Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3333383a3a2f34362d3436203d3e20323632343539.roa
File:                     323830343a3462303a3333383a3a2f34362d3436203d3e20323632343539.roa (raw, json)
Hash identifier:          /lFbJvB5vP7E4YTNmZLboEmLPKCGfCsLGhr3uGmyFOE=
Subject key identifier:   11:AC:60:E0:DA:9B:91:51:1E:E5:07:45:89:71:F1:E4:D2:6A:6B:DE
Certificate issuer:       /CN=1C5863392E99A282843AC6397A9E024E91731642
Certificate serial:       3A02CCFA7ABDE1B4857F710D90B979FB61B988B9
Authority key identifier: 1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3333383a3a2f34362d3436203d3e20323632343539.roa
Signing time:             Tue 30 Jan 2024 13:00:20 +0000
ROA not before:           Tue 30 Jan 2024 12:55:20 +0000
ROA not after:            Tue 28 Jan 2025 13:00:20 +0000
asID:                     262459
IP address blocks:        2804:4b0:338::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:02:cc:fa:7a:bd:e1:b4:85:7f:71:0d:90:b9:79:fb:61:b9:88:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C5863392E99A282843AC6397A9E024E91731642
        Validity
            Not Before: Jan 30 12:55:20 2024 GMT
            Not After : Jan 28 13:00:20 2025 GMT
        Subject: CN=11AC60E0DA9B91511EE507458971F1E4D26A6BDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9e:18:26:93:de:eb:d6:09:e0:a8:45:51:9d:b6:
                    fd:a5:2c:b1:5c:65:e5:fb:7a:48:7b:76:c7:3d:d0:
                    cf:24:eb:33:06:82:df:17:a1:3e:5e:97:34:41:37:
                    4e:40:20:ef:a4:90:15:0a:f8:fe:46:f2:e2:0a:84:
                    ff:8d:fe:00:73:c0:98:a1:60:8a:dc:bb:0a:51:38:
                    3d:d4:ca:b1:59:8f:44:c0:33:0c:1d:75:8e:a8:2c:
                    f2:3d:a2:da:7a:d5:30:c7:65:3e:1d:5a:7d:b3:70:
                    91:86:c4:c5:bb:e0:20:13:a8:b7:f1:b0:f0:59:8a:
                    79:90:b9:ac:97:9d:80:b4:ea:86:13:32:23:15:ef:
                    23:69:de:9c:68:34:b5:12:dc:b6:7f:36:e4:d3:e7:
                    12:15:2a:6a:a6:8e:5e:56:bc:00:a5:db:65:8c:8a:
                    bb:96:bb:e2:25:54:68:71:37:7b:3d:16:05:10:4d:
                    d2:33:a8:21:2d:62:74:87:ef:55:28:ce:d8:b3:c7:
                    96:8f:b4:38:2c:da:ab:e2:a8:e7:4e:ae:66:f6:ab:
                    80:3b:6a:78:85:0f:f3:36:f8:a1:af:85:d6:b6:a4:
                    65:02:45:5b:00:d2:43:02:b9:ef:a8:3c:10:c7:99:
                    52:90:82:29:01:34:bd:e9:46:5b:64:5d:d9:af:14:
                    1c:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:AC:60:E0:DA:9B:91:51:1E:E5:07:45:89:71:F1:E4:D2:6A:6B:DE
            X509v3 Authority Key Identifier:
                keyid:1C:58:63:39:2E:99:A2:82:84:3A:C6:39:7A:9E:02:4E:91:73:16:42

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/1C5863392E99A282843AC6397A9E024E91731642.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C5863392E99A282843AC6397A9E024E91731642.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/28HswoyK3gi3NU3PyzjosXsgTUA6hUcbPVua3kbw7JEp/0/323830343a3462303a3333383a3a2f34362d3436203d3e20323632343539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b0:338::/46

    Signature Algorithm: sha256WithRSAEncryption
         97:2c:ee:f2:4b:de:37:e2:c4:0b:ba:9b:de:14:93:04:88:02:
         b9:b8:cb:c5:9d:6b:d8:48:dc:93:f2:93:cc:50:1e:98:7f:53:
         02:8f:bf:6a:f1:9f:a3:1f:30:af:45:c7:fa:53:51:6f:39:6e:
         a8:7d:c8:37:28:ed:81:b1:36:1d:62:f3:9f:00:c1:3b:3c:0a:
         f1:7f:68:f7:73:2e:fb:b8:a6:79:74:58:c9:64:3c:69:76:7e:
         ff:b5:c3:fe:cd:ec:ff:00:cd:70:4f:c2:4b:3a:57:a5:81:e7:
         3c:ca:b4:17:0c:fa:68:d3:b7:ca:bb:07:4b:bb:fc:64:02:8f:
         db:4b:65:ab:c1:69:9f:40:62:f5:ee:cd:fa:65:e5:55:57:8e:
         e3:0a:94:81:03:92:60:97:9e:d2:b9:9b:bb:ea:8b:56:8c:1b:
         50:92:fa:42:3b:cc:f7:29:32:37:bb:f3:3b:31:93:e3:3f:f5:
         73:5d:16:60:c9:35:13:27:35:7b:7c:82:de:49:0a:6d:d6:73:
         c1:ac:99:e3:56:80:9c:52:bf:52:1c:d1:bc:0c:19:73:7f:b3:
         52:34:ca:c3:dd:12:91:6e:17:00:d0:56:bc:c7:50:9c:e3:e3:
         fb:3d:36:81:53:30:2e:80:47:50:09:d9:69:66:ca:89:55:71:
         6c:bb:04:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org