Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a393030303a3a2f34382d3438203d3e20323635393139.roa
File:                     323830343a336664383a393030303a3a2f34382d3438203d3e20323635393139.roa (raw, json)
Hash identifier:          /vAu43oTbjsVe12sSsWNtztRMJ7DL4rphPOo9ZVVsf8=
Subject key identifier:   78:49:D5:88:5E:48:A0:13:A5:02:B7:42:51:84:8F:1C:4B:4E:0C:E9
Certificate issuer:       /CN=96E0B60592DF76BE603ED2B08A261F1D0F488BAE
Certificate serial:       7B82C698427E317341CF1B315352C34E834496DE
Authority key identifier: 96:E0:B6:05:92:DF:76:BE:60:3E:D2:B0:8A:26:1F:1D:0F:48:8B:AE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a393030303a3a2f34382d3438203d3e20323635393139.roa
Signing time:             Wed 31 Jan 2024 22:05:38 +0000
ROA not before:           Wed 31 Jan 2024 22:00:38 +0000
ROA not after:            Wed 29 Jan 2025 22:05:38 +0000
asID:                     265919
IP address blocks:        2804:3fd8:9000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:82:c6:98:42:7e:31:73:41:cf:1b:31:53:52:c3:4e:83:44:96:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96E0B60592DF76BE603ED2B08A261F1D0F488BAE
        Validity
            Not Before: Jan 31 22:00:38 2024 GMT
            Not After : Jan 29 22:05:38 2025 GMT
        Subject: CN=7849D5885E48A013A502B74251848F1C4B4E0CE9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a0:3a:0e:ae:dd:36:83:d4:59:7f:cb:30:76:01:
                    a3:1c:6d:18:68:42:a0:1b:a0:c1:2f:7b:4b:b1:dd:
                    dc:42:c5:f1:19:7f:d0:e0:4c:cc:5d:78:b6:02:6e:
                    ff:f2:54:03:ea:6d:6d:fb:51:01:a9:a3:00:c9:10:
                    04:37:6e:7c:3a:13:15:1e:ca:97:44:d3:24:70:3c:
                    de:c3:ba:78:a7:24:35:ea:6d:c3:5b:23:c6:c6:9b:
                    c8:b2:8e:1d:5f:86:04:1a:77:12:7b:1c:2d:96:ba:
                    b2:3f:3c:a3:2d:8a:4f:00:23:b2:8c:80:c3:8d:b6:
                    ab:13:c2:73:80:34:68:5c:2c:4a:cc:97:18:e4:2b:
                    95:84:7e:3b:29:b7:17:18:09:81:0f:18:91:20:a4:
                    53:5b:3d:f7:10:a6:dc:12:17:51:ae:a4:7a:8c:4d:
                    79:74:7c:b7:52:e0:59:01:b0:a5:6f:62:64:4e:b3:
                    9d:8c:b2:c0:27:71:bf:89:d5:82:2f:ac:b3:f8:6a:
                    a0:30:9d:1d:f8:23:39:95:99:39:6b:54:9d:60:a2:
                    90:fa:33:dd:0f:f6:c8:6d:99:37:00:d2:9e:01:b2:
                    d9:e0:76:ff:60:23:2f:e7:ae:1e:eb:0e:75:c1:e4:
                    2c:97:a1:7a:d0:82:68:b1:e5:11:6c:3e:15:34:6d:
                    c2:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                78:49:D5:88:5E:48:A0:13:A5:02:B7:42:51:84:8F:1C:4B:4E:0C:E9
            X509v3 Authority Key Identifier:
                keyid:96:E0:B6:05:92:DF:76:BE:60:3E:D2:B0:8A:26:1F:1D:0F:48:8B:AE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96E0B60592DF76BE603ED2B08A261F1D0F488BAE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DFApQdr3eud2Hjp3HWFNv6Eu3yAiy7XNoN5iFWnYqao4/0/323830343a336664383a393030303a3a2f34382d3438203d3e20323635393139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3fd8:9000::/48

    Signature Algorithm: sha256WithRSAEncryption
         54:79:5a:65:02:10:6a:39:62:bf:de:59:94:6b:ee:f6:70:e1:
         b5:29:38:74:6e:a5:41:ac:58:ba:1b:04:a4:6f:03:cc:f5:af:
         a4:b7:24:45:1e:ef:bb:ab:f3:d8:a9:d9:67:0e:1c:00:c3:19:
         cc:69:f1:b5:fc:62:e6:ab:e8:8e:40:28:58:fd:9d:a2:55:25:
         e7:d9:c2:ee:2f:56:0d:19:92:a9:c5:5e:dd:21:ba:a9:44:a2:
         59:cc:32:12:8c:e4:23:4a:6e:b7:e7:ff:93:db:0c:a9:f4:7a:
         27:c5:e5:ea:dc:a5:aa:27:49:c3:74:d7:21:31:67:7c:9a:85:
         55:46:f0:72:c7:d4:bd:46:11:11:ad:52:84:53:3b:d7:12:2f:
         23:4f:b4:b9:58:06:11:9e:e3:d5:8d:5d:c4:fc:cb:80:96:4d:
         b1:96:de:07:ab:81:d5:b6:fa:14:cf:9d:9d:be:43:8d:ff:9c:
         83:02:02:46:89:e5:5c:33:88:db:81:9e:8b:ba:51:f8:94:30:
         84:f7:c2:4b:73:30:f3:6b:54:0c:f8:af:25:7c:22:3b:bf:3c:
         be:92:6c:dd:0d:d8:3a:a1:06:f3:c2:91:1d:3b:8c:77:b9:ff:
         b9:00:4e:20:d8:ac:b7:1c:6b:8e:0f:2b:e7:24:c9:2a:cc:b5:
         f8:fa:fc:80
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:21 2024 by rpki-client on console-ams.rpki-client.org