Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a386430303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a386430303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          FK7zYAh+9AOMGuze1i8nYX8SEIdmU72EBdxSq4TNbnY=
Subject key identifier:   FD:8C:35:74:45:D8:27:FE:8B:A5:44:A4:ED:5B:D8:F1:A4:1A:EA:F9
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       5277661C3297421992A460144A1EC6E07E6D91E8
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a386430303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:40 +0000
ROA not before:           Sat 24 Sep 2022 00:41:40 +0000
ROA not after:            Sat 23 Sep 2023 00:46:40 +0000
asID:                     264242
IP address blocks:        2804:24cc:8d00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:77:66:1c:32:97:42:19:92:a4:60:14:4a:1e:c6:e0:7e:6d:91:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:40 2022 GMT
            Not After : Sep 23 00:46:40 2023 GMT
        Subject: CN=FD8C357445D827FE8BA544A4ED5BD8F1A41AEAF9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:52:ad:d8:b4:73:d6:3b:8a:01:5a:5f:63:c7:
                    27:e8:d1:80:af:f6:50:a6:04:18:52:51:53:9a:8d:
                    75:db:0a:83:b6:b5:15:79:cf:48:64:0c:d2:d0:21:
                    1a:d4:59:99:09:5d:6f:d5:a8:e0:fc:29:a6:02:7c:
                    eb:53:46:48:fd:82:3f:ad:a7:97:31:43:d2:3f:89:
                    71:a1:0b:66:1a:5d:5c:9b:38:1c:e1:6c:df:7e:94:
                    19:36:9f:2c:5d:e8:01:1c:19:51:b3:9a:f0:31:29:
                    89:e7:78:72:59:ad:43:75:b2:8e:ad:1e:3d:99:57:
                    fa:f5:5b:24:d7:fd:38:e4:dc:ce:59:d9:88:2b:37:
                    cd:cd:da:bc:9a:55:b4:19:81:5f:4d:0d:5c:79:38:
                    fd:5a:30:73:06:d1:cb:9c:ae:dc:f6:49:66:d2:36:
                    95:9d:36:0b:5e:ea:34:d1:c7:63:c5:6a:13:b9:e7:
                    5a:3e:b0:df:b3:0e:79:23:d8:0e:59:18:bb:3e:b4:
                    c5:7f:fc:e0:2f:3c:d1:24:29:6c:e2:77:81:65:53:
                    07:38:52:2f:6c:3d:46:c9:de:b0:bb:68:80:5b:72:
                    0b:fc:47:a2:10:5c:a8:c6:18:1b:c0:63:01:40:f4:
                    80:da:13:8c:53:b9:25:b2:f1:38:1e:10:13:0f:82:
                    2c:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FD:8C:35:74:45:D8:27:FE:8B:A5:44:A4:ED:5B:D8:F1:A4:1A:EA:F9
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a386430303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:8d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a0:77:2a:cf:c7:62:0e:b5:bc:cb:a0:e7:95:93:b0:61:4c:61:
         8c:42:0a:47:72:4e:95:63:14:3e:62:04:02:a2:73:b1:83:65:
         38:6c:ed:61:de:16:3d:1d:c2:2d:6d:4f:a3:da:fa:be:46:7b:
         12:82:c9:b0:30:ca:4e:38:72:b9:80:84:c8:37:24:3f:56:b0:
         76:92:83:52:ae:f6:9a:7c:f7:88:1a:5d:7a:23:79:92:57:2f:
         d4:7c:ac:63:94:92:68:ac:4d:3f:58:67:0f:90:6f:89:b9:32:
         09:fb:5e:ed:6d:cc:6c:03:ba:94:84:80:b3:72:86:db:e2:87:
         88:b1:68:39:63:b7:64:e8:eb:e9:e0:c8:21:07:24:84:26:bd:
         34:fd:bd:db:02:d7:75:0a:8e:d6:89:65:63:ba:78:96:f6:3b:
         3a:cc:50:07:2b:41:bc:51:ea:03:c5:c5:19:a0:59:b1:d3:4b:
         4c:d2:5a:7c:56:95:6d:6f:6a:d0:15:7a:f7:51:6c:7e:86:3e:
         70:7a:e3:f3:57:e6:de:e5:64:07:5b:12:03:ec:28:95:a7:21:
         0c:fd:1a:cd:94:e7:5b:d7:f1:0d:7c:ce:36:e8:12:07:6c:3e:
         6e:e5:a1:ef:18:3f:91:23:f8:85:3c:a4:d4:53:53:9f:e5:6d:
         02:91:d0:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org