Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/323830343a346539303a3a2f33322d3332203d3e20323638323639.roa
File:                     323830343a346539303a3a2f33322d3332203d3e20323638323639.roa (raw, json)
Hash identifier:          1COxx1WHQNlmOrsXAyThtC/CSmB8eWgir2wquz24Wro=
Subject key identifier:   4D:34:9A:F9:CD:39:FF:66:53:BA:7F:00:35:4D:E9:96:59:CF:B3:C1
Certificate issuer:       /CN=C5AD5C7C55718BD3536091127969815277D3DE7F
Certificate serial:       183812886228E565665E0D5FED0BE6A85B77B5E9
Authority key identifier: C5:AD:5C:7C:55:71:8B:D3:53:60:91:12:79:69:81:52:77:D3:DE:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5AD5C7C55718BD3536091127969815277D3DE7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/323830343a346539303a3a2f33322d3332203d3e20323638323639.roa
Signing time:             Mon 15 May 2023 20:52:00 +0000
ROA not before:           Mon 15 May 2023 20:47:00 +0000
ROA not after:            Mon 13 May 2024 20:52:00 +0000
asID:                     268269
IP address blocks:        2804:4e90::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:38:12:88:62:28:e5:65:66:5e:0d:5f:ed:0b:e6:a8:5b:77:b5:e9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C5AD5C7C55718BD3536091127969815277D3DE7F
        Validity
            Not Before: May 15 20:47:00 2023 GMT
            Not After : May 13 20:52:00 2024 GMT
        Subject: CN=4D349AF9CD39FF6653BA7F00354DE99659CFB3C1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:7e:a8:3c:f6:bf:6f:d7:6c:ff:c4:87:8b:4c:
                    08:62:af:2d:51:6c:5f:85:18:6b:a6:3d:d7:af:c2:
                    ce:ec:8e:6d:42:da:3b:ba:86:72:4d:78:f4:d3:87:
                    cd:fc:9f:ee:a5:ea:f5:aa:48:7e:b4:62:89:70:4b:
                    9e:74:5b:19:99:ec:fe:0b:21:20:1a:79:d4:5d:c1:
                    d3:27:8e:a8:32:1d:1c:4d:d9:32:c6:69:a3:08:97:
                    53:dd:24:f5:4e:88:aa:c7:ed:78:4a:fd:fe:1a:b7:
                    36:85:09:52:a9:bb:db:3d:af:7f:14:82:37:0a:cd:
                    b0:6a:bd:0d:19:53:72:10:97:ae:e4:28:e0:85:80:
                    8f:7e:11:5d:18:c6:1d:ce:12:65:82:d3:a9:f5:dc:
                    f1:1a:44:95:01:a3:da:44:31:1f:1c:7b:1e:9e:ae:
                    b9:f6:05:ae:92:ea:03:66:e5:d0:cf:a8:66:20:7b:
                    cd:0c:f5:af:a1:fb:9c:21:16:97:44:34:20:32:4e:
                    d1:a5:60:83:ed:52:f0:d1:12:f9:3b:49:e0:11:7a:
                    f8:42:7c:71:3e:52:ce:8c:32:a1:b3:67:fa:1c:6c:
                    03:6b:8d:46:06:e7:e9:1d:46:49:41:e7:e8:73:08:
                    5a:8a:32:20:4f:c9:2b:a2:17:6d:78:77:9f:b2:34:
                    83:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:34:9A:F9:CD:39:FF:66:53:BA:7F:00:35:4D:E9:96:59:CF:B3:C1
            X509v3 Authority Key Identifier:
                keyid:C5:AD:5C:7C:55:71:8B:D3:53:60:91:12:79:69:81:52:77:D3:DE:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/C5AD5C7C55718BD3536091127969815277D3DE7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C5AD5C7C55718BD3536091127969815277D3DE7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/McfkSSyHbA25VGDSexiWCPmLwZwXEdNLYYC7jU7DK9B/0/323830343a346539303a3a2f33322d3332203d3e20323638323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4e90::/32

    Signature Algorithm: sha256WithRSAEncryption
         22:8c:dd:d8:03:41:b5:a6:3d:85:6b:3e:52:7f:4c:ed:e2:c6:
         dc:17:54:d0:5b:9c:8b:28:a3:cf:97:17:a3:39:d5:51:4c:27:
         cb:a6:83:b9:78:75:fe:97:c8:b5:6b:d7:4a:50:54:88:9c:5d:
         3d:ba:60:4a:f5:df:b3:95:4b:61:86:73:90:88:39:4e:44:c7:
         30:ea:e1:dc:53:5c:3c:41:fc:f4:f4:b2:ac:5c:e1:e1:72:f6:
         b4:3a:f6:9f:62:5c:a2:a1:1a:be:a3:1b:13:b1:47:88:f4:a8:
         58:ac:b5:5a:4b:41:d1:ab:99:87:6d:b9:f3:1d:05:9c:8f:38:
         bd:58:bc:d4:7f:a2:b4:c4:b3:88:31:3c:c2:72:02:fc:f8:73:
         38:5a:ae:87:33:e7:54:dd:b8:42:71:9f:a6:07:87:5c:19:ea:
         93:2d:e4:53:f1:c9:c6:5f:b8:ea:26:15:b9:26:db:9d:29:10:
         7b:af:37:14:a0:e2:6f:22:5a:9c:c6:58:0a:7a:2c:c0:6d:48:
         f7:b0:1c:57:48:2b:1e:0c:a4:36:25:c4:7a:95:d5:95:99:d8:
         44:a7:d6:a6:cc:4c:39:31:13:5c:e3:4a:5d:f6:b9:e6:c4:7d:
         de:fd:85:c1:28:60:ff:57:51:19:28:bf:22:b0:06:78:37:63:
         79:f4:69:6b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org