Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a323030303a3a2f33352d3335203d3e20323638383736.roa
File:                     323830343a356265383a323030303a3a2f33352d3335203d3e20323638383736.roa (raw, json)
Hash identifier:          Vtd2HQ0GRxlr6tNI24VrixtoLXkjzRZMnzgQdrpsZ/M=
Subject key identifier:   EA:18:99:D9:3C:BC:65:E1:5B:8D:38:85:F5:1E:B6:0F:0B:E9:B8:48
Certificate issuer:       /CN=1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D
Certificate serial:       5152775C71AFA387BD2B459F0F56BB19D7A044E7
Authority key identifier: 1E:E4:0D:DF:B1:22:A5:49:8D:B8:0B:FF:1A:B6:F5:53:11:51:CE:5D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a323030303a3a2f33352d3335203d3e20323638383736.roa
Signing time:             Wed 01 Mar 2023 10:42:57 +0000
ROA not before:           Wed 01 Mar 2023 10:37:57 +0000
ROA not after:            Wed 28 Feb 2024 10:42:57 +0000
asID:                     268876
IP address blocks:        2804:5be8:2000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:52:77:5c:71:af:a3:87:bd:2b:45:9f:0f:56:bb:19:d7:a0:44:e7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D
        Validity
            Not Before: Mar  1 10:37:57 2023 GMT
            Not After : Feb 28 10:42:57 2024 GMT
        Subject: CN=EA1899D93CBC65E15B8D3885F51EB60F0BE9B848
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:90:8f:d5:d3:42:12:c0:49:49:1f:34:d2:40:
                    fd:e8:1c:ca:a8:3c:3d:68:b4:9f:37:c8:83:be:de:
                    60:27:80:1f:64:45:e9:bd:fd:21:b8:61:c3:d0:76:
                    f3:1d:c0:a1:06:aa:98:64:71:aa:3a:30:40:82:1e:
                    cc:63:77:c6:26:81:ce:f4:30:6c:27:ae:f4:da:9f:
                    a2:78:f7:c6:8d:08:fb:4d:c6:84:e2:51:09:ea:cf:
                    13:c3:2f:7c:99:29:08:8d:3c:e0:9b:0b:24:6e:09:
                    c7:c5:e8:21:26:58:17:82:f2:4a:db:63:50:6e:c4:
                    73:4a:7d:9f:64:78:69:cd:fb:a1:bb:70:94:61:03:
                    e3:88:cc:87:34:f1:40:45:a7:51:4f:22:5f:b4:2e:
                    2b:13:df:c6:87:cc:ab:45:6e:73:6a:8f:0f:8e:9b:
                    af:a8:23:e4:39:7d:ef:69:f7:c5:25:46:53:87:1d:
                    0e:57:8d:71:b4:7c:bd:62:a9:a6:fa:ef:74:ce:8e:
                    dd:95:b2:ed:aa:ab:1b:23:2f:d2:5e:a9:70:5f:80:
                    07:a6:c6:c3:16:d1:c6:37:a7:66:c0:76:63:8f:43:
                    66:94:ed:b8:4c:ed:a2:de:2d:ca:46:e2:bc:c8:26:
                    b5:29:5e:19:6b:e8:07:b8:c9:9b:b5:54:e7:dd:fa:
                    c0:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:18:99:D9:3C:BC:65:E1:5B:8D:38:85:F5:1E:B6:0F:0B:E9:B8:48
            X509v3 Authority Key Identifier:
                keyid:1E:E4:0D:DF:B1:22:A5:49:8D:B8:0B:FF:1A:B6:F5:53:11:51:CE:5D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1EE40DDFB122A5498DB80BFF1AB6F5531151CE5D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/H2HNNFVSSnCm46j82yAaUDAdDvi1yyBL5qrZpSGrrnEv/0/323830343a356265383a323030303a3a2f33352d3335203d3e20323638383736.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5be8:2000::/35

    Signature Algorithm: sha256WithRSAEncryption
         76:80:82:c7:f3:e5:e2:a7:90:92:7b:48:24:c9:c8:19:94:5e:
         e1:e3:20:e9:06:87:2e:db:33:be:c1:86:3d:20:41:43:cb:d7:
         a9:b8:0b:52:ac:52:b8:f4:87:4a:3e:72:a6:52:7c:f4:c5:b5:
         08:eb:d6:66:d5:ff:4b:e2:2f:5c:fa:b8:b9:2a:f6:1f:8d:76:
         e2:ca:be:41:2f:00:5f:d5:45:50:38:47:1f:8c:76:19:48:13:
         61:88:1a:39:08:9c:c1:04:f1:8e:e1:97:44:61:ea:50:fa:66:
         b6:45:30:7c:41:d3:91:0b:f5:7e:4b:86:2b:6d:e8:2d:9e:07:
         b5:e5:e7:5b:f1:d9:33:f1:27:c5:71:79:03:4b:a1:49:b7:94:
         be:92:e0:87:85:d2:0d:d1:96:ca:e4:05:fb:c7:20:49:a5:5b:
         40:f6:0e:99:ea:85:97:fd:7a:58:a4:b3:2a:98:59:aa:e4:e8:
         22:2a:b4:ed:2e:7e:a5:5d:b4:9a:e9:9e:40:8f:d2:b8:fd:7a:
         ca:f9:f7:7f:8d:94:95:e8:ab:7b:8b:01:c1:8d:85:76:95:dc:
         bf:84:06:98:c9:33:c0:14:14:4a:4d:6e:4a:69:b9:44:47:cd:
         08:14:16:07:a3:10:ec:bf:76:40:2f:69:6b:0b:0c:d4:cf:f4:
         c0:76:e1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:56 2024 by rpki-client on console-fra.rpki-client.org