Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313030303a3a2f34302d3430203d3e20323731333830.roa
File:                     323830343a376139343a313030303a3a2f34302d3430203d3e20323731333830.roa (raw, json)
Hash identifier:          qRaFrjZ8NU7ikAbDUfQ8Xme6L9JCBA1xNuKOwnM50II=
Subject key identifier:   A2:27:B3:EC:9C:68:1D:C5:DF:B5:1A:90:6C:C8:91:71:AF:C6:34:54
Certificate issuer:       /CN=CED693561B18E1F15DE112114489E7324E327A34
Certificate serial:       61E9C2DF4FFCFFBD9125E215A3E248720B2762C6
Authority key identifier: CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313030303a3a2f34302d3430203d3e20323731333830.roa
Signing time:             Tue 28 Nov 2023 19:41:43 +0000
ROA not before:           Tue 28 Nov 2023 19:36:43 +0000
ROA not after:            Tue 26 Nov 2024 19:41:43 +0000
asID:                     271380
IP address blocks:        2804:7a94:1000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            61:e9:c2:df:4f:fc:ff:bd:91:25:e2:15:a3:e2:48:72:0b:27:62:c6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CED693561B18E1F15DE112114489E7324E327A34
        Validity
            Not Before: Nov 28 19:36:43 2023 GMT
            Not After : Nov 26 19:41:43 2024 GMT
        Subject: CN=A227B3EC9C681DC5DFB51A906CC89171AFC63454
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:06:e5:b0:04:60:02:28:71:f6:7e:d2:4e:cc:
                    a8:cd:15:15:71:0c:50:31:30:9e:2e:f1:b7:99:6c:
                    d8:14:89:46:69:3a:96:14:ea:9b:23:ac:ff:91:a7:
                    66:57:19:07:4d:7a:90:e4:bb:06:af:5f:ed:6a:e1:
                    54:ef:6b:94:cd:03:9b:89:cc:ec:c7:26:30:14:15:
                    27:7d:28:f7:30:3a:de:07:25:3b:90:3c:28:12:a4:
                    d4:e8:c8:f1:ea:9c:ec:dd:e4:5f:c3:b3:9d:46:b3:
                    3b:6b:b6:7b:4f:22:5f:f8:ae:24:53:c7:39:43:b6:
                    d0:9d:a7:76:3d:69:c3:80:2b:a7:c6:86:10:64:57:
                    2b:82:82:13:de:21:b3:af:0a:11:c2:72:97:ad:83:
                    22:85:f3:a5:9f:9a:3f:45:ff:85:62:59:41:20:3e:
                    2a:3a:85:07:89:fa:5b:7a:eb:1a:df:96:72:07:76:
                    d7:21:66:fc:f7:6f:7c:29:57:49:a2:1d:1b:81:71:
                    f2:66:8d:77:ee:51:0f:6f:55:46:2f:78:ed:28:2a:
                    c1:c5:25:ba:f3:b1:a1:04:44:ce:6c:08:89:c6:b9:
                    9b:ba:7d:04:c7:43:c2:4f:69:fa:dc:31:6a:6d:25:
                    1d:26:36:ca:fa:24:06:4f:b7:a7:4c:06:de:c2:92:
                    7a:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A2:27:B3:EC:9C:68:1D:C5:DF:B5:1A:90:6C:C8:91:71:AF:C6:34:54
            X509v3 Authority Key Identifier:
                keyid:CE:D6:93:56:1B:18:E1:F1:5D:E1:12:11:44:89:E7:32:4E:32:7A:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/CED693561B18E1F15DE112114489E7324E327A34.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CED693561B18E1F15DE112114489E7324E327A34.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313030303a3a2f34302d3430203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:1000::/40

    Signature Algorithm: sha256WithRSAEncryption
         1d:88:64:3f:74:83:9e:aa:f9:44:8b:cf:db:8e:bc:ef:1b:20:
         8a:05:9b:22:4c:70:5a:53:e4:da:ec:58:c3:1d:eb:45:8e:a5:
         95:7f:d1:a0:4c:0e:f0:8a:4d:62:03:53:67:a2:fa:0f:3f:6f:
         0f:d7:ed:3b:96:1f:54:ff:ce:65:58:0b:26:ae:49:7f:26:f7:
         56:6e:5b:5c:e1:d6:07:cb:5a:7d:8e:3c:27:a4:81:2d:02:90:
         1b:6d:e5:e8:0b:f8:fb:d9:76:07:25:ec:f1:c4:a4:db:b5:ae:
         4a:c2:e7:46:44:40:c6:d0:c7:87:0f:63:52:ce:ef:59:43:06:
         34:79:05:44:6d:e6:f4:f9:9d:7b:27:5f:a9:5a:7b:a3:89:da:
         79:a4:9d:98:ce:3c:05:66:da:8f:0d:f5:2b:ae:5f:aa:f9:10:
         4a:64:86:44:06:29:e7:92:3c:a4:58:c3:cb:96:b3:a3:5c:40:
         dd:35:50:4b:7e:85:6a:81:53:c3:81:ba:35:bd:8a:cf:ce:7b:
         cd:73:cb:ac:50:8a:b9:7c:b5:42:da:ae:b3:c7:c5:b2:85:61:
         13:9a:1c:c7:38:19:b5:90:0a:1f:37:48:3d:a2:fd:c3:7f:ef:
         4a:26:cd:b2:5f:19:f1:09:9f:2a:31:48:a6:8a:52:86:d1:14:
         41:1e:d4:f9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:45:26 2024 by rpki-client on console-ams.rpki-client.org