Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/323830343a6433633a313a3130303a3a2f36342d3634203d3e203532363133.roa
File:                     323830343a6433633a313a3130303a3a2f36342d3634203d3e203532363133.roa (raw, json)
Hash identifier:          1oWft1FgMCdNoX4D3Usl/YxmLZPrHSf2CBFr9IsVgqc=
Subject key identifier:   0D:48:2D:3E:BC:20:C4:23:3C:85:E0:99:32:52:F4:47:74:CF:95:81
Certificate issuer:       /CN=EE41996111A070E5D185B28EC741E0A608B24EDC
Certificate serial:       1AB8A52148F3E9890D025E87DC8D6A5F730684A9
Authority key identifier: EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/323830343a6433633a313a3130303a3a2f36342d3634203d3e203532363133.roa
Signing time:             Wed 06 Mar 2024 14:52:01 +0000
ROA not before:           Wed 06 Mar 2024 14:47:01 +0000
ROA not after:            Wed 05 Mar 2025 14:52:01 +0000
asID:                     52613
IP address blocks:        2804:d3c:1:100::/64 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b8:a5:21:48:f3:e9:89:0d:02:5e:87:dc:8d:6a:5f:73:06:84:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EE41996111A070E5D185B28EC741E0A608B24EDC
        Validity
            Not Before: Mar  6 14:47:01 2024 GMT
            Not After : Mar  5 14:52:01 2025 GMT
        Subject: CN=0D482D3EBC20C4233C85E0993252F44774CF9581
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:0d:f1:10:3d:8b:d8:c7:53:4c:6a:b9:78:70:
                    69:27:b5:fc:4f:d4:30:f4:f7:65:0f:bb:12:5d:42:
                    70:ef:24:af:2f:ed:67:73:cb:89:3d:f8:5e:b1:9b:
                    e2:2f:44:b7:04:ce:1c:92:d9:5c:ea:1e:df:4f:dc:
                    ab:3a:59:66:24:a0:45:25:eb:d4:42:55:cd:c7:84:
                    ec:98:08:19:c1:89:4c:9d:ad:03:d6:69:f5:c0:b2:
                    6d:50:53:78:db:85:82:04:eb:b5:d9:d2:5c:e5:61:
                    27:33:ca:14:69:4a:28:d8:bf:cd:50:d3:42:3c:3b:
                    51:9c:ce:be:b6:52:af:04:c4:ab:bf:17:dd:d5:ff:
                    f7:8d:3d:2a:28:38:6a:55:bc:91:e6:99:27:08:b6:
                    78:a7:2f:a4:36:5e:91:67:c2:58:ac:5e:ab:73:62:
                    95:22:99:19:a5:52:c2:ba:f0:e0:e9:0d:82:97:81:
                    71:f6:ed:48:20:ee:0e:42:84:d4:aa:65:80:f3:15:
                    c0:86:c4:62:7a:1f:ea:f2:94:a0:e0:60:4b:19:ad:
                    25:a5:7f:62:a4:45:9b:98:31:21:11:25:80:5a:1f:
                    9c:9e:3b:8e:f0:c3:aa:14:83:d2:c9:29:00:ed:d4:
                    5b:86:95:c2:e9:ae:22:7e:49:d8:ef:06:20:d1:52:
                    83:b5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0D:48:2D:3E:BC:20:C4:23:3C:85:E0:99:32:52:F4:47:74:CF:95:81
            X509v3 Authority Key Identifier:
                keyid:EE:41:99:61:11:A0:70:E5:D1:85:B2:8E:C7:41:E0:A6:08:B2:4E:DC

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/EE41996111A070E5D185B28EC741E0A608B24EDC.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EE41996111A070E5D185B28EC741E0A608B24EDC.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CuS6Qy3ijz7LJKcnTGg6NTG4YpEcDCLfzhP2bnEzkPMi/0/323830343a6433633a313a3130303a3a2f36342d3634203d3e203532363133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d3c:1:100::/64

    Signature Algorithm: sha256WithRSAEncryption
         14:b6:66:02:10:3f:f0:9b:47:f1:09:7b:be:9a:65:07:8e:4e:
         46:0a:57:eb:4e:71:dc:83:5e:45:56:7b:2e:44:db:03:3b:74:
         c8:01:a0:28:6e:38:49:40:d9:c9:3e:0e:85:c4:94:ba:6b:3f:
         77:17:be:69:f8:f8:55:a7:a1:ec:e4:a9:7a:7d:23:51:51:07:
         65:63:5a:d0:7d:4e:a9:f3:2c:a7:67:d2:77:a8:a6:99:ab:10:
         48:8d:d7:50:74:c4:7c:8c:db:7c:9e:fb:c6:2d:bf:be:36:32:
         84:ab:29:b9:8d:ed:a6:40:91:b7:7d:ce:34:c6:65:bc:50:82:
         7e:ec:7f:c5:e5:26:84:2f:a2:69:c4:d3:68:28:3f:63:8c:d1:
         58:44:d7:73:e7:fa:29:03:b5:ef:8a:27:c9:26:ef:20:57:5d:
         69:1c:7c:71:43:3f:5d:96:6f:9b:a4:5d:aa:de:bf:96:39:ff:
         fb:d1:3f:d9:4d:ad:e8:c2:f8:61:41:c2:b5:99:a5:59:87:52:
         03:b9:55:4b:9f:22:4a:71:05:04:35:a7:8f:5c:55:40:d4:72:
         79:9d:71:81:2b:9d:6a:84:39:64:0e:4e:9f:5f:1c:52:fc:4c:
         00:e6:0e:b2:a8:03:b3:7f:ee:94:14:87:62:b3:b3:56:42:33:
         11:fe:4a:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:20 2024 by rpki-client on console-ams.rpki-client.org