Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a393230303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a393230303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          JnKolzf9eB04/XyaUim6Dv3MCPixWR2g8G6EFWGz2Bs=
Subject key identifier:   1B:0D:A7:A0:C5:8F:42:5D:96:FF:94:47:9C:F5:50:1C:BE:5C:80:56
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       2DD4C9EB3C6357D5DF78F3F31B0025267D17FD02
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a393230303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:39 +0000
ROA not before:           Sat 24 Sep 2022 00:41:39 +0000
ROA not after:            Sat 23 Sep 2023 00:46:39 +0000
asID:                     264242
IP address blocks:        2804:24cc:9200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:d4:c9:eb:3c:63:57:d5:df:78:f3:f3:1b:00:25:26:7d:17:fd:02
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:39 2022 GMT
            Not After : Sep 23 00:46:39 2023 GMT
        Subject: CN=1B0DA7A0C58F425D96FF94479CF5501CBE5C8056
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:43:a9:fd:62:31:46:2f:bf:e1:5e:c8:36:e0:
                    18:8f:8b:da:44:ab:7c:8e:fa:63:a9:37:8d:b2:70:
                    84:c1:6e:7f:1c:52:85:1d:d3:f0:bf:0c:b5:3f:77:
                    83:ac:5e:a0:25:f5:a7:29:b5:d4:d8:11:86:cd:12:
                    e2:f8:c0:d2:44:e7:01:77:df:d1:71:b4:f5:9d:4a:
                    71:0c:f9:cc:9f:e4:34:0f:bb:7b:73:c1:e4:38:5a:
                    92:a3:b6:25:ca:cf:71:e0:d0:e4:4b:9b:cb:92:f1:
                    81:ed:8a:12:98:a2:8c:67:3c:46:ca:61:f9:bb:fa:
                    53:ed:92:0c:7d:44:5e:4f:8d:bf:d9:cf:58:77:da:
                    3d:b5:4f:62:9b:5d:a7:a0:f6:e6:96:77:ce:27:a1:
                    64:1e:f4:3f:f0:11:fc:81:6a:92:64:a8:6a:64:1e:
                    d1:b7:12:5f:7c:3a:6d:8f:06:f7:a6:a4:91:b8:58:
                    8e:2f:ed:29:00:97:c7:31:89:d7:1f:d5:ae:6f:12:
                    17:b4:f4:ac:08:f1:9c:9f:57:e1:7e:1f:c8:b9:48:
                    7f:94:2c:84:5e:59:9c:ad:ff:7b:a9:12:9a:a2:ca:
                    0a:b0:41:29:53:85:5c:80:cb:fc:6c:3d:cd:ca:4b:
                    e6:e8:ad:36:eb:af:26:f7:47:f5:5f:83:5e:d0:c4:
                    24:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:0D:A7:A0:C5:8F:42:5D:96:FF:94:47:9C:F5:50:1C:BE:5C:80:56
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a393230303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:9200::/40

    Signature Algorithm: sha256WithRSAEncryption
         32:27:d4:ca:25:2f:04:bd:d6:28:cf:a5:d4:bd:74:56:ce:fb:
         27:09:c7:b0:89:27:c8:71:cb:a2:b1:74:5d:dd:b6:82:1f:ab:
         34:25:4c:3a:51:b4:0d:be:47:22:dd:c6:6e:82:a7:e3:0b:37:
         8d:b0:f1:56:c0:53:7b:2b:93:a0:e3:e3:0a:46:00:b0:1d:a8:
         58:b4:ff:bd:39:f9:2f:62:89:91:17:67:0e:5c:78:2f:9d:5f:
         78:db:73:8e:90:61:58:86:8a:e5:ad:9b:29:41:87:75:bc:f1:
         8e:13:fd:3e:98:fc:f7:5a:8c:0b:90:85:8c:c8:96:01:6e:eb:
         44:73:b2:8f:8d:80:53:c7:cb:b6:94:39:6b:89:c5:59:7d:ae:
         1e:1c:ea:25:10:3d:2d:f1:fd:71:ff:36:39:b7:72:0c:32:b5:
         0b:33:6d:86:47:24:b1:e7:c5:a8:81:00:6a:af:8f:cd:a2:b7:
         f7:9d:74:15:0f:cf:3a:0d:80:70:72:b9:80:a1:f7:5d:26:1c:
         75:f4:a3:94:be:97:53:51:18:dd:02:4f:c2:71:e6:c3:ba:a2:
         61:d7:bb:33:a1:ec:34:d9:89:92:cc:e0:21:a1:b2:6d:ff:02:
         19:31:b2:58:b1:05:16:7f:c6:39:a8:27:f0:f0:61:09:d0:d5:
         1e:3a:54:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org