Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a343030303a3a2f33342d3334203d3e203238313235.roa
File:                     323830343a313438383a343030303a3a2f33342d3334203d3e203238313235.roa (raw, json)
Hash identifier:          er0tTKI7b4pWGMA0VGVQphBfzKGOkZsNO6Tqy2ERaj8=
Subject key identifier:   0F:39:BD:08:9E:30:5D:6C:25:0D:61:F5:F9:AD:DA:F1:03:42:CF:6F
Certificate issuer:       /CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
Certificate serial:       38DB6F6D5F3AA9EA1DF56E25E1875D4358F107B2
Authority key identifier: 51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a343030303a3a2f33342d3334203d3e203238313235.roa
Signing time:             Fri 09 Sep 2022 12:45:56 +0000
ROA not before:           Fri 09 Sep 2022 12:40:56 +0000
ROA not after:            Fri 08 Sep 2023 12:45:56 +0000
asID:                     28125
IP address blocks:        2804:1488:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:db:6f:6d:5f:3a:a9:ea:1d:f5:6e:25:e1:87:5d:43:58:f1:07:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51A0F33A02D240E9A5E660001C9E5741DC12ACCB
        Validity
            Not Before: Sep  9 12:40:56 2022 GMT
            Not After : Sep  8 12:45:56 2023 GMT
        Subject: CN=0F39BD089E305D6C250D61F5F9ADDAF10342CF6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:18:82:cc:d3:97:cb:db:5c:65:ed:9c:6c:ef:
                    7a:0e:49:23:50:44:f4:78:f4:c5:ad:05:b7:a0:a2:
                    50:04:99:32:1f:0f:c4:7a:e4:4a:1f:06:8d:40:17:
                    37:fc:00:b2:a8:f8:15:e8:52:f9:a1:70:a8:f6:48:
                    af:1a:94:36:f8:e5:36:a0:09:27:e3:ec:2d:40:49:
                    1e:8a:ad:43:9f:ae:75:bf:1a:c3:7d:51:8f:5f:53:
                    67:20:4e:94:0f:23:85:a2:9e:d5:55:9d:5d:4a:0d:
                    75:f8:39:e2:8e:5e:81:46:10:ca:94:db:bf:1f:45:
                    f4:f2:f6:fb:9e:e9:6b:99:0e:75:4e:94:80:98:d9:
                    a4:1f:4b:33:82:c0:13:19:88:94:24:2e:5e:bf:90:
                    7f:50:b7:fa:62:de:8b:69:11:38:1c:ff:0a:00:57:
                    d2:d4:7d:de:7a:b3:86:e1:7d:20:57:79:f7:c1:b2:
                    9d:f3:7f:7f:57:b0:6e:22:a9:74:ac:fe:eb:a5:2f:
                    d2:b0:c1:de:dd:3f:38:0c:68:29:ad:00:d1:86:b8:
                    cc:cf:30:14:19:b0:c9:05:46:cd:83:64:a7:ab:07:
                    f5:03:ce:73:39:09:03:50:f3:fa:fd:d6:3a:89:5c:
                    ff:46:66:9a:59:db:41:fd:d4:5b:67:e3:64:1c:73:
                    c3:f1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:39:BD:08:9E:30:5D:6C:25:0D:61:F5:F9:AD:DA:F1:03:42:CF:6F
            X509v3 Authority Key Identifier:
                keyid:51:A0:F3:3A:02:D2:40:E9:A5:E6:60:00:1C:9E:57:41:DC:12:AC:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51A0F33A02D240E9A5E660001C9E5741DC12ACCB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/JBXx1mZbRgwDq1wB99JBcFdsYRY8aJ6aLKXx2Wq6tehN/0/323830343a313438383a343030303a3a2f33342d3334203d3e203238313235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1488:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         96:71:e0:c7:d9:ea:8b:1a:a9:c1:a3:86:7c:89:0e:1e:43:f2:
         ff:d8:0b:8a:ef:25:38:17:97:38:d2:a5:78:99:48:cf:f7:c6:
         89:fe:58:24:e2:98:cb:38:9e:03:0b:d8:c7:51:99:9c:7b:ee:
         df:ee:b5:e5:08:5f:84:93:2a:cb:13:07:19:48:ec:d6:33:bf:
         d3:fb:15:e7:23:bc:c9:04:c4:50:c4:c5:42:43:dd:fd:5c:1c:
         33:2a:c0:41:5b:65:b6:81:12:9c:4b:da:ca:f7:2a:c6:30:ae:
         8d:b1:0f:ea:71:a0:db:51:16:db:54:f8:27:46:fe:b9:17:2f:
         f6:f1:66:cd:cf:79:fe:c5:45:2a:6a:a4:a1:c8:bd:f6:ad:73:
         ec:8e:d7:bd:8c:28:01:8c:94:cc:cc:79:ea:d3:bd:af:90:07:
         31:5c:71:5c:31:e8:d3:d3:d6:ad:c3:68:e4:be:cc:4e:fa:63:
         90:67:67:23:9e:1f:a0:b6:4b:c2:56:52:4c:a9:f7:bf:c8:bf:
         c8:75:9e:66:bc:c6:ca:5c:3e:b9:94:97:80:69:2c:87:ed:58:
         c4:70:e0:0e:a9:b1:de:48:09:4a:d0:6c:bd:f5:f8:82:c0:95:
         d5:77:70:76:07:cd:f4:23:a8:a9:a2:76:ba:38:74:d5:1d:44:
         0f:52:c3:c2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org