Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/323830343a356461303a3a2f33322d3438203d3e20323638393833.roa
File:                     323830343a356461303a3a2f33322d3438203d3e20323638393833.roa (raw, json)
Hash identifier:          oFT104z7GVjF3Ahx0QOl5WIibDIVvX8FQCDBQ83P3kk=
Subject key identifier:   1B:1B:0A:C2:8B:B5:A8:53:07:45:77:18:9A:80:8E:85:28:00:52:A7
Certificate issuer:       /CN=2A790B703FC57FE302B0FA296C3687361CFE41E3
Certificate serial:       24EEFF48DB581895D4916EE4EB114FC8C3D30CA7
Authority key identifier: 2A:79:0B:70:3F:C5:7F:E3:02:B0:FA:29:6C:36:87:36:1C:FE:41:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A790B703FC57FE302B0FA296C3687361CFE41E3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/323830343a356461303a3a2f33322d3438203d3e20323638393833.roa
Signing time:             Tue 30 May 2023 18:42:00 +0000
ROA not before:           Tue 30 May 2023 18:37:00 +0000
ROA not after:            Tue 28 May 2024 18:42:00 +0000
asID:                     268983
IP address blocks:        2804:5da0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            24:ee:ff:48:db:58:18:95:d4:91:6e:e4:eb:11:4f:c8:c3:d3:0c:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2A790B703FC57FE302B0FA296C3687361CFE41E3
        Validity
            Not Before: May 30 18:37:00 2023 GMT
            Not After : May 28 18:42:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f7:2b:46:06:f0:98:13:ce:6a:09:29:68:a4:
                    3f:22:fb:17:18:af:9c:16:56:b5:19:8d:ff:c9:e4:
                    26:61:49:5d:09:18:f5:3b:30:78:3e:eb:84:5b:9c:
                    13:3b:19:fb:51:b1:e9:da:a9:3a:e3:9c:c5:7e:2e:
                    6d:6c:2d:1a:a4:4d:b4:e5:94:35:db:34:9a:2f:30:
                    8a:2a:07:cf:d3:01:82:f5:b4:23:fd:07:df:46:16:
                    31:4e:52:18:e4:de:b3:c9:04:85:db:59:c6:8a:6d:
                    e4:28:f6:8a:e4:f1:7b:e8:b4:d4:89:66:91:64:6e:
                    64:5a:f4:83:34:00:65:53:01:06:ad:4e:8b:93:6b:
                    9b:92:f6:9b:92:92:1f:88:0b:18:80:16:96:4a:6e:
                    1f:02:06:96:63:4a:39:d1:13:19:12:56:de:51:8c:
                    83:f6:11:9a:74:b6:59:d3:22:fe:c7:8d:f6:2d:be:
                    26:82:e3:d5:98:94:e3:36:17:d2:8b:96:97:5b:9c:
                    63:5a:cb:93:76:1e:b4:d5:64:0c:db:e6:54:e2:bc:
                    b3:1a:3a:e2:0d:f0:22:07:3b:65:d1:95:69:20:8a:
                    c6:74:e4:2a:b7:79:05:96:eb:91:33:91:f3:62:f6:
                    12:9c:a3:d5:69:ee:23:87:3e:6b:27:87:bd:66:32:
                    50:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1B:1B:0A:C2:8B:B5:A8:53:07:45:77:18:9A:80:8E:85:28:00:52:A7
            X509v3 Authority Key Identifier:
                keyid:2A:79:0B:70:3F:C5:7F:E3:02:B0:FA:29:6C:36:87:36:1C:FE:41:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/2A790B703FC57FE302B0FA296C3687361CFE41E3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2A790B703FC57FE302B0FA296C3687361CFE41E3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/13FZ8aVq5AEToR3nsCz4ZUb12TPbW5khVAq9FNGDu47r/0/323830343a356461303a3a2f33322d3438203d3e20323638393833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5da0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a6:d3:6f:67:69:b0:e2:08:68:2e:02:41:5d:f4:c6:85:e6:58:
         e1:61:8d:33:7c:f4:b6:99:4f:c5:e2:7d:0d:94:fd:b2:95:03:
         59:68:d4:48:bf:62:ec:2f:31:66:3b:a9:dc:67:5f:16:da:c9:
         37:d2:f1:91:e5:8c:02:0e:88:eb:e2:b7:eb:23:7b:67:74:dc:
         6a:da:09:0c:1d:a4:e6:7f:3d:3f:d2:3b:a2:b0:42:ca:00:0d:
         8a:3c:de:66:6f:02:4f:ec:24:c9:58:31:76:2c:20:6c:5c:ee:
         74:1b:21:6b:3a:ca:7b:3a:9b:9a:21:95:1e:e2:76:39:09:2f:
         b0:e1:2e:0c:75:36:7f:0a:f7:02:be:d3:61:e5:10:30:f9:9a:
         14:68:b9:f1:a8:ce:a7:43:f4:f8:31:e9:5b:1d:b7:a3:65:8c:
         7d:95:3d:a4:cf:36:08:10:c5:1c:01:8d:c5:22:1c:ca:b3:69:
         43:8d:6c:ff:25:92:78:74:88:95:de:fd:1b:d6:7a:30:1d:ef:
         1c:2a:df:a2:bf:38:23:f8:71:59:7c:38:15:e2:77:93:e0:cd:
         18:15:57:aa:f9:81:e5:98:24:66:f0:73:cc:72:74:5a:a6:17:
         04:a5:fe:26:ae:2b:6d:3c:4f:33:0a:41:a9:07:c3:b2:02:f6:
         c4:67:19:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:16 2024 by rpki-client on console-fra.rpki-client.org