Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3430303a3a2f34302d3430203d3e203631353733.roa
File:                     323830343a323565343a3430303a3a2f34302d3430203d3e203631353733.roa (raw, json)
Hash identifier:          OQj0sZuN+qPvRO8xze11swsBUzc0ThiBTjdBawDTLNs=
Subject key identifier:   A9:B5:BC:41:5E:86:CE:6C:FA:ED:25:26:07:08:C8:9C:67:6B:AD:47
Certificate issuer:       /CN=5167BF3D80B4F4D22270A25A2A9B8D9410DFE66B
Certificate serial:       251A800B47EAECE068129EAB7CF4CF5A35B632D8
Authority key identifier: 51:67:BF:3D:80:B4:F4:D2:22:70:A2:5A:2A:9B:8D:94:10:DF:E6:6B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5167BF3D80B4F4D22270A25A2A9B8D9410DFE66B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3430303a3a2f34302d3430203d3e203631353733.roa
Signing time:             Mon 18 Apr 2022 07:40:19 +0000
ROA not before:           Mon 18 Apr 2022 07:35:19 +0000
ROA not after:            Mon 17 Apr 2023 07:40:19 +0000
asID:                     61573
IP address blocks:        2804:25e4:400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1a:80:0b:47:ea:ec:e0:68:12:9e:ab:7c:f4:cf:5a:35:b6:32:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5167BF3D80B4F4D22270A25A2A9B8D9410DFE66B
        Validity
            Not Before: Apr 18 07:35:19 2022 GMT
            Not After : Apr 17 07:40:19 2023 GMT
        Subject: CN=A9B5BC415E86CE6CFAED25260708C89C676BAD47
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:e9:f2:d8:69:41:c8:0c:4c:ba:b3:30:8f:86:
                    8b:12:f0:45:46:fd:9d:5c:39:39:54:d8:fe:94:4f:
                    8d:01:28:76:20:8e:a7:8c:94:e9:21:97:6b:e3:8c:
                    4b:b3:dd:dd:b4:d2:77:8d:98:94:11:84:f3:79:a3:
                    b0:b6:68:44:34:72:cb:59:80:bf:66:2e:18:d4:43:
                    08:3f:2c:48:f5:46:e1:2c:ab:10:b9:21:b3:8e:5c:
                    00:b9:10:ef:93:5d:6a:cf:0a:61:bb:1a:b8:a8:2c:
                    88:4f:39:2a:8f:ce:69:d1:48:6e:4b:2b:41:80:9a:
                    48:71:da:c6:ed:91:c1:e0:be:9c:f3:61:f7:8d:49:
                    b6:85:3d:5f:65:e5:fd:b6:1f:c7:67:73:64:c8:ca:
                    80:42:a7:b7:24:4d:25:4e:c5:f3:10:91:e1:21:a1:
                    81:29:67:a4:01:7f:a7:d5:7e:b4:ca:c5:0c:94:5f:
                    22:13:3f:6b:c2:f2:f9:aa:17:2c:40:c0:62:6e:65:
                    99:2a:bc:6b:3b:57:96:66:d6:8a:d6:c2:ff:1c:a4:
                    47:0e:57:89:88:ed:80:f4:f3:d5:2c:a6:27:0d:e4:
                    40:a8:41:9f:d6:b6:64:9b:9d:c8:d0:ce:0f:bb:84:
                    5e:83:95:fe:cb:a0:eb:20:7c:4d:c1:10:e8:3e:85:
                    b0:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:B5:BC:41:5E:86:CE:6C:FA:ED:25:26:07:08:C8:9C:67:6B:AD:47
            X509v3 Authority Key Identifier:
                keyid:51:67:BF:3D:80:B4:F4:D2:22:70:A2:5A:2A:9B:8D:94:10:DF:E6:6B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/5167BF3D80B4F4D22270A25A2A9B8D9410DFE66B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5167BF3D80B4F4D22270A25A2A9B8D9410DFE66B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HwEKvtDJ6SBkvnVqGJiVji5uP46RLXTnhFsjx8Bs7eRt/0/323830343a323565343a3430303a3a2f34302d3430203d3e203631353733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25e4:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         90:47:36:2e:b2:65:be:0a:a0:9a:63:17:7d:ae:fd:26:e4:39:
         4f:8a:bb:44:a1:11:20:9e:84:23:0a:5f:15:58:3e:dc:30:3d:
         36:37:61:07:54:f6:fd:80:ff:98:af:01:52:5d:9f:11:12:45:
         2e:b9:f9:f3:f5:ea:bd:36:0b:99:a0:da:da:e8:83:4f:79:ea:
         d1:94:d6:e3:71:07:a2:d8:85:92:2c:af:09:3f:1a:f7:59:8f:
         fe:6b:95:41:a7:d3:f5:e7:0c:08:43:a3:67:da:aa:88:61:23:
         72:c4:3d:58:e1:3d:2e:44:09:ce:6b:d8:c0:52:5a:f7:eb:94:
         3c:0e:1e:7b:36:71:af:5f:c9:5c:d5:63:bd:be:02:50:8d:94:
         6b:16:ca:2f:5f:e9:1a:28:b3:97:b6:d2:37:1b:a0:3b:b3:49:
         1d:b2:2b:e4:6a:67:6b:3e:27:bd:a1:e9:db:a0:08:69:58:43:
         81:e5:5a:21:aa:03:77:9f:8a:a2:32:f2:bb:f5:ed:86:f6:8a:
         ca:60:88:7f:24:d6:b9:61:de:6a:7c:62:9c:38:54:0d:d7:54:
         d6:7a:53:0f:6a:bc:f2:07:4b:5a:88:96:20:19:41:c8:e9:41:
         31:b9:00:0d:81:0c:c1:08:57:e1:73:b0:4c:7f:89:d1:bf:9f:
         44:50:86:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:04 2024 by rpki-client on console-fra.rpki-client.org