Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3830303a3a2f34302d3430203d3e20323632343638.roa
File:                     323830343a6539343a3830303a3a2f34302d3430203d3e20323632343638.roa (raw, json)
Hash identifier:          YkhHSnvjOdDe+mU/Sz8ogdmaZstmaISzep0Sj+X63bM=
Subject key identifier:   5A:2E:41:3F:3D:30:E5:BB:E2:9D:EB:22:4F:9E:07:26:F9:E2:E2:9B
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       3B89429342CB4625B8C1A9AA7319AAEE0076A01B
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3830303a3a2f34302d3430203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:42 +0000
ROA not before:           Tue 20 Dec 2022 15:04:42 +0000
ROA not after:            Tue 19 Dec 2023 15:09:42 +0000
asID:                     262468
IP address blocks:        2804:e94:800::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:89:42:93:42:cb:46:25:b8:c1:a9:aa:73:19:aa:ee:00:76:a0:1b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:42 2022 GMT
            Not After : Dec 19 15:09:42 2023 GMT
        Subject: CN=5A2E413F3D30E5BBE29DEB224F9E0726F9E2E29B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:12:ad:71:85:40:f9:1f:fc:44:57:fe:93:97:
                    eb:ab:57:d8:2b:78:27:da:37:39:1b:22:d4:91:f4:
                    66:b9:65:80:c3:c6:16:ef:b3:a3:7e:c4:81:02:80:
                    2c:4e:cf:6c:27:f4:aa:80:5d:69:5f:cf:94:6d:75:
                    88:0a:a9:4a:97:d4:1c:14:fa:4d:fb:9c:c1:83:44:
                    b9:7f:88:72:49:06:86:9e:82:a8:da:c8:6f:c6:ca:
                    71:39:21:6e:ee:10:bb:c1:55:af:f6:a0:3a:e1:5b:
                    3a:9b:c5:26:c6:84:12:6a:1d:58:3b:0c:58:5f:ce:
                    50:85:7f:2f:c1:e6:4f:38:77:63:58:1b:5f:14:b2:
                    10:ce:1b:93:e9:6b:a9:ac:fa:1c:48:15:b8:f7:d0:
                    f2:c0:e3:ea:ff:77:a1:e1:26:42:1d:ac:73:ef:b4:
                    bd:c3:30:a6:fc:1d:8e:eb:e6:a2:5d:49:0c:91:f2:
                    fe:ee:94:33:af:f8:7b:9e:23:14:4d:fa:6c:f6:67:
                    5a:61:10:9e:cf:17:8b:ae:7f:31:f2:31:f1:49:2f:
                    8c:a5:01:02:93:94:3e:78:ce:47:69:64:01:aa:06:
                    c1:54:f2:b7:f7:7e:09:63:e9:94:20:c6:1b:e1:62:
                    9e:10:2d:7b:24:16:fa:58:a3:03:27:ff:2a:57:bd:
                    e3:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:2E:41:3F:3D:30:E5:BB:E2:9D:EB:22:4F:9E:07:26:F9:E2:E2:9B
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3830303a3a2f34302d3430203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:800::/40

    Signature Algorithm: sha256WithRSAEncryption
         2e:95:48:92:7b:63:5b:29:d2:d8:c0:d5:9f:28:c7:03:3a:09:
         fe:c8:7d:ef:30:dd:b8:76:f3:7e:9c:79:e9:2a:ff:5d:63:04:
         c8:54:ae:a1:75:f3:60:a4:dc:61:76:1e:fc:5f:b8:aa:d3:8c:
         92:d3:33:bc:dc:b8:f0:28:57:63:1e:e4:b9:4d:1b:f0:0b:a7:
         0c:4e:98:83:8b:d7:62:e8:9d:7d:2c:f4:01:84:61:fa:c0:d1:
         a5:58:a5:59:e4:5f:02:ce:e8:47:86:51:7a:79:0d:a1:09:19:
         d3:98:f7:76:7d:5c:f5:1b:c8:51:97:f6:65:aa:b0:ff:1d:1f:
         7d:26:05:4c:fe:6f:1d:d5:28:bf:33:61:0e:dd:84:01:07:3d:
         fa:08:3b:9c:9c:00:18:67:44:7d:80:51:b6:7c:43:8a:d2:1c:
         4a:cf:ce:ea:f2:71:1b:67:85:fb:54:bc:d0:5a:7d:44:87:db:
         2e:ef:45:d5:4b:da:69:d1:54:35:79:56:1e:0a:84:b1:25:1c:
         95:ef:ae:df:ba:ac:b2:dd:d9:4a:cf:dd:8a:83:f9:03:d6:85:
         4d:2c:49:3c:f1:d2:29:1b:74:56:c8:4b:94:30:79:55:69:22:
         6e:f9:f3:4d:17:ba:e7:73:2d:9e:af:26:16:b1:4b:ab:63:eb:
         56:86:81:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org