Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a65303a3a2f34342d3434203d3e20323632343638.roa
File:                     323830343a6539343a65303a3a2f34342d3434203d3e20323632343638.roa (raw, json)
Hash identifier:          manmtREnYxWd69I1jgaNG46cI7NWsBFYb8M33MWfz/8=
Subject key identifier:   39:86:C5:3B:61:23:44:FD:FC:CA:7F:43:2A:2A:1E:3D:AD:9D:CB:A0
Certificate issuer:       /CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
Certificate serial:       69DEF7BFDDB76C86F0619B2E81D993F1E04D684B
Authority key identifier: 1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a65303a3a2f34342d3434203d3e20323632343638.roa
Signing time:             Tue 20 Dec 2022 15:09:47 +0000
ROA not before:           Tue 20 Dec 2022 15:04:47 +0000
ROA not after:            Tue 19 Dec 2023 15:09:47 +0000
asID:                     262468
IP address blocks:        2804:e94:e0::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            69:de:f7:bf:dd:b7:6c:86:f0:61:9b:2e:81:d9:93:f1:e0:4d:68:4b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1ED1CDC405B528554B24D67EFB17A7D20DA68333
        Validity
            Not Before: Dec 20 15:04:47 2022 GMT
            Not After : Dec 19 15:09:47 2023 GMT
        Subject: CN=3986C53B612344FDFCCA7F432A2A1E3DAD9DCBA0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:22:4b:07:f8:84:8c:11:d9:c4:f8:43:f8:8f:
                    fe:b9:8f:6a:f0:00:2e:52:f2:70:13:c1:fb:44:ff:
                    97:00:fb:1e:eb:d4:a2:14:d3:44:5f:ed:4f:96:05:
                    b4:aa:d2:5f:0e:bd:8e:55:1b:5a:a8:64:7f:c2:2a:
                    de:00:89:ea:5e:9a:d4:47:49:61:d4:f9:a9:4d:86:
                    2c:f4:fa:07:b3:7c:b0:01:17:91:09:9f:64:32:08:
                    28:60:dc:8a:e6:6c:76:c9:e1:36:83:57:e6:3c:08:
                    ba:90:12:da:20:ac:e5:45:0d:27:f4:55:2b:47:2d:
                    38:b5:6c:69:f5:09:aa:76:86:a5:b8:38:93:8f:b5:
                    1f:92:77:42:ec:20:63:e3:31:94:4d:f7:97:c6:3a:
                    cb:a3:d2:71:3b:e6:71:1b:a1:53:49:07:2a:08:ff:
                    26:61:e8:90:ac:57:bd:a5:b5:ab:57:f0:3f:10:1d:
                    d9:78:9a:57:1f:bb:88:e8:8e:f6:b0:fb:73:a5:68:
                    f5:7c:0f:69:b2:63:66:bf:56:c2:ae:2d:87:87:c1:
                    3e:15:a7:d2:b5:97:4b:76:77:10:90:64:46:3a:88:
                    e2:06:9b:d0:ab:49:a0:17:9c:e1:34:0c:26:07:ad:
                    9e:84:73:d9:03:88:0d:8f:d6:1f:4d:d9:a0:f9:01:
                    04:79
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                39:86:C5:3B:61:23:44:FD:FC:CA:7F:43:2A:2A:1E:3D:AD:9D:CB:A0
            X509v3 Authority Key Identifier:
                keyid:1E:D1:CD:C4:05:B5:28:55:4B:24:D6:7E:FB:17:A7:D2:0D:A6:83:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1ED1CDC405B528554B24D67EFB17A7D20DA68333.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/G8rtHtpSgcYcJcecWM6C84ZfkHwN14sFvsU7b3Qi3FiW/0/323830343a6539343a65303a3a2f34342d3434203d3e20323632343638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e94:e0::/44

    Signature Algorithm: sha256WithRSAEncryption
         48:a9:80:45:22:f5:e9:db:54:6b:c0:1c:fd:ce:b0:ec:b3:4d:
         b0:0f:0f:52:76:f9:26:ae:48:6b:bf:e6:f0:bd:29:e4:9b:11:
         29:55:42:89:48:ad:a7:b6:b0:1b:16:a6:a5:4b:45:75:cf:7f:
         f7:53:d5:e9:6d:da:b1:d6:1c:af:a3:a9:de:1c:43:b6:96:d2:
         f3:fb:43:f0:e1:53:7b:86:2d:b5:1c:60:d5:08:c4:93:f3:2e:
         0e:11:cd:ec:34:9a:78:95:ac:a7:1c:f7:b7:b3:c2:4e:3a:77:
         a6:68:8b:fc:72:87:e0:3a:5d:e6:26:dd:18:6a:49:61:b6:86:
         98:d8:41:79:be:f9:e4:c8:5e:1f:f2:ce:79:d3:bb:46:81:65:
         16:d3:81:ad:b7:da:0f:3c:b9:01:4b:9c:68:02:68:1f:de:30:
         50:91:21:26:31:01:fc:75:62:c4:3f:2f:a6:28:fd:7f:9c:a1:
         e2:f8:08:12:c2:b5:8c:65:88:48:8c:07:9d:fb:ad:81:44:b2:
         3b:d2:64:ce:f8:52:40:85:04:c8:ff:6d:5d:76:0d:b7:6b:76:
         3b:55:9e:a6:f9:30:81:93:d4:77:37:0e:e8:78:1e:33:29:e7:
         86:63:9c:9f:28:a7:10:52:b3:cd:d4:72:91:f0:cc:70:12:22:
         c8:1d:28:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org