Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a643030303a3a2f33362d3336203d3e20323638323335.roa
File:                     323830343a346530383a643030303a3a2f33362d3336203d3e20323638323335.roa (raw, json)
Hash identifier:          NrzhHSwT55CRf7k3mP6w8Ds+UIWEbMmqfk/lbxmxrmk=
Subject key identifier:   ED:44:B7:D5:12:34:BC:F7:DB:06:53:8E:31:90:19:35:C8:DE:B5:BF
Certificate issuer:       /CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
Certificate serial:       75D8CA2CAC976C65D48298826F9B991DE622737D
Authority key identifier: 5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a643030303a3a2f33362d3336203d3e20323638323335.roa
Signing time:             Thu 25 Jul 2024 14:08:23 +0000
ROA not before:           Thu 25 Jul 2024 14:03:23 +0000
ROA not after:            Fri 25 Jul 2025 14:08:23 +0000
asID:                     268235
IP address blocks:        2804:4e08:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:d8:ca:2c:ac:97:6c:65:d4:82:98:82:6f:9b:99:1d:e6:22:73:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5AB9CDBE226CB666D8272B3C166713B1F10A56C5
        Validity
            Not Before: Jul 25 14:03:23 2024 GMT
            Not After : Jul 25 14:08:23 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:bd:d6:b9:a5:12:7a:04:d7:60:6a:07:ab:d5:
                    ee:43:38:ba:e9:ec:09:da:00:26:14:78:84:5d:99:
                    6b:2e:ba:d9:9e:9a:f9:a7:40:52:d2:d7:d3:5e:e7:
                    91:5d:ca:1c:d8:1e:b4:bc:17:44:dd:93:ad:14:5b:
                    a5:0a:e2:eb:9d:7c:c6:57:5c:a0:16:53:71:80:23:
                    b4:75:ca:d0:8e:d4:8e:85:73:1f:14:47:ea:ca:54:
                    dc:13:05:f0:1d:b5:fc:f4:ce:aa:6a:dd:2e:10:00:
                    4f:74:92:39:97:e2:66:ed:96:a2:a2:0a:3d:94:f6:
                    13:79:a5:aa:c5:54:57:e9:00:96:0e:0e:e3:b2:2d:
                    6c:ac:55:1b:77:76:39:16:77:10:2c:d8:67:a9:51:
                    2e:d6:d8:30:e4:21:b9:72:49:50:b9:19:ca:77:e2:
                    6c:8c:91:20:23:5a:5c:32:9d:98:29:3c:ab:db:da:
                    9a:b2:8b:dd:1c:aa:27:87:69:86:41:16:cc:bb:c0:
                    ae:80:c9:c7:f2:a6:cd:da:6d:43:9c:18:98:a5:c3:
                    27:d1:41:12:56:20:0e:34:f5:67:9d:36:82:91:8f:
                    e5:22:78:50:1f:f1:93:de:c2:bf:10:cc:15:9b:bf:
                    29:4b:50:5a:30:2e:6c:de:13:00:e6:2c:94:d2:d1:
                    c9:0d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:44:B7:D5:12:34:BC:F7:DB:06:53:8E:31:90:19:35:C8:DE:B5:BF
            X509v3 Authority Key Identifier:
                keyid:5A:B9:CD:BE:22:6C:B6:66:D8:27:2B:3C:16:67:13:B1:F1:0A:56:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/5AB9CDBE226CB666D8272B3C166713B1F10A56C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G3nkJLg6sCokqYqFVK63a19xsEihrG1LMoNX8G5KM6Kr/1/323830343a346530383a643030303a3a2f33362d3336203d3e20323638323335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e08:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         74:f6:3a:b9:44:8f:89:dd:d1:6b:3a:fb:a8:3e:4c:e7:53:80:
         84:47:da:bc:07:46:02:06:bf:06:56:1e:6b:ca:07:69:e2:f5:
         7c:99:0e:27:59:aa:e3:0e:b5:8f:d8:f5:e7:aa:c7:46:8a:a7:
         a9:36:b0:ff:62:11:df:46:56:d7:ba:54:7a:3f:35:73:8f:66:
         5f:44:de:fd:57:4a:01:03:61:eb:b2:8b:42:40:de:84:7b:50:
         23:4a:a8:d6:a0:fd:5d:ad:11:3b:02:93:17:90:fb:3a:83:d9:
         fc:26:b7:28:76:f5:ae:6a:d8:47:df:98:ae:78:70:0a:b8:22:
         74:01:58:5e:96:72:e2:48:24:12:a8:8d:59:5c:59:1b:fb:98:
         dd:a6:08:23:9b:fb:77:b5:c9:e9:0f:7b:d5:6f:38:8e:89:a7:
         ef:c8:3b:39:ab:34:06:84:be:5b:5c:db:27:28:72:b5:ad:57:
         82:9d:89:a8:f9:25:ef:81:df:c0:0c:bf:10:ba:69:f2:7a:b7:
         6c:9d:24:1c:f3:b4:f5:da:d7:ab:f2:12:50:4e:c2:56:4b:56:
         7e:47:1a:b8:2d:9a:e3:47:bc:c4:47:c6:1c:92:8c:8c:e9:09:
         3c:ed:87:9b:ea:d1:af:77:66:60:04:11:d8:37:62:02:03:95:
         78:b6:fd:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Oct 9 06:17:45 2024 by rpki-client on console-ams.rpki-client.org