Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/323830343a373038383a3a2f33322d3438203d3e20323730373332.roa
File:                     323830343a373038383a3a2f33322d3438203d3e20323730373332.roa (raw, json)
Hash identifier:          s77D+R1P8Wr1EX/JJovLuVExbqStyz3WYi4Ajv4mkC4=
Subject key identifier:   74:A0:3F:1A:54:67:3A:2A:6D:68:C3:3D:E6:DF:66:36:14:DE:9D:87
Certificate issuer:       /CN=B8C512507A29EDA5D36B9B84C04F6AEC61017290
Certificate serial:       1112359294921771ED18A1EC25F02390010F0EBF
Authority key identifier: B8:C5:12:50:7A:29:ED:A5:D3:6B:9B:84:C0:4F:6A:EC:61:01:72:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8C512507A29EDA5D36B9B84C04F6AEC61017290.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/323830343a373038383a3a2f33322d3438203d3e20323730373332.roa
Signing time:             Wed 10 Apr 2024 13:19:50 +0000
ROA not before:           Wed 10 Apr 2024 13:14:50 +0000
ROA not after:            Wed 09 Apr 2025 13:19:50 +0000
asID:                     270732
IP address blocks:        2804:7088::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:12:35:92:94:92:17:71:ed:18:a1:ec:25:f0:23:90:01:0f:0e:bf
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B8C512507A29EDA5D36B9B84C04F6AEC61017290
        Validity
            Not Before: Apr 10 13:14:50 2024 GMT
            Not After : Apr  9 13:19:50 2025 GMT
        Subject: CN=74A03F1A54673A2A6D68C33DE6DF663614DE9D87
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ef:57:9d:fb:5d:e5:01:a9:82:23:86:2e:d1:97:
                    4f:be:46:34:41:2d:be:ec:ad:f1:be:aa:79:6d:a1:
                    bd:f1:ca:26:0e:10:8f:b5:0e:05:01:f0:21:08:c9:
                    eb:e2:3c:e0:5f:d4:5f:db:66:f6:f2:1e:54:3f:ed:
                    8d:b5:a4:44:3a:48:4e:2b:38:c0:ad:86:0b:cc:41:
                    91:8b:1e:09:4b:04:e2:f4:fd:28:57:00:e9:9d:27:
                    08:16:01:17:d9:0c:c8:da:cc:b6:74:ca:96:ca:8c:
                    f0:57:f6:d3:08:74:cc:36:ba:e9:ee:3c:f7:87:e0:
                    a5:f8:4d:b8:ac:27:50:8c:81:a1:6b:60:dc:25:c4:
                    74:37:af:af:00:b1:06:fa:bb:c2:ec:5f:8a:9f:89:
                    e2:1b:48:70:7b:f7:f6:54:a3:72:81:cd:29:be:ad:
                    b0:ff:67:33:26:4d:8e:0a:8c:cb:ac:ee:9a:57:ab:
                    db:17:bf:ab:20:42:0e:c2:f3:63:74:77:7d:31:13:
                    8c:f7:9b:b7:95:ce:a7:48:40:38:03:72:e9:9d:2c:
                    ab:b8:d2:87:c0:8e:8b:39:32:5c:56:33:87:dc:e3:
                    54:a1:9a:e1:21:d1:e9:e2:d7:2e:5d:0d:ce:b7:39:
                    4c:f0:a1:5e:c2:c0:99:44:a8:0c:e5:28:b7:ae:3e:
                    4f:85
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                74:A0:3F:1A:54:67:3A:2A:6D:68:C3:3D:E6:DF:66:36:14:DE:9D:87
            X509v3 Authority Key Identifier:
                keyid:B8:C5:12:50:7A:29:ED:A5:D3:6B:9B:84:C0:4F:6A:EC:61:01:72:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/B8C512507A29EDA5D36B9B84C04F6AEC61017290.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B8C512507A29EDA5D36B9B84C04F6AEC61017290.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/73hCFceRDxgwD1vqUWTXTzU23Y5mUoUvcqc1LtfwDkKq/0/323830343a373038383a3a2f33322d3438203d3e20323730373332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7088::/32

    Signature Algorithm: sha256WithRSAEncryption
         58:e5:64:07:db:a8:ed:58:db:6d:5a:56:86:7f:34:68:9d:90:
         4b:33:99:be:b5:39:5b:4d:61:47:6f:a8:73:73:94:15:21:af:
         27:f7:cb:50:3a:29:0f:2c:63:3d:60:6c:66:34:61:17:c8:2f:
         7b:01:86:6f:39:53:ec:2e:93:73:2c:8e:cf:25:b3:62:14:9a:
         c0:ad:29:87:74:36:53:e6:44:9e:bc:a0:f1:09:ba:89:a0:a7:
         9e:d1:71:1b:0d:80:a2:de:d1:21:d6:95:1e:30:28:e8:c6:52:
         f3:c9:28:ca:9f:0f:1b:ed:05:21:92:a3:92:27:ec:54:05:62:
         a7:a9:05:a1:a9:f6:7b:15:e1:66:54:22:33:b4:0d:c8:49:69:
         f2:13:d6:5b:c9:e8:6d:3f:3d:6d:2b:48:e8:ad:8f:f8:10:cf:
         56:33:31:95:99:9a:6a:c5:97:a1:54:a8:b6:60:74:ce:b2:ac:
         73:b5:69:5f:a1:ac:28:c1:cb:12:a3:d6:1d:17:c7:1b:3e:9d:
         65:c4:58:9e:23:bd:5f:77:f9:cb:fc:f5:09:c5:50:8e:18:20:
         21:96:d0:06:70:0f:b9:83:1a:f2:83:b7:1c:b7:08:9d:ec:fe:
         4c:a2:b4:79:13:87:5e:e0:61:03:e0:a4:d5:2e:21:9d:1e:37:
         8e:82:9d:1a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:27:47 2024 by rpki-client on console-fra.rpki-client.org