Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a393730303a3a2f34302d3430203d3e20323634323432.roa
File:                     323830343a323463633a393730303a3a2f34302d3430203d3e20323634323432.roa (raw, json)
Hash identifier:          3POqrGV+7BF4F8i1XAte3l+lzegGWnxTCi2VluX80JM=
Subject key identifier:   AD:27:99:93:47:3F:70:A9:59:45:FE:3F:FE:29:42:8D:07:DC:D3:02
Certificate issuer:       /CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
Certificate serial:       243A05DB27CD032B479044889788023CAF8B6236
Authority key identifier: 2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a393730303a3a2f34302d3430203d3e20323634323432.roa
Signing time:             Sat 24 Sep 2022 00:46:40 +0000
ROA not before:           Sat 24 Sep 2022 00:41:40 +0000
ROA not after:            Sat 23 Sep 2023 00:46:40 +0000
asID:                     264242
IP address blocks:        2804:24cc:9700::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:3a:05:db:27:cd:03:2b:47:90:44:88:97:88:02:3c:af:8b:62:36
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2DDC7033B45D9754706D162D7FB2C8BEE1A29387
        Validity
            Not Before: Sep 24 00:41:40 2022 GMT
            Not After : Sep 23 00:46:40 2023 GMT
        Subject: CN=AD279993473F70A95945FE3FFE29428D07DCD302
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:68:be:bb:b2:d5:69:cf:3d:20:5e:e1:2f:79:
                    40:03:06:0b:d5:10:aa:bf:da:cc:00:4a:db:0b:83:
                    d6:a4:64:9c:43:46:b8:81:3a:82:85:0f:ac:b9:05:
                    29:5f:06:6a:4f:12:0e:9b:45:b8:33:7c:19:36:c4:
                    c6:e5:e9:21:f8:ff:c3:b7:04:93:6c:93:7b:bc:2f:
                    31:8f:c2:28:6d:37:8b:32:78:17:4f:aa:be:b7:9b:
                    55:b4:17:d3:2e:6e:5e:db:7d:ac:96:e7:19:8f:c0:
                    e5:a4:7a:d8:36:9a:c4:d7:18:a4:1a:de:c0:06:9f:
                    dc:e5:10:6d:91:89:cd:1c:96:fd:96:f8:5e:86:69:
                    db:95:ad:db:7a:78:d5:62:12:24:5a:42:db:4d:1e:
                    c5:87:24:29:4b:e8:8d:7e:96:e9:96:cf:20:b6:0c:
                    93:2a:1b:7a:d1:27:47:05:c5:7c:05:5e:4b:c1:1a:
                    d7:e7:6e:a5:1d:f4:88:ac:ab:16:07:8a:88:44:89:
                    f1:a5:92:db:a0:4e:2b:e1:65:27:42:da:1b:db:91:
                    ad:38:15:f3:5c:68:5c:a3:d0:b6:f3:1c:fc:b9:b4:
                    c6:9b:a4:53:79:27:8a:a6:db:8f:35:bd:d7:f9:4e:
                    19:6b:dc:43:9e:61:5b:5b:bd:f1:aa:20:44:34:e9:
                    52:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:27:99:93:47:3F:70:A9:59:45:FE:3F:FE:29:42:8D:07:DC:D3:02
            X509v3 Authority Key Identifier:
                keyid:2D:DC:70:33:B4:5D:97:54:70:6D:16:2D:7F:B2:C8:BE:E1:A2:93:87

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2DDC7033B45D9754706D162D7FB2C8BEE1A29387.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Jo2J67XSEhvTKFMyZYs7mfMYLcbtN1ui6dU1FvEaY6z/1/323830343a323463633a393730303a3a2f34302d3430203d3e20323634323432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24cc:9700::/40

    Signature Algorithm: sha256WithRSAEncryption
         d0:57:d5:d2:70:b5:43:13:97:c5:26:47:99:63:72:d4:61:6b:
         3b:cf:59:48:bf:66:3b:f4:25:00:7d:e6:6b:b2:8c:0a:11:c4:
         9a:5d:f6:57:9b:0a:2a:a6:a3:4f:68:d1:b4:7e:aa:33:6d:14:
         2c:bd:92:85:b4:30:ed:2b:88:67:ff:74:94:45:b1:c1:9d:a8:
         17:09:5c:59:d5:20:0f:55:4e:43:ee:8f:27:6f:35:84:ec:fe:
         b2:80:2d:59:14:5c:21:dd:90:a6:39:c9:82:6b:63:8c:18:00:
         fd:df:5c:22:58:1e:34:17:89:50:66:a9:63:72:9b:3d:50:e0:
         5e:33:13:f5:c0:52:91:e8:88:9e:f7:5d:d5:93:90:37:75:3b:
         5e:0d:df:22:35:53:6a:52:61:e6:97:ca:e5:07:84:b3:67:0e:
         74:c4:75:41:49:5a:75:8c:95:19:fe:ef:5e:c0:26:7d:ac:3c:
         0d:87:82:6e:60:4d:e4:a1:c8:94:c5:2e:36:0d:01:b3:1f:73:
         57:26:b5:34:7f:1a:32:bc:d9:9a:3d:51:9e:63:32:c7:e2:15:
         08:3f:47:6e:65:4a:22:68:ab:84:13:e3:2f:fe:82:cb:e8:2e:
         16:d5:20:fd:0f:ff:30:ff:25:4a:13:11:3b:3a:d3:eb:da:01:
         9d:97:18:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:56 2024 by rpki-client on console-ams.rpki-client.org