7E56B5BF4C23355D07180FFABCC52E18F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CEA18BE7E56B5BF4C23355D07180FFABCC52E18F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E9vFSeKTPq17PZQ4HmBQRUFsgXuLP26TXx514wnFxGs1/0/323830343a323333633a3a2f33322d3438203d3e20323634313530.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:233c::/32

    Signature Algorithm: sha256WithRSAEncryption
         42:be:d7:68:0b:ab:82:bf:7c:c3:76:db:09:14:a4:6c:25:80:
         7f:d6:3a:ad:a0:15:3b:0f:72:c0:ed:93:a5:f1:0e:23:d1:4a:
         eb:74:43:8d:8b:1f:6f:2f:e0:75:ed:50:55:e0:2f:f3:9f:f0:
         f2:5b:90:c8:e2:af:23:11:e1:e2:fc:f9:23:79:69:12:fa:a6:
         9a:ff:ca:6f:c4:61:db:11:28:93:cf:fe:50:a9:e4:a4:ba:d6:
         de:83:62:83:9a:9b:45:9d:c5:ad:ba:0c:84:17:60:0e:20:35:
         36:16:f7:75:c3:aa:44:79:ab:64:42:94:af:2a:14:f7:c4:02:
         72:84:20:5e:a0:b5:16:5c:40:6b:52:38:c2:e0:da:89:df:79:
         21:b5:b5:53:77:6e:de:65:4b:94:4f:c8:29:58:b4:b6:5d:98:
         6d:dc:08:84:bd:96:2f:44:74:2d:13:1b:40:a0:cf:26:11:e0:
         31:01:1f:f4:3d:f5:4f:69:56:44:96:1a:27:a8:18:98:f0:ef:
         d5:70:1c:24:01:35:06:4c:8b:d2:40:b4:2f:75:c8:e9:3d:04:
         f8:d4:08:77:bc:f4:0c:58:04:f5:4f:e8:61:6c:4d:15:76:67:
         b1:89:f5:e8:fe:9e:33:53:3a:e0:1e:13:48:c4:bf:cf:bb:96:
         68:16:f7:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:37 2024 by rpki-client on console-fra.rpki-client.org