Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/0/323830343a366432383a3a2f33322d3438203d3e20323032.roa
File:                     323830343a366432383a3a2f33322d3438203d3e20323032.roa (raw, json)
Hash identifier:          869ot+NoPEihWsbdR7mD9c2bVAIqi7ZMGSDz0DZvHx8=
Subject key identifier:   10:52:B5:7A:76:7A:BE:91:5E:B0:9E:53:86:A8:96:3D:64:6B:33:2F
Certificate issuer:       /CN=8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7
Certificate serial:       220F7D828AFB667E3F6B7F004630092D9A7E6154
Authority key identifier: 8E:1B:17:B1:51:86:A8:8A:EA:FC:73:B4:58:10:58:E4:A9:EF:EB:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/0/323830343a366432383a3a2f33322d3438203d3e20323032.roa
Signing time:             Mon 05 Dec 2022 16:19:38 +0000
ROA not before:           Mon 05 Dec 2022 16:14:38 +0000
ROA not after:            Mon 04 Dec 2023 16:19:38 +0000
asID:                     202
IP address blocks:        2804:6d28::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:0f:7d:82:8a:fb:66:7e:3f:6b:7f:00:46:30:09:2d:9a:7e:61:54
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7
        Validity
            Not Before: Dec  5 16:14:38 2022 GMT
            Not After : Dec  4 16:19:38 2023 GMT
        Subject: CN=1052B57A767ABE915EB09E5386A8963D646B332F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:46:58:a2:5e:5b:2b:4b:71:d0:10:01:b1:9b:
                    88:5e:bf:98:f6:83:d6:94:ec:27:7c:f5:1e:67:92:
                    9e:bb:ef:84:93:34:75:e3:0b:ae:90:cd:8b:b1:63:
                    89:32:ed:fb:f2:95:f0:fd:5d:60:1b:a8:02:81:d4:
                    57:17:b8:ce:ed:48:17:5a:36:bf:0d:18:d9:51:7b:
                    c2:39:41:bf:1d:83:3c:7f:01:0e:76:87:cf:bf:43:
                    84:ce:2e:33:ba:71:4e:9c:73:c6:91:36:26:ee:cf:
                    43:42:23:14:d8:2d:21:be:b6:34:4e:e6:22:cf:9c:
                    d0:99:34:b4:e2:4f:a2:f3:4b:bf:7d:67:01:43:9f:
                    90:0d:7b:5e:74:6d:ec:4c:cd:40:21:27:8c:cb:de:
                    45:0c:4e:1b:db:5c:4c:8b:e8:e7:d3:ec:41:52:25:
                    a0:bb:d0:e9:4a:d4:b6:e9:ee:d1:bb:a9:bf:25:f6:
                    51:43:a7:ea:57:f4:a3:58:4e:59:2c:c3:89:18:5d:
                    3d:e8:d5:46:5d:e6:50:16:d5:a8:d2:3e:c9:f8:b8:
                    36:86:dd:8d:06:1a:b7:cd:94:b6:23:0e:84:b4:b2:
                    89:fe:18:41:ae:ec:ef:34:a4:4a:aa:3d:70:87:8f:
                    a6:96:27:47:a5:5a:c5:ee:b4:a4:b3:8e:40:81:ba:
                    ec:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                10:52:B5:7A:76:7A:BE:91:5E:B0:9E:53:86:A8:96:3D:64:6B:33:2F
            X509v3 Authority Key Identifier:
                keyid:8E:1B:17:B1:51:86:A8:8A:EA:FC:73:B4:58:10:58:E4:A9:EF:EB:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/0/8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/8E1B17B15186A88AEAFC73B4581058E4A9EFEBA7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Eg7dooy9YiJP7LP4cpbEBBmEib2bMPy89b7NEFXQb3iW/0/323830343a366432383a3a2f33322d3438203d3e20323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6d28::/32

    Signature Algorithm: sha256WithRSAEncryption
         3f:7f:0a:dd:54:dc:88:85:e4:78:a1:05:c2:82:64:dc:09:2a:
         53:a9:49:38:b3:f1:1b:e9:76:4c:a6:48:1b:77:cc:4c:fa:2f:
         5e:a3:85:86:c6:eb:ca:0f:6c:7e:4c:df:15:24:c9:9f:93:1e:
         71:71:87:22:1c:21:b1:d7:40:4c:d7:17:62:22:86:a9:19:68:
         33:ef:4e:a2:3b:0d:6c:15:e3:12:de:ea:87:1a:16:19:4e:9c:
         a2:da:9d:61:45:55:c9:12:2d:62:54:82:b6:ca:01:ff:ba:22:
         4b:19:60:e3:bf:57:c5:27:7f:8c:77:36:b2:92:27:67:2c:da:
         20:21:9c:ef:52:f2:e8:ac:c6:e9:69:40:60:f1:f9:d0:38:55:
         87:ad:91:65:4d:00:fc:2c:40:1f:90:91:c6:0b:6a:61:1b:10:
         1d:1f:0b:43:56:42:82:7b:2c:67:a5:1c:98:94:2b:5d:9b:ac:
         a6:00:15:6c:01:b2:94:8b:41:70:71:3f:5c:bf:4a:97:2a:40:
         57:35:b4:8b:7e:36:0e:f9:f3:96:2a:f3:84:37:52:18:9b:27:
         04:4a:c3:6e:23:59:11:d1:9f:bf:23:9c:f7:fa:a4:b4:16:0e:
         76:c9:f9:2d:ad:2a:4b:b6:14:a4:53:74:e7:50:aa:76:52:78:
         d7:43:76:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:48 2024 by rpki-client on console-ams.rpki-client.org