Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3534303a3a2f34322d3432203d3e20323632343638.roa
File:                     323830343a6539343a3534303a3a2f34322d3432203d3e20323632343638.roa (raw, json)
Hash identifier:          pN/Ju0MskIQdpNMEOPBMuVKOaslxVI+JsXRUfJ8vEhU=
Subject key identifier:   2B:4B:FA:47:97:4E:5C:F3:A4:F8:3D:78:25:9A:03:9A:A8:57:4C:C3
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       61FA192825770A1A96EF0F62E9B02AAE0F0ED2FA
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3534303a3a2f34322d3432203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:10:01 +0000
ROA not before:           Tue 20 Dec 2022 15:05:01 +0000
ROA not after:            Tue 19 Dec 2023 15:10:01 +0000
asID:                     262468
IP address blocks:        2804:e94:540::/42 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:fa:19:28:25:77:0a:1a:96:ef:0f:62:e9:b0:2a:ae:0f:0e:d2:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:05:01 2022 GMT
            Not After : Dec 19 15:10:01 2023 GMT
        Subject: CN=2B4BFA47974E5CF3A4F83D78259A039AA8574CC3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ec:8a:b4:2f:b4:ce:2e:39:f7:e6:50:14:39:76:
                    c0:72:3d:fa:5e:1d:0d:ed:28:15:94:87:8b:d9:4e:
                    0c:32:8a:bd:84:50:cf:af:7d:9a:22:50:7e:ee:41:
                    85:5b:71:56:0f:ac:3c:33:88:f4:b8:80:68:aa:07:
                    54:fd:9d:91:c6:19:f5:1b:45:45:e7:22:c0:77:24:
                    0e:fe:96:c2:2d:25:e6:05:f6:62:54:c6:1f:4f:52:
                    48:44:c1:d8:5c:35:bb:ac:a4:f5:62:22:40:70:48:
                    d5:51:b2:3a:14:ed:0c:d9:cc:04:26:e3:23:bf:01:
                    d3:60:07:57:09:bf:38:1b:00:24:a5:29:e1:7b:a1:
                    84:78:b2:a6:11:27:fb:3d:9e:b8:e2:13:10:58:d3:
                    d5:67:a4:63:e0:0d:1e:ab:cc:5b:df:d7:48:c8:98:
                    3e:7f:b8:e1:9e:da:04:29:34:57:64:4a:03:e3:34:
                    26:84:5f:35:9b:f8:fb:b9:01:27:49:cb:50:03:76:
                    a0:c6:13:64:68:f1:6c:f0:a3:64:05:ce:c3:22:b1:
                    39:5c:ba:42:b6:50:86:42:95:c5:c3:03:97:39:ab:
                    1c:d3:5e:55:aa:27:d8:5f:49:16:75:c8:63:f2:21:
                    cb:a0:2a:82:87:91:81:60:80:77:2f:e4:be:ef:17:
                    7d:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:4B:FA:47:97:4E:5C:F3:A4:F8:3D:78:25:9A:03:9A:A8:57:4C:C3
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3534303a3a2f34322d3432203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:540::/42

    Signature Algorithm: sha256WithRSAEncryption
         7b:06:e9:7e:18:a9:79:6f:54:73:b4:5a:42:67:4a:0f:5d:ac:
         44:e1:60:b6:ea:93:a0:24:aa:ec:61:ba:c9:95:21:e9:1e:bf:
         32:12:82:17:f9:6d:cf:61:54:cd:12:81:f9:0b:11:fa:87:a2:
         e2:5e:fa:fd:2f:f2:f6:0c:20:03:98:f1:29:bb:3c:96:33:2f:
         32:5b:d2:87:eb:32:99:c7:c1:63:af:6a:3d:12:47:56:63:91:
         44:01:10:6c:87:c6:40:a2:81:21:79:a2:c5:58:d0:7c:20:d4:
         84:17:64:39:5e:cd:82:ec:e6:00:94:94:34:30:4d:7d:98:26:
         45:05:b1:20:74:89:c0:f8:50:04:55:40:27:28:0e:ea:3b:c9:
         83:fb:b1:96:ab:b9:64:b7:10:bf:0b:a5:3f:49:94:5a:bc:0f:
         3b:6c:7f:e8:73:36:61:39:28:20:6b:ba:76:c4:06:ea:35:bc:
         68:5c:f5:4a:73:fa:ef:63:73:d2:88:57:d1:9a:ea:80:99:e9:
         28:07:8f:4c:90:42:69:b4:8a:61:d8:d5:70:fb:65:14:8c:70:
         7d:32:60:1a:72:80:52:c0:c7:f5:22:8e:57:8d:24:3c:04:90:
         00:5f:3a:91:ed:e6:47:f7:63:d0:3d:6f:46:9e:88:cb:7a:83:
         dd:11:49:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org