Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa
File:                     323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa (raw, json)
Hash identifier:          tFvA9uIeRo9nGBW1GsTfmFrDHUgKLnFO6Gys4bGmZAg=
Subject key identifier:   5A:33:9A:E2:B6:F8:BC:8F:72:E4:B0:68:EA:0A:91:D6:BD:CF:60:BA
Certificate issuer:       /CN=D4043FF361E9F3F8626E866CD52D1D952930B170
Certificate serial:       79105C2D32C6A1FA6ACB8C78600EF74ADE3F71C5
Authority key identifier: D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa
Signing time:             Tue 27 Feb 2024 18:29:32 +0000
ROA not before:           Tue 27 Feb 2024 18:24:32 +0000
ROA not after:            Tue 25 Feb 2025 18:29:32 +0000
asID:                     262687
IP address blocks:        2804:385c:8c00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            79:10:5c:2d:32:c6:a1:fa:6a:cb:8c:78:60:0e:f7:4a:de:3f:71:c5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D4043FF361E9F3F8626E866CD52D1D952930B170
        Validity
            Not Before: Feb 27 18:24:32 2024 GMT
            Not After : Feb 25 18:29:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:38:ed:00:9e:91:db:e3:e9:36:c1:2a:de:5b:
                    6c:27:00:0e:e3:0e:d2:8d:6e:5f:22:b2:a4:47:ed:
                    a7:18:d2:cc:90:5c:bf:fc:f1:ec:27:82:bf:15:49:
                    9d:5b:de:bf:f1:ad:44:8d:3e:dd:fc:38:f9:f0:65:
                    ae:4b:02:45:26:3d:80:aa:45:ea:88:b0:88:05:3a:
                    88:ea:c4:f0:40:78:6d:73:96:12:c8:ca:f1:c0:7c:
                    01:b9:ae:f7:83:ec:7a:1a:a8:fc:4c:84:53:18:bd:
                    a8:b0:06:aa:66:f7:b4:26:12:e0:64:61:40:36:6c:
                    42:17:0c:56:26:04:29:9a:13:4f:48:9d:3c:ba:ff:
                    16:3e:3d:0b:0f:52:15:4f:9c:de:a6:c0:46:e5:27:
                    9d:98:5b:76:82:f1:e4:99:83:f8:a3:b1:3f:f1:5c:
                    54:7f:ba:c8:0e:52:6b:48:60:c1:a3:57:0a:89:f6:
                    2e:55:2d:ec:cc:c5:b0:b8:5c:e3:c9:8e:c5:e8:7e:
                    74:54:31:4e:a6:2e:d8:66:21:5c:c7:27:c6:a3:d1:
                    a9:3b:a7:18:b3:1b:9b:11:2c:13:cf:22:9d:c3:26:
                    fc:95:98:c9:fb:47:33:b1:d1:e0:2b:12:e5:42:50:
                    c6:b2:71:bd:ab:07:5e:d4:c7:ca:7e:88:ab:fc:1b:
                    12:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5A:33:9A:E2:B6:F8:BC:8F:72:E4:B0:68:EA:0A:91:D6:BD:CF:60:BA
            X509v3 Authority Key Identifier:
                keyid:D4:04:3F:F3:61:E9:F3:F8:62:6E:86:6C:D5:2D:1D:95:29:30:B1:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/D4043FF361E9F3F8626E866CD52D1D952930B170.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D4043FF361E9F3F8626E866CD52D1D952930B170.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A9fBvvuv45P11bx2VnjV3ogt9jWBcrN32V1ZSfyHor5o/0/323830343a333835633a386330303a3a2f34302d3430203d3e20323632363837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:385c:8c00::/40

    Signature Algorithm: sha256WithRSAEncryption
         08:db:b1:76:f7:e8:bd:77:93:32:78:91:ac:9c:08:b9:9a:aa:
         43:75:64:68:fe:3b:ee:a4:98:4d:22:e9:e9:12:ac:3f:b6:71:
         69:84:81:08:fa:a4:67:e7:ad:a4:2f:70:e3:fb:46:c0:c2:c4:
         23:5a:08:81:39:64:77:7f:90:66:61:97:42:32:3a:7e:9a:de:
         b6:4c:a0:dd:d8:c5:2b:7c:65:c1:bf:8e:f9:c0:04:af:49:e2:
         71:fe:f3:c4:f7:b2:16:9f:04:9a:fc:34:74:1b:d0:4b:9e:fb:
         c2:b3:f2:f1:0c:bd:0a:a1:3d:aa:16:85:35:7c:e7:53:1b:9f:
         cc:9c:19:c2:c9:55:1a:8a:92:c5:74:37:46:dd:d6:c1:e7:db:
         f7:b9:76:d0:c4:a8:70:cf:54:44:27:0f:31:99:e7:ec:4b:55:
         db:47:e8:80:b3:24:a3:fc:07:4b:ba:9e:c3:e1:3e:7d:e5:dd:
         16:89:87:a9:6a:37:e5:cd:d4:e7:c2:23:19:ad:b6:e6:3b:b2:
         a3:b6:5d:7a:6f:36:29:a1:b4:d8:7b:f3:09:a9:9d:f8:09:8e:
         72:f8:8d:c0:8e:b8:95:45:e0:f7:76:c5:2e:f6:b3:86:ad:92:
         5c:1b:0a:7b:45:ef:4d:20:18:08:c5:ec:05:cd:21:70:7a:95:
         3d:23:a7:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:28 2024 by rpki-client on console-ams.rpki-client.org