Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa
File:                     323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa (raw, json)
Hash identifier:          b+GwdcQU+SvQ9S6pJxLGyPyIfBJt/n0BsS90pOqDfzc=
Subject key identifier:   88:1C:E1:AF:BC:AB:1B:80:DF:40:27:16:AD:40:EF:02:4F:20:A1:73
Certificate issuer:       /CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
Certificate serial:       7593D915983D9501E57B1851F3BA9A5FBD669B5A
Authority key identifier: F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa
Signing time:             Thu 07 Mar 2024 13:58:52 +0000
ROA not before:           Thu 07 Mar 2024 13:53:52 +0000
ROA not after:            Thu 06 Mar 2025 13:58:52 +0000
asID:                     271380
IP address blocks:        2804:7a94:1200::/40 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:93:d9:15:98:3d:95:01:e5:7b:18:51:f3:ba:9a:5f:bd:66:9b:5a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F29CBF3783E5E2250C27F456D15288BD25A3BCC0
        Validity
            Not Before: Mar  7 13:53:52 2024 GMT
            Not After : Mar  6 13:58:52 2025 GMT
        Subject: CN=881CE1AFBCAB1B80DF402716AD40EF024F20A173
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:1c:f0:74:d5:93:8f:5a:a5:9e:ba:c6:3c:98:
                    d9:93:90:5a:fd:07:06:42:1f:f5:28:16:b2:9a:e0:
                    52:59:d7:d9:30:cf:fe:83:71:97:a7:03:36:b9:cc:
                    c8:31:02:09:31:74:e2:33:75:fe:c7:31:b4:f0:03:
                    c5:ce:73:d7:a4:78:d3:ed:5c:67:9d:e0:bc:28:de:
                    78:8f:7c:b4:3d:86:36:2d:7a:31:cd:d1:3b:5e:f5:
                    f6:9b:f8:13:54:77:0a:7e:a0:a8:a7:61:cc:e4:46:
                    c9:f4:d4:3e:05:8f:8d:31:da:d5:d3:e1:dd:40:cd:
                    df:0c:01:15:9c:96:c4:84:ae:11:7b:86:11:ce:e9:
                    17:d1:8a:5a:93:e2:91:1e:d3:2e:7c:fd:a0:fd:37:
                    4c:66:90:ad:81:10:0b:75:b6:16:5a:e3:15:4d:f3:
                    aa:81:f0:73:56:db:7c:67:b1:10:82:94:7e:d6:89:
                    1f:58:2b:f6:94:ed:62:25:34:62:17:0b:cf:d5:2c:
                    4a:db:c7:41:a2:54:1d:13:1c:02:0f:72:ba:01:d2:
                    18:d1:0e:ac:28:c0:13:d7:31:07:bf:b1:6e:60:49:
                    28:9d:08:41:9b:54:6f:e8:6c:8d:95:9c:e3:5b:ae:
                    a9:b6:86:9c:3f:b3:2f:c2:78:d7:a6:ba:c6:fe:85:
                    bc:51
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                88:1C:E1:AF:BC:AB:1B:80:DF:40:27:16:AD:40:EF:02:4F:20:A1:73
            X509v3 Authority Key Identifier:
                keyid:F2:9C:BF:37:83:E5:E2:25:0C:27:F4:56:D1:52:88:BD:25:A3:BC:C0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F29CBF3783E5E2250C27F456D15288BD25A3BCC0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/povQnJRm4pswoxUUBfdHouUM5zQMWGVm3eHPJTspoQr/0/323830343a376139343a313230303a3a2f34302d3434203d3e20323731333830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a94:1200::/40

    Signature Algorithm: sha256WithRSAEncryption
         e0:d0:4c:f4:a6:26:d2:a8:59:27:19:57:e6:f9:88:b9:74:36:
         d4:1c:99:62:04:68:e2:f2:59:cf:2e:41:16:da:ef:0e:2c:1d:
         f2:2b:b8:6e:8e:65:cb:0e:61:02:bc:51:4a:8b:3a:f2:96:1a:
         72:7e:d2:c4:8e:75:d4:2e:28:47:c7:fb:c3:30:7c:6b:de:29:
         9e:78:d5:bc:16:d9:d4:aa:6c:72:23:8a:fc:6b:a2:a8:da:ae:
         1a:05:73:3b:c4:de:69:0f:6f:e5:fe:ef:d2:b9:84:56:3c:69:
         19:b5:2e:7a:b5:cf:8f:a4:d3:5e:79:7b:ac:12:77:ac:43:1d:
         c2:fc:81:77:09:e7:a3:41:70:61:50:ae:65:8f:95:79:dd:bc:
         df:2a:10:bb:7f:b8:7d:e4:56:4f:ca:53:37:07:c0:bd:ef:76:
         14:64:60:b4:e9:41:f0:af:dc:dd:21:7f:09:3e:2f:40:98:6c:
         a3:46:0d:18:c4:db:92:93:fe:be:60:93:ee:5f:ad:f7:3a:31:
         c8:95:bb:de:7e:83:9d:6c:c7:47:89:fd:38:4e:9e:f9:ad:5b:
         af:2b:37:3a:7b:c5:5d:e8:fe:d5:18:9d:c9:b2:3b:63:78:37:
         d9:19:7d:8d:ee:da:17:d7:2b:e2:27:63:96:25:d6:df:73:58:
         a4:85:2a:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:23 2024 by rpki-client on console-fra.rpki-client.org