Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a343030303a3a2f33342d3334203d3e20323634393534.roa
File:                     323830343a333037633a343030303a3a2f33342d3334203d3e20323634393534.roa (raw, json)
Hash identifier:          caSRd5yffpqLSoPT9iBMokPpwgzL+0zUOPtCSEMIRgo=
Subject key identifier:   51:57:A3:51:82:E4:17:60:7C:64:E9:68:93:AA:75:1E:24:A2:A4:37
Certificate issuer:       /CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
Certificate serial:       16CF5F6B12F46E1E7F2EC89D3B92BC7A6A4AB25A
Authority key identifier: 9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a343030303a3a2f33342d3334203d3e20323634393534.roa
Signing time:             Tue 26 Sep 2023 20:01:48 +0000
ROA not before:           Tue 26 Sep 2023 19:56:48 +0000
ROA not after:            Tue 24 Sep 2024 20:01:48 +0000
asID:                     264954
IP address blocks:        2804:307c:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:cf:5f:6b:12:f4:6e:1e:7f:2e:c8:9d:3b:92:bc:7a:6a:4a:b2:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC
        Validity
            Not Before: Sep 26 19:56:48 2023 GMT
            Not After : Sep 24 20:01:48 2024 GMT
        Subject: CN=5157A35182E417607C64E96893AA751E24A2A437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:80:3a:8f:ee:79:6d:a2:88:f2:4c:07:97:c8:
                    01:40:cb:0c:f0:78:0a:80:05:99:c7:91:6a:03:14:
                    1a:f2:66:a2:e2:7e:1a:3a:ea:6a:f6:b7:ce:01:e4:
                    e6:7a:d2:f7:a4:f2:8c:20:b4:dd:8c:60:7c:ef:10:
                    d3:2a:cc:50:b1:d5:ef:97:50:58:e3:6b:3c:83:ff:
                    b5:0d:23:ac:f7:f0:d7:8e:87:0b:28:43:06:52:95:
                    a7:d3:eb:38:a8:e6:d1:75:d7:1b:12:12:e6:e7:ce:
                    5e:b5:d6:37:fd:80:f2:dc:e8:65:f4:eb:7d:d5:9a:
                    e4:7b:f9:25:1d:01:ed:6f:1f:16:91:d6:5f:fb:00:
                    75:88:4e:af:84:cc:f7:cc:68:cc:88:89:3f:80:3e:
                    ff:fb:f1:3e:b9:ec:57:ef:d3:4f:3c:f6:66:72:9e:
                    1d:2a:cf:78:c0:7e:f4:ba:ed:d1:99:b4:56:86:f6:
                    b9:f4:5c:1f:1b:af:58:79:72:39:81:4b:0d:88:76:
                    0d:6f:66:8a:84:5e:1d:ed:82:02:02:7c:f6:90:81:
                    59:45:c7:94:ac:fc:3c:4d:c4:4d:1e:16:54:c2:79:
                    a1:c5:93:e0:08:e3:c3:e9:b7:59:58:4a:b8:55:a2:
                    2c:01:ac:b6:83:b0:3a:d4:29:22:3a:77:7e:19:4e:
                    ac:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                51:57:A3:51:82:E4:17:60:7C:64:E9:68:93:AA:75:1E:24:A2:A4:37
            X509v3 Authority Key Identifier:
                keyid:9F:A0:01:FF:2F:FE:B4:FA:4F:82:5B:BF:86:B2:D2:25:65:85:C3:BC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FA001FF2FFEB4FA4F825BBF86B2D2256585C3BC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G51PsqkF5pxJrZjbe8hyD8k9YEyjqPi8bLTR4GyfDSMq/0/323830343a333037633a343030303a3a2f33342d3334203d3e20323634393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:307c:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         a4:ca:f6:f4:5d:b4:28:ab:ff:0b:62:4f:43:a6:ea:48:d6:bd:
         2e:17:99:83:f4:dd:5b:09:75:37:fa:ae:5a:3e:a4:77:c1:2a:
         8c:8b:5e:c0:71:42:16:1f:4f:ba:f2:61:b9:81:6b:d9:96:5a:
         d5:36:b0:be:10:fb:b3:ef:be:5e:98:1b:79:98:7e:64:9a:76:
         e3:aa:fd:66:e3:d8:63:f6:07:fb:94:c0:8d:04:57:8e:99:38:
         f6:42:19:63:48:ef:af:e5:b0:ce:f9:5a:4c:c6:30:59:b3:40:
         ca:d3:3c:da:b7:d8:78:57:26:fd:3c:63:c0:01:de:79:48:cb:
         38:8c:60:e3:7e:04:6b:94:71:8b:2f:06:25:b6:38:13:83:85:
         a7:63:1e:2b:ac:c6:b2:60:a1:76:67:b8:0b:04:30:8a:c7:c0:
         34:c3:a4:9a:30:03:db:26:93:e6:1a:f4:a8:4f:71:04:2e:ab:
         78:e9:e0:2a:95:f4:fc:ae:b0:c5:45:d5:fd:94:20:1c:c4:1f:
         32:f1:0f:78:bb:47:93:a2:f0:58:5a:eb:f4:b4:1a:0c:b4:0e:
         7b:ed:32:41:ec:9d:e9:cb:11:cc:4d:23:e5:c1:3b:fa:5f:6d:
         68:8c:57:27:38:00:2a:d5:6a:2e:6f:f1:1c:8e:23:24:ce:e4:
         e7:51:6e:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:48 2024 by rpki-client on console-fra.rpki-client.org