Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a323030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          iuqBSMfyByMQtOc7tj7kXtWEBiEsCakCUW+gUKp2rjY=
Subject key identifier:   AF:64:E6:87:32:86:D3:AA:E5:35:FB:D6:70:B5:3B:F6:3D:83:04:D7
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       1144419B47FC1495B17E16AFE672333321F8331C
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:33:35 +0000
ROA not before:           Thu 20 Jul 2023 14:28:35 +0000
ROA not after:            Thu 18 Jul 2024 14:33:35 +0000
asID:                     52706
IP address blocks:        2804:c70:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:44:41:9b:47:fc:14:95:b1:7e:16:af:e6:72:33:33:21:f8:33:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:28:35 2023 GMT
            Not After : Jul 18 14:33:35 2024 GMT
        Subject: CN=AF64E6873286D3AAE535FBD670B53BF63D8304D7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:ed:22:4f:ef:5f:7f:e5:7c:ea:97:ed:bf:7c:
                    60:cc:85:cb:15:49:76:f3:ca:5d:85:c7:e2:fa:28:
                    73:dc:60:0b:28:f3:f2:e0:c5:9a:93:4c:a7:ba:be:
                    8d:fa:81:00:96:45:e1:15:60:9c:47:66:da:ae:aa:
                    7d:a5:cc:65:c1:72:d8:fa:b1:14:1c:a4:3d:87:78:
                    74:f1:fd:df:b6:69:df:93:c2:3a:4f:ad:cc:97:71:
                    2d:11:e1:b5:fe:95:2e:91:27:b3:84:4c:10:5e:30:
                    3d:27:14:75:b7:eb:89:7f:8f:83:d5:8f:57:1a:1a:
                    8a:80:56:11:c2:ac:fd:e5:f3:6a:19:31:ef:f6:30:
                    17:29:3b:a0:5c:ce:b6:73:f0:76:52:47:6c:fd:60:
                    97:2a:82:65:8c:aa:03:62:37:e1:98:9b:02:e6:e0:
                    ef:01:b1:6b:b5:71:51:78:30:0f:bb:7b:82:3e:b1:
                    26:9e:b6:fa:a0:0e:b9:b5:59:fe:3b:77:26:4b:59:
                    80:01:f8:9c:4d:6a:70:67:0a:e7:2b:6b:a5:51:93:
                    ca:37:7f:31:61:e6:e2:ad:a2:a8:9a:11:dc:4e:bf:
                    3e:fa:39:3e:af:da:f1:28:ca:54:d5:e2:06:78:25:
                    2d:66:c4:36:41:aa:50:78:6e:24:35:62:11:fa:e6:
                    43:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:64:E6:87:32:86:D3:AA:E5:35:FB:D6:70:B5:3B:F6:3D:83:04:D7
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a323030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2d:e2:ce:9b:cb:52:58:61:f1:b6:3a:82:bb:bf:f0:d1:91:83:
         d7:cc:62:07:fd:4f:a3:0e:56:67:0e:fe:ce:b5:bc:d5:f7:e8:
         ef:c0:61:0f:17:71:0b:3b:63:46:eb:0b:94:03:5b:c4:b4:3d:
         c2:bd:ff:31:6e:44:8c:c2:24:d8:82:ae:37:53:1f:d5:17:2f:
         6e:df:5c:5b:77:ff:92:8e:72:c7:db:1c:91:27:94:ee:99:93:
         f3:7f:aa:6d:5a:0c:1c:ea:d2:2c:ac:3b:1c:88:81:cf:9a:53:
         00:cb:c3:d6:07:68:63:8c:74:df:3b:c7:bd:49:39:24:8e:f1:
         18:47:d1:9b:70:7c:6f:45:76:ad:70:60:30:ee:1c:56:aa:74:
         76:1c:67:dd:03:b3:44:84:f7:42:c7:2b:b7:a5:72:3e:94:dc:
         bd:3b:36:f7:93:93:1c:b2:74:3e:b7:cc:42:78:fb:1f:9d:e6:
         cd:a3:1d:99:58:d6:41:19:fb:d9:aa:b0:9a:a7:ae:b6:48:23:
         10:53:ae:f6:d5:4b:66:c2:b6:18:da:5a:ff:a7:40:7b:00:8f:
         6d:ab:94:ae:f2:a8:17:4a:04:6e:d9:26:20:1f:af:d6:0b:e8:
         e8:0f:ef:99:3e:3e:a2:25:18:1e:5a:9c:fa:8a:5a:2c:09:a6:
         1f:5d:fe:5f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:59 2024 by rpki-client on console-ams.rpki-client.org