Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3330303a3a2f34302d3430203d3e20323637353630.roa
File:                     323830343a343334383a3330303a3a2f34302d3430203d3e20323637353630.roa (raw, json)
Hash identifier:          2b28yOG5xrXRug7Tl08hDHRsE+7ZhKgdV5Rhb98Q3yg=
Subject key identifier:   C8:D4:78:2D:39:2C:E0:62:36:A3:8C:63:ED:2F:0D:8E:B0:E2:B9:5C
Certificate issuer:       /CN=A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2
Certificate serial:       4AFA500AB92C089B2129DE2BFAC33D5557FD9602
Authority key identifier: A2:65:B2:5A:F2:70:4F:A3:E9:5F:4E:D3:C6:6D:1D:F7:E3:12:DE:E2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3330303a3a2f34302d3430203d3e20323637353630.roa
Signing time:             Mon 14 Feb 2022 14:00:00 +0000
ROA not before:           Mon 14 Feb 2022 13:55:00 +0000
ROA not after:            Mon 13 Feb 2023 14:00:00 +0000
asID:                     267560
IP address blocks:        2804:4348:300::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:fa:50:0a:b9:2c:08:9b:21:29:de:2b:fa:c3:3d:55:57:fd:96:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2
        Validity
            Not Before: Feb 14 13:55:00 2022 GMT
            Not After : Feb 13 14:00:00 2023 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:da:80:9c:d1:8c:51:b3:e6:b1:b0:9b:82:94:
                    d7:0e:c5:bd:e8:eb:c4:13:ce:94:51:59:84:6e:4e:
                    04:34:29:4a:d2:6b:87:4b:1f:33:3c:b9:0c:c3:5b:
                    5e:7e:11:33:04:58:cc:0f:1c:c0:cd:78:ad:df:ca:
                    d0:e1:93:81:66:f0:f9:a0:3e:65:c7:1c:7b:f0:a5:
                    34:7a:9b:1e:51:f6:49:3d:4c:70:f1:db:68:83:1e:
                    26:57:18:59:05:c6:23:31:67:5a:cf:76:c5:26:7f:
                    c6:43:1d:10:ea:e2:c8:4f:2d:82:61:e9:4a:e3:7a:
                    d1:41:c3:e1:b8:3a:99:31:21:8f:5b:20:d0:ff:55:
                    d5:44:c4:43:b1:cb:53:60:a9:3c:a2:d9:71:c7:c1:
                    14:d6:73:70:f9:9b:3f:4e:9c:61:c4:be:49:b0:aa:
                    c8:0c:da:2e:c6:36:70:ef:38:58:07:39:bc:2d:1a:
                    49:51:81:42:10:2f:17:55:97:9a:3e:1d:99:4b:83:
                    08:06:e8:98:6d:48:5a:75:bd:09:82:d1:c8:55:0e:
                    6b:9f:7d:1a:0d:b3:66:dd:2e:0d:94:81:a8:d6:72:
                    67:5c:7a:23:5e:18:ca:78:9b:8e:4f:c3:b4:e7:f0:
                    5b:d4:2c:64:53:77:94:32:53:09:23:9c:b9:85:5e:
                    bb:31
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C8:D4:78:2D:39:2C:E0:62:36:A3:8C:63:ED:2F:0D:8E:B0:E2:B9:5C
            X509v3 Authority Key Identifier:
                keyid:A2:65:B2:5A:F2:70:4F:A3:E9:5F:4E:D3:C6:6D:1D:F7:E3:12:DE:E2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A265B25AF2704FA3E95F4ED3C66D1DF7E312DEE2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GeToCqGEVGDytxkniFLrijrdkJPodmL9gcBXfSEmw2u2/0/323830343a343334383a3330303a3a2f34302d3430203d3e20323637353630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4348:300::/40

    Signature Algorithm: sha256WithRSAEncryption
         26:2c:4e:83:e8:bd:ec:6c:45:46:03:ca:0c:02:54:97:1e:5f:
         d7:26:64:e8:fd:3f:26:ac:6f:a3:a7:d1:8e:e2:be:1b:3c:99:
         61:98:de:de:96:23:b9:0a:9d:2e:84:c1:69:0a:d8:e7:86:8e:
         8b:fe:48:0c:90:6d:0d:0c:1d:4c:ba:85:49:4c:50:90:88:92:
         24:57:fd:20:29:63:72:a8:ea:a9:b7:95:70:84:01:e7:b8:24:
         7e:f2:ba:86:07:60:d2:55:37:fc:b6:11:d1:5e:07:bc:1b:fa:
         18:93:e3:da:75:99:2b:25:e8:ed:41:15:6c:7f:c6:8e:e3:b3:
         2c:cb:61:fd:51:99:4c:ec:3b:da:6c:dd:be:d0:d9:93:1e:ad:
         f0:7b:5e:5c:60:2f:dd:b5:bf:f1:b5:15:3d:26:48:4c:60:b1:
         2e:b0:c7:45:f8:56:0f:11:d3:39:14:d6:e1:97:c9:73:7a:a1:
         10:11:cc:3d:b2:db:62:d1:89:b9:b7:e2:13:7d:ea:6c:8a:6f:
         0b:0a:ca:59:19:25:f1:28:5b:b1:bf:fc:45:71:76:4a:06:70:
         f4:0e:33:4f:08:c6:bd:1c:38:29:7a:c7:6a:e6:46:70:61:4e:
         bb:18:fb:a0:7e:88:8b:fc:94:78:c0:ba:4b:8a:ba:04:27:46:
         86:b9:97:b3
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org