Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3930303a3a2f34302d3430203d3e20323632343638.roa
File:                     323830343a6539343a3930303a3a2f34302d3430203d3e20323632343638.roa (raw, json)
Hash identifier:          oTh3FYOrI3ZaN25XLOFMl793hQLm1KnqSV90i0ndfs4=
Subject key identifier:   D6:CE:B5:8D:CD:19:C5:26:37:C2:B5:70:39:B9:08:3C:D3:0F:B9:35
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       615DFA105BD1B745E13AFFAFF47116F3273C502C
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3930303a3a2f34302d3430203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:51 +0000
ROA not before:           Tue 20 Dec 2022 15:04:51 +0000
ROA not after:            Tue 19 Dec 2023 15:09:51 +0000
asID:                     262468
IP address blocks:        2804:e94:900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:5d:fa:10:5b:d1:b7:45:e1:3a:ff:af:f4:71:16:f3:27:3c:50:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:51 2022 GMT
            Not After : Dec 19 15:09:51 2023 GMT
        Subject: CN=D6CEB58DCD19C52637C2B57039B9083CD30FB935
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:5e:e4:90:38:4a:d1:87:3b:25:10:08:40:82:
                    ae:a5:25:da:10:20:d7:b2:9d:e5:a9:71:ff:85:87:
                    07:74:e5:af:2c:0b:f5:2c:0b:3c:e0:29:41:50:94:
                    68:7b:95:e9:34:6b:18:29:8f:b2:ab:fa:4d:8f:28:
                    da:02:19:ba:ae:88:30:f6:59:70:a2:4d:56:a1:24:
                    24:7c:a7:c6:fe:f7:36:ff:37:6a:ce:91:16:11:27:
                    ed:83:a6:6d:17:b9:f7:27:ea:e5:95:fd:c7:ab:de:
                    d0:c9:1d:e3:97:0b:d6:2e:d0:16:28:0e:33:53:38:
                    30:7b:10:95:41:22:b4:c8:0b:67:4f:c6:69:1d:0f:
                    47:a7:66:e3:54:34:dd:4e:8a:3c:88:ca:7e:03:cd:
                    24:15:d9:1e:0e:a0:34:cf:50:b0:bc:90:75:72:ab:
                    ef:8e:96:94:cd:e8:91:04:10:be:5f:62:1b:2c:3a:
                    08:10:ab:67:b1:57:90:35:04:7b:08:97:40:58:e0:
                    54:4e:8f:7b:23:82:79:35:21:e9:5a:24:35:99:d9:
                    c4:bf:28:f9:c8:5a:89:ce:07:a1:06:d7:7f:9e:be:
                    36:5a:18:66:be:58:58:6f:db:bd:16:cf:48:1f:78:
                    f2:a8:cb:76:0a:6c:05:6d:67:2f:74:d8:95:12:f1:
                    5b:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:CE:B5:8D:CD:19:C5:26:37:C2:B5:70:39:B9:08:3C:D3:0F:B9:35
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a3930303a3a2f34302d3430203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:900::/40

    Signature Algorithm: sha256WithRSAEncryption
         6f:0d:08:73:a8:48:b6:e2:72:25:e7:e4:90:00:21:65:57:26:
         2d:33:eb:b2:7f:80:7e:a3:0a:b8:d3:d1:a7:62:58:ec:ea:c4:
         0c:0e:b4:0e:d7:d1:18:81:8e:fe:a2:10:cc:15:f4:f8:79:bc:
         23:42:d3:c2:71:47:a0:f5:d3:89:f5:db:c7:80:31:06:a9:d5:
         66:c4:b5:68:38:6e:75:59:ca:86:dc:ba:e9:82:b3:48:ef:cc:
         46:5f:1d:dc:ba:75:f8:e7:5a:f3:cd:64:4d:9b:0f:57:12:12:
         2e:ae:a0:4e:61:f0:9b:d1:03:9c:1c:5c:7a:c2:68:ed:f1:d2:
         16:dc:11:d2:7b:65:48:19:a0:8d:00:de:37:d1:94:a8:dc:94:
         03:04:73:27:13:d0:6a:ae:f1:50:6f:ad:32:90:ff:c2:14:29:
         62:e9:6e:14:ed:81:37:f2:51:57:6e:3b:c6:64:f1:00:a0:98:
         28:ab:bb:e3:61:82:4c:a3:cb:a3:b1:8c:4c:b9:48:2d:57:cf:
         70:46:7b:80:d1:f0:35:25:67:fe:a3:d5:82:d7:49:4f:6e:9e:
         5b:23:49:ab:1f:0e:3c:ac:75:03:8e:ac:8e:8c:1e:06:38:a4:
         ce:d9:fe:ba:94:a4:7a:40:7f:e3:2f:0a:2d:fb:5a:c4:7c:78:
         61:f8:ae:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:13 2024 by rpki-client on console-ams.rpki-client.org