Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3136303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a3136303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          ATT6O0y1srjikSztjClgiZYVWckeXm0UojVb+yfTFTQ=
Subject key identifier:   DA:1A:93:31:D4:21:54:DC:B0:3C:8F:5E:A4:6C:AA:68:2C:F7:A8:F9
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       3D0AEB053E1601D8DCBBF5F86B42426E73CF7021
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3136303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:54 +0000
ROA not before:           Tue 20 Dec 2022 15:04:54 +0000
ROA not after:            Tue 19 Dec 2023 15:09:54 +0000
asID:                     262468
IP address blocks:        2804:e94:160::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:0a:eb:05:3e:16:01:d8:dc:bb:f5:f8:6b:42:42:6e:73:cf:70:21
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:54 2022 GMT
            Not After : Dec 19 15:09:54 2023 GMT
        Subject: CN=DA1A9331D42154DCB03C8F5EA46CAA682CF7A8F9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:bb:9e:72:f6:f3:57:70:74:65:e4:72:0d:0a:
                    22:46:46:b0:fe:30:92:8d:c0:de:95:d8:0f:9e:1f:
                    f6:f0:fb:03:67:6a:af:46:c3:2f:e9:33:09:ad:46:
                    af:88:49:c8:96:0f:1c:b1:0f:58:18:73:aa:27:93:
                    01:ec:a1:b1:cb:3e:4a:91:ac:4e:91:49:74:78:65:
                    63:e3:5c:c3:62:40:1c:7a:fd:91:91:2b:40:a9:52:
                    ea:4b:80:f7:82:c8:6d:0e:d7:31:b2:e8:cb:7a:80:
                    c4:10:97:37:d8:ab:60:6f:e8:bf:d7:8d:75:41:c3:
                    8b:62:bc:3b:b4:b2:ba:1d:a9:8e:0a:69:5a:c9:42:
                    d3:4f:91:bf:ab:96:6f:72:f4:01:44:33:e3:c8:d0:
                    fc:03:8d:fb:e3:76:2c:b1:45:ac:84:d3:a6:5f:45:
                    6e:df:22:b5:30:37:af:3e:47:68:83:38:47:06:8d:
                    30:12:6a:4a:a5:22:9a:c0:79:2a:50:86:25:ca:44:
                    2b:5d:dd:e3:d7:47:87:9e:55:b0:11:b8:83:ee:1c:
                    97:65:16:13:e0:68:f9:ac:03:24:90:dc:eb:70:fb:
                    f0:df:fc:94:d3:31:15:d3:e6:71:5c:b4:d5:4e:1f:
                    90:c1:91:73:47:c5:fc:7e:34:49:92:a2:2e:e1:16:
                    6c:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DA:1A:93:31:D4:21:54:DC:B0:3C:8F:5E:A4:6C:AA:68:2C:F7:A8:F9
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3136303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:160::/44

    Signature Algorithm: sha256WithRSAEncryption
         9c:ca:0d:2b:d9:56:e5:ee:4e:76:8d:81:e1:96:a6:7a:bc:a2:
         6e:d0:83:27:3c:b2:cd:4c:ad:05:53:f6:b0:13:da:ba:1f:3c:
         19:60:2b:0b:97:05:77:fa:06:dd:a2:a4:7e:e0:27:44:23:7f:
         ea:ea:cd:a4:88:6e:45:7b:f4:cb:5b:8b:59:fe:d6:67:79:11:
         7b:6a:51:e2:02:ca:64:57:c0:aa:36:47:6f:7b:d7:4d:c6:7d:
         04:19:81:e2:be:31:4f:93:0f:99:78:5a:f8:a3:0a:bf:5d:db:
         f6:7b:b5:4e:12:37:be:5a:f0:ad:fa:7c:b2:6c:d7:e7:84:6f:
         f7:9a:11:07:be:02:01:0a:fe:80:bb:ae:75:7c:99:74:17:2b:
         bc:7f:15:e4:77:7e:22:d8:70:e1:14:13:bb:49:fe:44:c9:33:
         2e:c8:b4:76:df:62:3e:93:e1:f1:dd:4b:42:e1:fe:bc:d8:83:
         fa:99:31:5d:ef:cb:bb:7d:c4:2f:88:48:74:90:35:51:62:a9:
         6f:09:21:71:e8:06:07:be:77:6d:eb:3e:9d:37:2b:11:f2:d0:
         13:a8:1c:51:6a:1e:2e:b8:1f:31:c1:2e:5f:95:63:f6:71:3d:
         68:fe:4a:84:54:f3:b2:9b:dc:3c:53:f2:43:f8:f5:44:42:ed:
         1d:67:d6:cc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org