Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a3a2f33322d3332203d3e20323635323431.roa
File:                     323830343a326363303a3a2f33322d3332203d3e20323635323431.roa (raw, json)
Hash identifier:          9VriThPNRjmULjmyIG10RX5jxcawXqNLlnb4RxMtNmc=
Subject key identifier:   EB:72:64:54:51:A3:EF:72:F7:D3:E4:C1:23:E8:5E:82:0E:35:32:9E
Certificate issuer:       /CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
Certificate serial:       144F98A8821A61F3A57231BA6A8D0B4DEB0C0F7B
Authority key identifier: 15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a3a2f33322d3332203d3e20323635323431.roa
Signing time:             Thu 04 Apr 2024 23:07:38 +0000
ROA not before:           Thu 04 Apr 2024 23:02:38 +0000
ROA not after:            Thu 03 Apr 2025 23:07:38 +0000
asID:                     265241
IP address blocks:        2804:2cc0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:4f:98:a8:82:1a:61:f3:a5:72:31:ba:6a:8d:0b:4d:eb:0c:0f:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=15F445D08CF8B48A7724CDD35F0A54D5425E3CBA
        Validity
            Not Before: Apr  4 23:02:38 2024 GMT
            Not After : Apr  3 23:07:38 2025 GMT
        Subject: CN=EB72645451A3EF72F7D3E4C123E85E820E35329E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:c3:54:30:ec:2b:11:ab:e9:8d:01:a7:9e:c5:
                    57:39:1e:57:4f:c8:04:d2:8b:72:ed:39:de:e6:17:
                    c0:ae:b1:c7:8f:a8:94:7e:a8:9d:71:c9:c7:49:1f:
                    cc:c8:34:e7:ba:5a:45:96:46:1d:61:03:84:79:94:
                    cf:90:87:6b:2c:e1:55:46:5d:5a:5f:e4:13:62:7d:
                    06:27:9c:be:eb:57:76:12:7e:a3:2a:93:5e:38:9d:
                    b4:ae:26:f6:92:cb:d2:40:d9:84:a2:bd:5d:16:4d:
                    56:69:13:63:b8:ce:2b:7f:b0:fb:9c:ed:26:84:b4:
                    ef:fc:16:4d:1c:9a:07:7a:42:84:38:77:46:9a:41:
                    51:91:fd:9d:92:cf:bc:4e:ae:19:f5:66:82:36:d9:
                    78:2f:8d:14:7d:a7:2e:22:c5:5a:7e:5e:1d:a8:05:
                    26:6a:24:be:92:32:71:c3:80:ad:2a:fb:20:30:30:
                    5f:57:ce:09:c8:79:c2:a3:46:42:10:fe:19:fe:85:
                    68:43:3f:c2:f8:ee:c7:b6:c9:7e:7a:ba:a8:6d:21:
                    f1:b9:09:bb:f9:2f:21:c6:4d:93:93:0c:67:0d:fc:
                    71:da:72:b1:80:50:03:0d:b2:ee:50:65:23:bb:4e:
                    2f:3e:74:80:1f:85:b1:80:1c:27:28:e8:b2:7a:61:
                    3b:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:72:64:54:51:A3:EF:72:F7:D3:E4:C1:23:E8:5E:82:0E:35:32:9E
            X509v3 Authority Key Identifier:
                keyid:15:F4:45:D0:8C:F8:B4:8A:77:24:CD:D3:5F:0A:54:D5:42:5E:3C:BA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/15F445D08CF8B48A7724CDD35F0A54D5425E3CBA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2NsC1oQWTv29eS8bGpZqEAjQB7yevpd1ocRuhqaeSPJm/1/323830343a326363303a3a2f33322d3332203d3e20323635323431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2cc0::/32

    Signature Algorithm: sha256WithRSAEncryption
         41:10:b9:eb:d6:a3:68:b6:da:6b:50:ba:a9:49:13:7c:42:f6:
         81:1b:7f:8a:e6:f8:df:39:61:5b:57:a1:6c:da:33:e4:f8:09:
         ca:d0:f5:01:34:78:a5:7a:75:76:5c:6b:85:10:24:d8:8d:6e:
         e7:82:51:8f:18:dd:ea:a7:e6:af:a5:74:c7:a3:bb:32:b4:20:
         8c:52:b7:db:7a:e4:18:d0:a3:4b:21:79:3b:9b:b1:43:1f:cc:
         2b:bd:03:70:1a:fd:16:01:c7:55:e7:ca:02:e7:f8:ad:42:eb:
         2f:ca:6e:10:4a:a6:76:80:90:07:1a:82:30:cb:32:b4:60:b3:
         e5:00:02:6b:42:17:34:d6:2a:9c:39:82:83:1c:cd:2b:3b:c9:
         db:1e:80:b7:eb:b1:0e:9f:4b:cd:13:7e:6f:bf:a7:54:48:14:
         4b:ff:f1:69:2a:52:ce:e4:f3:3f:3d:ff:4f:11:fb:84:1a:f0:
         5d:12:ee:1d:da:b5:7f:6b:b9:4e:f2:d7:c9:ac:f7:26:95:76:
         49:e0:ff:95:b7:dc:68:da:bf:f2:cd:a9:c1:2a:85:61:11:e5:
         cd:c8:c7:bf:4a:b1:b3:23:c1:16:e1:78:c6:22:c4:ad:d5:b6:
         b5:94:14:da:5f:2d:83:2d:6a:a1:c2:62:48:84:f3:86:04:3d:
         c6:73:8f:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:19 2024 by rpki-client on console-fra.rpki-client.org