Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/323830343a346566383a3a2f33322d3335203d3e20323638323935.roa
File:                     323830343a346566383a3a2f33322d3335203d3e20323638323935.roa (raw, json)
Hash identifier:          F1Xii4yzguut7DvknK/lfn2bIPuexkuOpmxBnx3tqE0=
Subject key identifier:   9B:90:37:9D:F5:F2:AD:F2:FC:04:9B:84:07:FF:1F:0C:78:95:EF:31
Certificate issuer:       /CN=9447D2427FA197D3E45945D47D680D6B09428530
Certificate serial:       44434E78F37D60CA98C1644DF73014E7AB9DD9F2
Authority key identifier: 94:47:D2:42:7F:A1:97:D3:E4:59:45:D4:7D:68:0D:6B:09:42:85:30
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9447D2427FA197D3E45945D47D680D6B09428530.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/323830343a346566383a3a2f33322d3335203d3e20323638323935.roa
Signing time:             Thu 08 Feb 2024 20:18:42 +0000
ROA not before:           Thu 08 Feb 2024 20:13:42 +0000
ROA not after:            Thu 06 Feb 2025 20:18:42 +0000
asID:                     268295
IP address blocks:        2804:4ef8::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:43:4e:78:f3:7d:60:ca:98:c1:64:4d:f7:30:14:e7:ab:9d:d9:f2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9447D2427FA197D3E45945D47D680D6B09428530
        Validity
            Not Before: Feb  8 20:13:42 2024 GMT
            Not After : Feb  6 20:18:42 2025 GMT
        Subject: CN=9B90379DF5F2ADF2FC049B8407FF1F0C7895EF31
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:15:97:f8:54:cb:63:b6:9f:50:1d:14:66:e0:
                    06:24:b7:51:65:e6:52:a5:52:bd:cd:30:05:5a:b9:
                    d1:98:93:60:bb:28:47:55:13:2d:16:6e:16:2e:ba:
                    94:41:a4:1c:41:ff:61:d7:67:ae:59:e1:46:74:48:
                    7e:72:a0:da:68:ad:41:67:bf:2b:ea:8b:ce:58:87:
                    af:2a:ec:3d:c6:67:36:67:89:e7:04:1f:ca:07:93:
                    ac:c2:3f:c4:99:15:96:2d:7a:42:51:11:a1:0b:ec:
                    7c:51:18:d6:a3:96:d5:10:7e:5c:32:b5:a5:5b:4f:
                    42:ba:0d:a9:6e:f4:90:60:5d:2c:20:1a:18:2a:f6:
                    7e:6c:9a:34:6e:45:df:a1:49:24:cc:2d:7a:19:ab:
                    d2:6c:a1:eb:01:98:38:c8:e1:6e:cf:95:0d:15:0b:
                    65:ea:8b:4f:41:49:bd:6b:b5:56:1f:8c:8b:f0:69:
                    a9:9f:8d:d1:d1:6a:a4:60:c4:a8:c5:b6:4b:fb:4a:
                    ef:3f:11:95:25:f6:99:c7:5d:39:63:39:2b:1f:89:
                    38:be:f9:75:25:49:fe:85:87:7b:fb:2a:be:af:bd:
                    10:df:0a:ea:e3:39:b9:6c:b9:fa:6c:79:49:72:ce:
                    6c:5b:bd:d0:14:14:e3:b5:8a:ba:a8:db:40:b8:9f:
                    e9:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:90:37:9D:F5:F2:AD:F2:FC:04:9B:84:07:FF:1F:0C:78:95:EF:31
            X509v3 Authority Key Identifier:
                keyid:94:47:D2:42:7F:A1:97:D3:E4:59:45:D4:7D:68:0D:6B:09:42:85:30

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/9447D2427FA197D3E45945D47D680D6B09428530.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9447D2427FA197D3E45945D47D680D6B09428530.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2DGz1c5AV3YSwGNpuREFdp16D64Xnf4xr4MqENLGqHro/0/323830343a346566383a3a2f33322d3335203d3e20323638323935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ef8::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:fb:f7:43:71:fd:ab:bb:7c:be:70:ae:62:4c:5f:87:28:5e:
         5b:5e:86:a1:a7:ef:66:b7:0c:14:bd:80:1b:39:0e:96:62:dc:
         4d:3b:56:13:14:80:49:80:f5:8a:40:3d:d9:7f:42:2f:43:c7:
         e3:25:27:00:da:d4:08:8e:db:f6:21:e3:5f:b2:ff:a0:9b:3f:
         78:67:e3:49:e8:e0:58:cf:8a:2e:f5:dd:a6:3c:12:9d:03:f6:
         9a:48:46:30:e3:26:33:78:8b:d6:f2:64:3a:3d:df:33:df:88:
         0b:29:00:85:f8:ed:5e:71:28:c7:89:21:16:b8:af:0f:ca:ee:
         82:83:05:1f:a0:bd:89:8e:b4:c0:fb:ec:ef:24:05:70:44:0a:
         6a:e4:ed:20:a0:34:31:35:e1:ac:f6:14:20:ef:4c:4e:f0:a3:
         32:06:43:74:11:75:56:39:e1:8c:c9:37:23:f3:b2:88:62:0d:
         a1:e1:62:4e:ef:e6:51:d7:5f:6c:8c:8d:76:8d:7f:b7:1a:a7:
         51:ed:c6:82:8b:ec:d1:73:7d:54:c6:b3:9b:39:d8:19:61:6a:
         fe:e6:dd:80:35:0f:dc:94:6c:f7:00:7b:21:75:23:c9:d0:9f:
         25:51:ea:f4:ad:30:b2:d9:49:59:01:d0:8b:24:64:32:df:aa:
         d8:69:08:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:18 2024 by rpki-client on console-fra.rpki-client.org