Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/323830343a3261343a3a2f33322d313238203d3e20323632383238.roa
File:                     323830343a3261343a3a2f33322d313238203d3e20323632383238.roa (raw, json)
Hash identifier:          ihb13UQNaCuKoR68HrlYtGqXj/yxxvGtXE4Pffr3UMM=
Subject key identifier:   1D:10:5A:05:37:70:6E:41:A2:82:29:D5:72:1E:15:C2:59:F8:5E:31
Certificate issuer:       /CN=D994586BFFE7BF1CF881DC6C506FD7A66CA476FE
Certificate serial:       2B14ED9EEF6B1D4317200FC32EB316D0D9BFA008
Authority key identifier: D9:94:58:6B:FF:E7:BF:1C:F8:81:DC:6C:50:6F:D7:A6:6C:A4:76:FE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D994586BFFE7BF1CF881DC6C506FD7A66CA476FE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/323830343a3261343a3a2f33322d313238203d3e20323632383238.roa
Signing time:             Wed 15 Feb 2023 14:53:14 +0000
ROA not before:           Wed 15 Feb 2023 14:48:14 +0000
ROA not after:            Wed 14 Feb 2024 14:53:14 +0000
asID:                     262828
IP address blocks:        2804:2a4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:14:ed:9e:ef:6b:1d:43:17:20:0f:c3:2e:b3:16:d0:d9:bf:a0:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D994586BFFE7BF1CF881DC6C506FD7A66CA476FE
        Validity
            Not Before: Feb 15 14:48:14 2023 GMT
            Not After : Feb 14 14:53:14 2024 GMT
        Subject: CN=1D105A0537706E41A28229D5721E15C259F85E31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:08:c3:d1:0e:6b:f1:b5:c7:dc:0b:56:af:02:
                    40:d1:4e:22:c7:67:c9:f2:22:a5:3f:cf:a8:77:3c:
                    a7:4c:5b:a0:d6:4e:cb:9c:c9:74:10:e4:91:3a:ac:
                    f3:bc:22:d9:36:b2:35:99:b7:49:c0:89:a9:9a:fd:
                    41:b3:e8:44:0d:9d:35:7f:2c:be:bf:64:03:92:16:
                    36:2d:2e:90:20:2f:69:c7:8d:ea:91:d3:a1:15:71:
                    e1:a5:12:91:80:6b:e7:29:b8:d2:74:a1:55:d2:39:
                    a4:61:d5:2c:a0:28:01:41:ac:f6:05:d1:6d:fe:ef:
                    72:68:d7:af:b3:66:48:97:df:cc:47:01:9b:ca:a7:
                    55:6d:0d:2b:81:31:e1:e2:65:2a:d5:ed:71:d1:52:
                    6a:97:e9:3d:64:4b:ad:3f:28:f6:db:1b:83:4e:71:
                    82:c5:52:21:1e:6d:ea:29:a4:a5:52:c3:de:ab:c4:
                    9e:59:ab:ed:3d:1e:16:d0:87:b1:1c:1c:22:e1:89:
                    19:d0:61:72:96:ec:9d:8a:89:9b:d3:36:96:56:26:
                    e1:65:0b:9d:4c:e8:b6:7f:dd:f5:5f:9c:86:53:13:
                    51:66:d3:03:e4:f5:60:48:ff:c9:7d:d3:ff:28:30:
                    65:ae:bf:10:88:13:71:70:b3:d7:58:7a:b3:c2:82:
                    21:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1D:10:5A:05:37:70:6E:41:A2:82:29:D5:72:1E:15:C2:59:F8:5E:31
            X509v3 Authority Key Identifier:
                keyid:D9:94:58:6B:FF:E7:BF:1C:F8:81:DC:6C:50:6F:D7:A6:6C:A4:76:FE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/D994586BFFE7BF1CF881DC6C506FD7A66CA476FE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D994586BFFE7BF1CF881DC6C506FD7A66CA476FE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EFFX5sEJyQ7UeNRytpu7c81Kt8XgDp7SrNMmSLUfQ18f/0/323830343a3261343a3a2f33322d313238203d3e20323632383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:e9:8c:d1:33:3d:63:86:d2:0b:cc:68:51:c7:f3:0c:25:80:
         9e:60:a4:9d:3d:7a:0b:25:5b:4b:e1:98:70:f2:43:71:b0:68:
         4b:95:5b:7b:ef:f1:1d:46:7d:7b:f7:1e:ae:f5:79:05:dc:71:
         d6:a0:69:16:67:2e:24:9f:52:f6:50:ae:67:81:66:30:72:d7:
         20:92:ac:f7:ef:e5:9b:08:15:88:ce:8c:7c:94:0b:e4:f6:af:
         32:d6:3a:b8:b2:e7:97:bf:7c:d0:32:e9:c5:91:30:41:33:ee:
         60:85:cd:15:e1:93:21:17:2c:da:6f:f2:68:9c:d4:38:8e:9c:
         d9:a8:4c:3f:42:3b:5c:b3:08:e8:c2:33:76:65:15:7c:fe:23:
         f2:5f:41:76:b1:7a:ed:82:4a:00:55:29:d6:7f:17:80:0c:5b:
         e4:bd:22:d6:ac:ba:c4:6f:e2:a5:20:1d:80:ef:2e:20:6b:91:
         fb:c4:4c:fc:a0:6b:60:ba:dc:f7:d2:83:86:f5:33:5d:ac:05:
         28:5b:0b:e1:62:b7:3d:6e:7f:57:26:2b:fb:06:ba:57:4b:54:
         a0:30:d0:21:6f:0a:20:28:fc:32:6f:68:25:cc:c6:81:f2:16:
         e6:0f:a9:d7:9a:8a:08:46:18:12:ea:3e:02:48:d1:df:5b:ed:
         3d:e6:e3:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:45 2024 by rpki-client on console-ams.rpki-client.org