Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383032333a3a2f34382d3438203d3e20323632363837.roa
File:                     323830343a333835633a383032333a3a2f34382d3438203d3e20323632363837.roa (raw, json)
Hash identifier:          QYSMFJlI4huymSMuELJakwTNOJDpP4/VbkbLFnVwwgs=
Subject key identifier:   AC:5B:A1:FC:71:C0:11:9C:AB:9D:AD:5F:17:3A:D6:E9:3B:AB:BB:EA
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       1CD9546E28931FADEB0C3E4FFC10C8F7B2834AAD
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383032333a3a2f34382d3438203d3e20323632363837.roa
Signing time:             Tue 27 Feb 2024 18:29:41 +0000
ROA not before:           Tue 27 Feb 2024 18:24:41 +0000
ROA not after:            Tue 25 Feb 2025 18:29:41 +0000
asID:                     262687
IP address blocks:        2804:385c:8023::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:d9:54:6e:28:93:1f:ad:eb:0c:3e:4f:fc:10:c8:f7:b2:83:4a:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Feb 27 18:24:41 2024 GMT
            Not After : Feb 25 18:29:41 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:52:6f:e1:6b:e5:d1:15:98:7f:d3:f8:c8:14:
                    55:6a:97:c7:7a:9b:7c:08:98:9c:fa:91:6a:0e:17:
                    0f:58:fe:a6:cc:6a:79:a6:c7:05:aa:83:62:01:53:
                    07:39:f1:84:57:09:d2:a4:84:2b:5a:71:12:bf:33:
                    ce:0c:ee:ee:5f:5a:67:2b:a3:47:5c:7d:5f:0a:4a:
                    f0:6d:94:1d:ce:ce:16:f3:c1:52:6f:3d:b2:36:a1:
                    a0:c5:a2:bf:45:97:d2:af:8f:2d:d7:6b:ff:7c:b9:
                    65:a0:d4:c5:a9:87:78:9f:a4:54:c3:30:0b:95:3c:
                    f4:f1:ff:ae:ef:90:f1:83:59:23:1b:a7:54:8a:b3:
                    13:af:45:85:1a:95:ae:92:49:bd:79:5b:ba:92:1c:
                    15:05:53:35:38:36:59:10:20:0d:13:d7:59:1a:f2:
                    69:31:de:64:70:0f:10:09:3a:d4:1d:a5:06:fa:5d:
                    83:fa:4f:e2:50:48:e5:9d:23:44:ea:d1:0b:13:6c:
                    88:90:ea:2a:1e:28:11:74:52:47:4b:94:6e:18:7e:
                    7d:82:3d:b2:57:54:f0:84:4a:bb:00:9a:4b:9e:cf:
                    a7:b4:15:e2:a1:11:59:86:10:fb:26:08:49:78:57:
                    01:12:e2:c4:e8:36:59:74:11:1f:0c:c5:28:bf:67:
                    44:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AC:5B:A1:FC:71:C0:11:9C:AB:9D:AD:5F:17:3A:D6:E9:3B:AB:BB:EA
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a383032333a3a2f34382d3438203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8023::/48

    Signature Algorithm: sha256WithRSAEncryption
         07:06:80:77:9c:b7:89:4f:26:9c:0f:c4:f1:94:85:4d:d5:4e:
         35:9c:3e:95:29:41:79:14:e9:a5:95:fc:4e:21:4a:a1:b4:82:
         46:d5:2a:b4:5d:1d:ee:e1:7b:2e:60:d0:f0:b3:65:0a:e2:91:
         87:06:a6:fc:2c:1c:ee:ce:76:3e:0e:1d:a5:84:54:4b:fb:dd:
         d1:61:a3:6c:0f:b1:0d:c2:48:c3:3d:3d:2d:7a:d5:68:18:81:
         28:9d:0b:c9:2e:55:0e:af:21:1c:2c:b3:42:d0:14:c0:03:b3:
         91:0f:a0:a9:c2:dc:25:79:f2:77:a2:b2:17:c7:c5:16:7b:b2:
         fb:fc:f0:5d:8b:05:30:39:d1:9e:23:50:1e:7c:ba:d9:f2:5b:
         5f:60:a0:f9:8a:86:ae:91:c1:14:5f:17:87:66:1b:fe:ce:02:
         6f:08:7d:9d:4f:14:27:04:10:aa:c7:d9:59:a8:fa:33:b1:bf:
         0d:f1:32:2b:32:16:d5:0e:f1:44:cb:3c:dd:37:b0:13:22:ef:
         05:3d:09:7f:80:1e:3c:4b:be:a3:09:2b:dd:19:9c:39:76:16:
         2a:da:de:03:d9:25:a2:b6:4e:af:a1:6f:f9:b4:08:48:57:c6:
         ff:de:84:a1:9a:1e:7d:03:f5:d0:2a:fb:50:52:3a:0f:a7:6f:
         e3:f5:70:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org