Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a663030303a3a2f33362d3336203d3e20323632373635.roa
File:                     323830343a316466633a663030303a3a2f33362d3336203d3e20323632373635.roa (raw, json)
Hash identifier:          DuPsdR4NpgOie8PjOtE97FORK1qMP8d/L9CC2mYI154=
Subject key identifier:   48:B0:CA:3C:6A:48:FE:59:FA:56:4B:7B:BA:7E:67:66:3C:B7:E7:46
Certificate issuer:       /CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
Certificate serial:       5081904C69AC664B86E98EDAC5FEC3C70DEDFAFD
Authority key identifier: 5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a663030303a3a2f33362d3336203d3e20323632373635.roa
Signing time:             Tue 20 Jun 2023 13:53:18 +0000
ROA not before:           Tue 20 Jun 2023 13:48:18 +0000
ROA not after:            Tue 18 Jun 2024 13:53:18 +0000
asID:                     262765
IP address blocks:        2804:1dfc:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:81:90:4c:69:ac:66:4b:86:e9:8e:da:c5:fe:c3:c7:0d:ed:fa:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5CE1A38052225798A7C5A259269033FC6D8B53A4
        Validity
            Not Before: Jun 20 13:48:18 2023 GMT
            Not After : Jun 18 13:53:18 2024 GMT
        Subject: CN=48B0CA3C6A48FE59FA564B7BBA7E67663CB7E746
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:e6:d2:a6:5f:9e:40:d5:c1:00:a3:0d:09:78:
                    cc:90:7a:f9:52:73:2d:be:25:74:84:9b:f0:88:bd:
                    5f:75:31:13:3c:41:30:6f:f6:ab:c1:15:d1:1b:a7:
                    40:c3:6f:b1:ff:46:23:ea:d0:40:20:3c:59:d5:02:
                    44:39:30:a0:65:60:98:63:bb:5e:cf:ef:70:ec:02:
                    ec:1d:64:f1:49:dd:a6:a0:9f:9a:fa:e8:63:67:96:
                    e8:52:44:a2:90:bb:84:f5:e3:74:ad:c2:60:67:f5:
                    ef:f6:d2:97:98:a5:1b:4c:f5:0c:a9:ad:dd:41:96:
                    e6:5c:c1:1b:68:9b:e7:3e:38:76:8e:25:85:a8:e3:
                    87:28:1e:2d:f3:74:2c:c3:13:06:17:69:4e:e3:68:
                    d3:54:f1:6b:c5:1c:1b:3c:62:00:93:b9:42:2b:f4:
                    a2:c8:0a:3e:17:b5:b8:88:50:74:84:eb:2b:72:29:
                    50:80:26:05:08:18:c7:d4:e0:39:08:66:d6:43:07:
                    ea:3b:33:ca:f2:16:58:93:24:70:2f:6f:26:ba:96:
                    7c:1c:0f:b5:0e:fb:42:85:43:41:21:d9:f1:72:6f:
                    90:93:38:74:c7:60:57:dd:c6:71:72:98:3f:71:91:
                    ec:7c:f4:48:79:cf:4f:0b:8e:ca:d3:90:c5:7e:36:
                    3a:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:B0:CA:3C:6A:48:FE:59:FA:56:4B:7B:BA:7E:67:66:3C:B7:E7:46
            X509v3 Authority Key Identifier:
                keyid:5C:E1:A3:80:52:22:57:98:A7:C5:A2:59:26:90:33:FC:6D:8B:53:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5CE1A38052225798A7C5A259269033FC6D8B53A4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/jpqPP73EfXFzmKpL7PdBCVK2SCj4XEHMwnjUt83LK9X/0/323830343a316466633a663030303a3a2f33362d3336203d3e20323632373635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1dfc:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         25:4f:ae:01:ee:c1:41:a6:dc:b8:cf:b1:5f:77:42:a2:b7:1d:
         55:08:cc:e7:51:c2:a6:a6:b6:b6:ea:57:a6:d1:d6:c0:e9:d4:
         f1:13:74:32:0b:fe:81:96:00:b5:50:c2:dc:26:9b:3f:45:f5:
         62:aa:4c:10:3e:a9:4a:67:ec:23:c4:4c:73:5f:c0:51:09:90:
         07:b2:83:24:5b:69:a2:af:da:4b:e0:c3:2a:0c:45:b3:be:d7:
         fc:e2:4d:50:b6:d3:84:7e:07:ed:c1:3f:cf:fc:8d:98:de:8c:
         a3:8e:81:96:50:b6:49:97:41:26:65:e2:cd:53:77:71:ad:40:
         d5:2d:64:08:8f:63:f6:e3:3d:0b:75:b9:fb:bd:55:c1:80:3f:
         80:54:8d:9a:af:c8:55:00:01:f0:88:07:dd:09:93:70:c0:e8:
         44:59:a4:a7:36:35:d1:e4:4b:bf:49:e3:07:8e:9b:ae:af:15:
         90:ee:ac:4c:68:94:71:8a:f0:07:67:42:91:41:81:0b:65:d3:
         c6:f5:fe:50:7b:04:55:e7:ac:e5:68:48:7b:8e:7b:f1:6b:92:
         70:43:3c:92:c1:d6:86:f6:07:e6:4c:d1:b9:24:4a:69:75:38:
         b8:48:31:c5:a0:2b:c8:4e:82:c8:06:f6:09:03:30:d4:67:81:
         01:5c:67:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:44:02 2024 by rpki-client on console-ams.rpki-client.org