Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3530303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a3530303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          CKFpjyTVm0vU6RJLIG5P4t4gPtrwYKZ55z62MCw4o50=
Subject key identifier:   49:A1:35:26:CF:8B:8E:E1:15:BC:E3:D6:63:0B:6D:21:EB:1D:E7:EE
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       2088D9EE0B0B0BDDB94EAA2CD3F700FB4076F455
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3530303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:10:04 +0000
ROA not before:           Tue 20 Dec 2022 15:05:04 +0000
ROA not after:            Tue 19 Dec 2023 15:10:04 +0000
asID:                     262468
IP address blocks:        2804:e94:500::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:88:d9:ee:0b:0b:0b:dd:b9:4e:aa:2c:d3:f7:00:fb:40:76:f4:55
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:05:04 2022 GMT
            Not After : Dec 19 15:10:04 2023 GMT
        Subject: CN=49A13526CF8B8EE115BCE3D6630B6D21EB1DE7EE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:da:0b:65:dc:01:d6:70:de:48:dc:79:aa:31:
                    16:40:57:ac:d0:bc:3d:a3:ee:94:fb:46:8d:ef:44:
                    cc:7d:83:cb:3c:e0:73:09:a2:77:de:77:3a:2b:40:
                    6c:f6:c4:ae:7f:ff:bc:3f:bf:a7:f4:f8:dc:4d:88:
                    65:3a:ae:60:46:6f:d3:b6:26:ae:7e:32:8a:40:12:
                    db:31:45:39:7f:b4:09:55:a1:3c:30:16:ec:eb:0b:
                    75:7b:e4:ec:90:ca:86:fd:c8:d3:44:39:a3:07:b0:
                    f3:3d:6b:b2:a5:84:34:15:e2:a7:25:83:f0:8d:67:
                    5f:cd:1c:27:6c:b1:82:c5:df:44:7f:55:5a:33:f2:
                    db:aa:0c:69:bd:8a:c9:ba:e4:8d:16:9d:e7:1d:1a:
                    f8:b2:dc:8d:11:f6:35:26:95:f6:94:87:0a:a1:75:
                    57:b5:1b:93:5f:14:12:a1:5b:29:04:3f:4a:1d:f6:
                    b2:f2:a6:1a:d7:21:5b:a7:dd:13:d8:c4:61:3a:7f:
                    43:55:51:ed:5a:42:11:a6:7b:52:b2:2f:02:e6:89:
                    32:cc:ee:c8:5d:91:e4:fe:b4:bb:76:6a:c4:cb:9e:
                    34:67:45:9f:bf:53:f8:37:60:b4:7a:55:31:56:9e:
                    a9:9d:8a:95:3c:2b:f6:7a:0c:ee:2c:69:0a:88:ce:
                    3c:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:A1:35:26:CF:8B:8E:E1:15:BC:E3:D6:63:0B:6D:21:EB:1D:E7:EE
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3530303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:500::/44

    Signature Algorithm: sha256WithRSAEncryption
         5c:30:5d:e0:0e:6c:51:90:13:f4:24:98:a5:48:25:33:90:eb:
         99:b2:bc:f9:9d:82:fd:2c:69:a7:f2:c7:81:d3:af:2e:21:5f:
         c5:02:ae:73:34:bc:ec:3f:a1:8d:6e:fb:bc:d4:eb:40:40:ab:
         a9:1d:32:3d:96:fd:5e:38:01:15:47:9f:26:a2:be:38:2f:61:
         46:02:54:4e:59:44:9a:90:88:d5:02:99:5e:c2:9c:ba:cd:38:
         94:99:da:d7:ba:05:6a:8f:80:7e:a9:98:77:cd:93:10:c7:e9:
         1f:0e:33:18:f7:5d:b2:4a:92:b6:f4:c8:36:24:0a:9d:fb:8a:
         ad:ab:fc:97:0f:2c:9a:f2:73:81:68:28:ec:26:b6:d7:43:67:
         44:5d:c9:c2:32:89:82:bb:16:9e:49:3a:3a:77:72:87:05:ea:
         1e:ff:d8:98:f7:f7:09:b9:2c:a9:c1:b7:4e:08:20:2d:36:06:
         99:31:7e:50:a1:6b:b0:0d:5a:74:0c:6c:ad:e1:1e:ff:fb:5c:
         a4:27:55:c6:44:97:38:df:4b:b5:58:f4:cc:0e:07:13:8b:34:
         8f:99:79:d8:9a:f9:11:f1:2a:d4:33:af:9e:b3:0c:7b:99:75:
         fe:24:de:e6:09:54:21:14:5f:82:76:1b:01:ab:51:59:41:83:
         99:97:78:98
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org