Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a383030313a3a2f34382d3438203d3e20323634323432.roa
File:                     323830343a323463633a383030313a3a2f34382d3438203d3e20323634323432.roa (raw, json)
Hash identifier:          td+XciAd4Tr25CLLrnFkw62tzvVDq+YeVR59sofDP0w=
Subject key identifier:   C4:86:7C:33:62:7C:37:A1:1E:B0:64:0B:B4:AF:00:AF:BB:BD:47:D0
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       7EC0F4A7A3122975B11B8A208EF7C8D629A29827
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a383030313a3a2f34382d3438203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:37 +0000
ROA not before:           Sat 24 Sep 2022 00:41:37 +0000
ROA not after:            Sat 23 Sep 2023 00:46:37 +0000
asID:                     264242
IP address blocks:        2804:24cc:8001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c0:f4:a7:a3:12:29:75:b1:1b:8a:20:8e:f7:c8:d6:29:a2:98:27
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:37 2022 GMT
            Not After : Sep 23 00:46:37 2023 GMT
        Subject: CN=C4867C33627C37A11EB0640BB4AF00AFBBBD47D0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:8b:46:a4:fd:34:ec:3b:d5:85:8d:69:14:25:
                    2b:4a:1e:8b:cb:2b:e2:be:16:29:a4:d7:9a:e7:f4:
                    dc:68:ab:31:1a:34:fe:e9:75:1b:3c:7c:d1:e2:26:
                    cf:4b:d5:ae:0c:95:4b:45:25:7e:0f:7e:ac:91:01:
                    19:14:5b:bb:44:de:8e:6d:bb:1d:a2:9f:f7:52:b5:
                    c9:69:3f:0a:22:8b:09:cb:ab:4d:3b:4f:60:ea:ac:
                    80:c5:ae:b7:94:95:24:d1:11:f9:ad:a6:60:1d:8b:
                    8e:8d:5a:6b:ed:87:44:af:c4:58:17:58:c2:f4:e8:
                    5b:6e:6e:80:ec:46:bc:77:c0:c0:ae:d8:b8:e5:cf:
                    45:a0:5b:a3:0f:81:58:3a:a9:0d:eb:10:73:bf:c3:
                    a1:b4:4c:43:7d:a1:1c:c4:4a:19:93:6c:8e:15:95:
                    14:d6:2c:ac:6e:d8:2d:4b:6d:e3:98:3e:78:38:6f:
                    92:3d:20:6b:64:b7:1d:55:3c:4f:2f:a5:e3:2c:48:
                    e2:89:11:14:33:ce:8d:b5:15:ca:bd:a3:45:b3:e7:
                    87:cb:94:2c:05:34:7f:66:bc:46:cc:a3:24:06:1e:
                    56:2c:34:3a:0c:83:03:4b:8b:06:cc:73:99:7a:92:
                    50:09:23:86:da:59:55:af:89:93:ed:b1:a9:50:08:
                    51:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C4:86:7C:33:62:7C:37:A1:1E:B0:64:0B:B4:AF:00:AF:BB:BD:47:D0
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a383030313a3a2f34382d3438203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         43:7f:8d:9b:96:49:4f:c3:f1:3f:a6:8a:3c:ed:10:eb:e7:92:
         30:ab:e1:d1:b9:7d:3a:2f:91:d6:af:67:eb:7c:b4:f0:3c:99:
         f8:3f:44:dd:98:dc:1f:79:31:fa:06:32:6b:ae:43:cc:29:93:
         fd:38:cf:bd:db:0e:20:98:8d:35:1e:af:c9:e2:3f:d8:91:77:
         80:be:b5:08:58:c5:11:c5:1d:c1:6f:04:28:97:3f:03:af:d9:
         b8:a9:75:2d:3e:4b:ed:73:49:09:13:3f:57:97:b1:a1:ef:c4:
         77:e6:93:79:98:21:40:6a:b6:df:db:f5:3c:28:6b:ba:9b:72:
         fe:49:d5:67:cf:f7:ca:13:66:bf:f4:d7:62:0f:42:60:43:cc:
         58:e4:a5:92:d2:7d:06:3c:f1:2a:cb:19:f7:b4:e1:68:5c:f4:
         e8:e2:a7:13:c4:b7:14:af:8d:dd:84:58:de:69:8c:dd:22:03:
         dc:63:33:f3:dc:8f:ec:71:1a:86:b5:a8:2d:6c:21:1a:3b:e7:
         40:ed:38:a4:1f:ff:29:d9:2d:56:1b:8d:12:5c:bb:63:f7:15:
         62:d3:67:0d:75:47:d2:5b:ef:2f:d6:df:e0:32:8e:d7:31:5f:
         e0:24:ac:31:3e:a8:1d:28:59:bc:21:40:e9:f2:e2:c2:57:70:
         0e:04:25:00
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org