Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/0/323830343a326436343a3a2f33322d3430203d3e20323635323739.roa
File:                     323830343a326436343a3a2f33322d3430203d3e20323635323739.roa (raw, json)
Hash identifier:          f66J3roR9crF4Ct3k7P4KKcM6dkwQk/o8mN2HwujKX4=
Subject key identifier:   DE:E2:BE:64:9C:CD:D9:41:01:9C:6D:58:3A:3F:AF:BE:0D:7A:7C:BD
Certificate issuer:       /CN=4891F57DBB2768074589743169F42E5C0BD91C7B
Certificate serial:       30A26B962596B9476D94AE116346CE951F9E0318
Authority key identifier: 48:91:F5:7D:BB:27:68:07:45:89:74:31:69:F4:2E:5C:0B:D9:1C:7B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4891F57DBB2768074589743169F42E5C0BD91C7B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/0/323830343a326436343a3a2f33322d3430203d3e20323635323739.roa
Signing time:             Mon 04 Mar 2024 22:12:34 +0000
ROA not before:           Mon 04 Mar 2024 22:07:34 +0000
ROA not after:            Mon 03 Mar 2025 22:12:34 +0000
asID:                     265279
IP address blocks:        2804:2d64::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:a2:6b:96:25:96:b9:47:6d:94:ae:11:63:46:ce:95:1f:9e:03:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4891F57DBB2768074589743169F42E5C0BD91C7B
        Validity
            Not Before: Mar  4 22:07:34 2024 GMT
            Not After : Mar  3 22:12:34 2025 GMT
        Subject: CN=DEE2BE649CCDD941019C6D583A3FAFBE0D7A7CBD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:aa:2c:8e:bd:47:8c:f6:8f:fd:04:2b:59:5a:
                    70:c4:a0:20:24:8b:b5:be:23:ac:cc:80:4d:bc:63:
                    26:c1:01:63:38:d0:f3:e3:5a:de:d2:2a:95:9e:62:
                    85:1a:85:2c:a7:b6:97:b4:9e:97:88:45:22:c9:c2:
                    18:e7:64:e7:b3:53:ca:c6:c4:3b:1b:4c:76:fc:c1:
                    19:b6:51:ef:82:b7:e6:df:ea:d3:36:d4:b7:1a:54:
                    ef:d4:4d:3e:3a:1c:65:8d:61:24:e5:8a:0c:aa:5d:
                    b9:6d:c1:94:8a:6d:e1:d8:dd:f3:47:1f:49:c3:fd:
                    a7:7a:8c:cf:89:42:16:b4:a9:15:ee:01:74:0c:23:
                    ac:86:d0:c8:18:85:46:13:a6:27:88:03:69:2f:a3:
                    50:09:fe:c0:dc:8b:71:45:b5:da:9d:17:07:04:e1:
                    eb:83:a1:95:64:a8:77:4d:5b:2d:ff:e4:ca:fd:49:
                    4e:9d:a9:f3:82:db:8a:9a:d9:b7:d5:cb:92:8e:bd:
                    6a:10:db:d6:3c:50:99:01:55:59:6f:b2:14:b2:2e:
                    c8:a5:3c:83:0c:9d:c1:07:5c:18:9c:ef:93:13:e5:
                    00:0b:88:d2:36:f9:b3:cf:cb:ca:2d:b8:f4:fa:3d:
                    0e:bf:5a:00:28:fe:22:17:92:a6:02:63:a1:96:68:
                    98:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:E2:BE:64:9C:CD:D9:41:01:9C:6D:58:3A:3F:AF:BE:0D:7A:7C:BD
            X509v3 Authority Key Identifier:
                keyid:48:91:F5:7D:BB:27:68:07:45:89:74:31:69:F4:2E:5C:0B:D9:1C:7B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/0/4891F57DBB2768074589743169F42E5C0BD91C7B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4891F57DBB2768074589743169F42E5C0BD91C7B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/HvodGzqvvhsWEcxJ4wkp59uQqkmiZouMLLwJtb3DjRcp/0/323830343a326436343a3a2f33322d3430203d3e20323635323739.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d64::/32

    Signature Algorithm: sha256WithRSAEncryption
         2c:20:f8:34:0c:aa:98:5c:07:a2:b8:4e:77:10:1d:e7:60:8e:
         fe:ef:f4:78:5c:2a:7a:de:1e:50:c5:f5:83:ec:55:9b:84:d3:
         a6:52:c7:d1:32:bc:46:c1:10:2f:20:05:72:89:7a:e9:9b:d1:
         48:2b:39:be:d8:4b:81:ed:68:ba:d9:b3:4c:9b:1f:05:dd:e2:
         43:d3:a5:cc:fe:fb:bb:80:d7:85:47:7a:f5:50:05:de:e7:bb:
         01:12:02:e4:05:24:a3:68:36:23:6d:49:2f:7d:cf:06:7e:11:
         f2:72:f0:32:21:17:d0:d7:e8:66:22:1d:03:e2:82:0b:39:63:
         71:de:31:c3:45:27:20:f5:b5:fd:a9:db:2b:4f:b2:66:d8:f7:
         c2:da:65:0f:19:4d:d7:11:0a:68:28:9f:bb:c7:ab:e0:5f:66:
         d0:8f:34:9f:fa:a5:89:15:6f:c1:7b:70:ce:81:f0:85:4f:2b:
         93:9b:f4:8a:76:a5:5e:05:ac:93:58:2a:b0:ef:bc:b2:53:90:
         cc:69:8c:d2:e0:01:f4:9a:50:00:f3:15:94:e7:d2:70:6b:d3:
         18:52:dd:2e:c9:3f:b6:01:78:b4:10:90:68:79:93:ec:3f:d2:
         75:6f:ee:59:79:ba:a7:fb:1c:d6:10:10:23:7d:49:5b:97:f5:
         06:f2:83:0c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:12 2024 by rpki-client on console-fra.rpki-client.org