Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a3430303a3a2f33382d3338203d3e20323637323536.roa
File:                     323830343a346161633a3430303a3a2f33382d3338203d3e20323637323536.roa (raw, json)
Hash identifier:          YSyf6OZDrVhJFgOWJDytQLXrQRfL7f1j3w5YAjaQQRw=
Subject key identifier:   79:4B:9E:1D:AF:9D:38:FA:5A:D5:A5:95:7E:75:2D:F7:5B:18:9E:CE
Certificate issuer:       /CN=CA2E6FE1B3E51277CE3A0631547E5C15ECCB2F3F
Certificate serial:       5CF18F899BDFA092A494CA420737FED36B985516
Authority key identifier: CA:2E:6F:E1:B3:E5:12:77:CE:3A:06:31:54:7E:5C:15:EC:CB:2F:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA2E6FE1B3E51277CE3A0631547E5C15ECCB2F3F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a3430303a3a2f33382d3338203d3e20323637323536.roa
Signing time:             Thu 10 Nov 2022 16:45:37 +0000
ROA not before:           Thu 10 Nov 2022 16:40:37 +0000
ROA not after:            Thu 09 Nov 2023 16:45:37 +0000
asID:                     267256
IP address blocks:        2804:4aac:400::/38 maxlen: 38

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:f1:8f:89:9b:df:a0:92:a4:94:ca:42:07:37:fe:d3:6b:98:55:16
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CA2E6FE1B3E51277CE3A0631547E5C15ECCB2F3F
        Validity
            Not Before: Nov 10 16:40:37 2022 GMT
            Not After : Nov  9 16:45:37 2023 GMT
        Subject: CN=794B9E1DAF9D38FA5AD5A5957E752DF75B189ECE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:83:e1:cd:51:71:e3:05:43:5f:3e:b6:8c:b9:
                    c1:00:f1:7d:23:ad:e0:67:d0:88:a3:08:a5:b2:09:
                    6e:05:08:96:23:44:60:29:33:5b:24:8f:94:4f:da:
                    2a:f5:12:7b:b8:05:04:8a:e2:7a:c1:ae:c3:eb:6d:
                    9d:02:18:98:01:93:ed:ad:c0:e1:e2:49:76:82:61:
                    1f:d2:d3:cd:cb:da:d7:62:b1:48:44:bb:67:dc:a2:
                    6a:26:b7:fc:83:67:94:2d:4b:37:ef:0a:bc:d5:a2:
                    84:23:e1:a6:ec:44:87:95:b7:f6:8d:d2:4c:5a:d1:
                    d8:df:61:1b:9e:12:1c:b7:40:e3:ce:75:ca:eb:d5:
                    ef:17:50:22:87:fe:93:ce:d2:3a:bb:44:a2:37:34:
                    cd:bb:08:b0:21:53:2d:5c:58:d8:06:6b:e1:95:13:
                    88:89:16:de:ce:fa:3b:a2:c6:83:6c:19:f1:81:4f:
                    6f:1a:23:8d:80:57:c0:9e:a9:b1:47:60:92:d9:0a:
                    ff:35:ed:3e:96:8c:78:0a:ea:1a:a8:c2:67:a3:43:
                    13:34:7f:b3:80:e6:13:ec:61:33:ca:07:aa:23:82:
                    e4:e2:bb:f8:dc:9e:4f:52:47:4b:a0:2f:82:3a:0c:
                    f5:90:aa:54:92:03:0b:e8:d8:20:6b:c7:8a:7d:53:
                    83:83
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                79:4B:9E:1D:AF:9D:38:FA:5A:D5:A5:95:7E:75:2D:F7:5B:18:9E:CE
            X509v3 Authority Key Identifier:
                keyid:CA:2E:6F:E1:B3:E5:12:77:CE:3A:06:31:54:7E:5C:15:EC:CB:2F:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/CA2E6FE1B3E51277CE3A0631547E5C15ECCB2F3F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CA2E6FE1B3E51277CE3A0631547E5C15ECCB2F3F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/35eK4h8HkyLT49HDi1cPcdhu6sCXq4B5PoqDZ4PmZknh/0/323830343a346161633a3430303a3a2f33382d3338203d3e20323637323536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4aac:400::/38

    Signature Algorithm: sha256WithRSAEncryption
         09:00:22:3e:5a:c5:52:42:23:2d:e7:b2:71:32:16:76:2f:06:
         24:74:5b:06:55:d2:18:1a:3b:4b:b2:b4:17:29:cb:2d:e8:8a:
         fa:85:b4:ce:55:78:26:bc:4c:48:ff:0e:42:c7:f1:ae:66:5d:
         29:3e:57:25:58:c3:e9:92:3c:66:e2:53:6d:09:8b:24:3d:45:
         ed:63:c7:32:10:00:3a:be:1b:08:3b:6b:e3:10:e5:8e:4c:46:
         f4:11:38:75:c1:a7:dc:32:80:2c:bf:ec:e2:80:cd:92:26:04:
         c5:a9:ba:29:91:4e:a2:c0:b7:88:ef:5b:fc:0b:39:16:33:1f:
         cc:43:05:4a:42:4f:a3:8e:25:21:92:2f:99:c5:71:b4:ab:66:
         a3:a4:65:18:23:3a:86:df:99:50:31:e6:df:e6:7a:e8:d4:af:
         2f:43:27:14:6a:98:5f:6a:7a:cd:91:6f:7b:90:18:1b:81:61:
         74:7f:58:96:b4:8c:95:54:e1:f6:04:7d:3d:36:43:6f:98:f0:
         d2:04:56:30:17:f1:2a:ed:63:17:35:a9:4f:ef:fa:39:d7:21:
         80:c5:ca:42:cb:dd:bc:fb:45:d7:c6:ff:21:2a:ca:e7:9b:32:
         27:79:2f:08:95:60:a2:b0:85:3a:cf:0d:eb:0f:ff:c6:37:8f:
         65:93:75:ec
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Dec 27 18:34:19 2023 by rpki-client on console.sobornost.net