Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a3a2f33342d3334203d3e20323632393432.roa
File:                     323830343a6533383a3a2f33342d3334203d3e20323632393432.roa (raw, json)
Hash identifier:          ofK0ZYMRDkNzHL1VzKcR05PoTULP9GxMWoTUGKjd/V4=
Subject key identifier:   1A:2B:4E:C8:C3:27:90:A3:A3:AF:7C:7A:DD:AD:01:36:7B:30:0B:05
Certificate issuer:       /CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
Certificate serial:       78FBAA59DDA6341791DE92B46C05A083DF25163C
Authority key identifier: DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a3a2f33342d3334203d3e20323632393432.roa
Signing time:             Fri 24 Nov 2023 14:04:48 +0000
ROA not before:           Fri 24 Nov 2023 13:59:48 +0000
ROA not after:            Fri 22 Nov 2024 14:04:48 +0000
asID:                     262942
IP address blocks:        2804:e38::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            78:fb:aa:59:dd:a6:34:17:91:de:92:b4:6c:05:a0:83:df:25:16:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE8D427A942D63B84D776E9925FD8C87CEB4E389
        Validity
            Not Before: Nov 24 13:59:48 2023 GMT
            Not After : Nov 22 14:04:48 2024 GMT
        Subject: CN=1A2B4EC8C32790A3A3AF7C7ADDAD01367B300B05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:dd:2d:30:65:4b:36:de:fe:98:59:fb:74:28:
                    7e:95:a0:b7:58:be:f6:9f:03:35:dc:c0:f2:65:f5:
                    f9:c7:47:69:31:82:bd:e5:bb:7f:af:ec:c8:30:25:
                    3d:62:72:bf:3c:17:11:93:57:28:17:52:de:2a:a5:
                    75:8c:74:c4:cf:d7:ef:1d:7d:d5:80:35:58:39:6b:
                    2f:ee:d5:a3:5c:ed:5d:d6:a9:00:b9:de:3b:87:ee:
                    b5:8a:99:0f:b6:8b:80:a0:41:55:39:fb:3d:35:3a:
                    f6:01:cc:7f:d7:a8:60:c0:e3:68:b5:12:0d:a4:18:
                    fc:1c:5b:35:da:0e:68:14:33:fa:16:26:5d:52:fb:
                    4b:aa:bd:f3:a5:77:d9:dd:ab:4c:88:64:4a:ec:8f:
                    85:45:5f:5f:32:06:13:10:d8:02:e2:32:1b:9b:5f:
                    ee:4c:b4:29:75:0e:47:04:f7:ad:43:52:9e:a6:6f:
                    76:83:83:f0:da:c3:29:c2:f6:ea:0e:09:f7:5b:f2:
                    9f:7f:f3:39:f9:1f:14:22:71:73:f4:8e:22:6b:b1:
                    05:41:41:2a:4a:5d:21:25:be:a2:ae:3e:f7:38:be:
                    1a:7f:e1:86:46:e8:5b:c0:c6:f6:54:22:3c:c5:ba:
                    47:20:7f:cc:72:20:71:f6:3b:c2:0c:30:e6:ab:b2:
                    5e:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:2B:4E:C8:C3:27:90:A3:A3:AF:7C:7A:DD:AD:01:36:7B:30:0B:05
            X509v3 Authority Key Identifier:
                keyid:DE:8D:42:7A:94:2D:63:B8:4D:77:6E:99:25:FD:8C:87:CE:B4:E3:89

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE8D427A942D63B84D776E9925FD8C87CEB4E389.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2VZ4ajdoiaTT5JZzzGkzaFjRrz5Aadj2rpG2vGWVRMEM/0/323830343a6533383a3a2f33342d3334203d3e20323632393432.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e38::/34

    Signature Algorithm: sha256WithRSAEncryption
         b0:0d:75:d9:6d:38:5c:44:2c:66:6b:ab:53:a0:4f:4f:8f:f4:
         12:45:32:e6:5f:61:49:c0:c6:bf:dd:0a:5f:d2:18:38:bc:a4:
         6b:2f:2b:40:fb:f7:b8:93:a9:c2:41:8f:dd:fb:01:a2:fe:46:
         76:6a:6b:fa:42:17:79:96:08:45:d3:e6:23:42:8f:b8:e2:42:
         e3:38:16:4b:35:0c:53:9c:a5:63:47:6e:07:70:0b:51:3a:1e:
         54:2d:a9:e0:7a:58:83:d7:fa:6e:3e:9d:57:f3:4a:57:5c:df:
         90:11:31:18:7e:9d:6e:41:69:d9:48:e5:3a:f8:b2:47:6d:19:
         c4:47:38:a7:4b:ac:ac:bd:fd:9c:70:32:5f:e1:41:06:fc:dc:
         f5:e8:8e:8a:f4:af:1e:8c:de:0b:41:01:dd:a1:8f:e6:18:72:
         da:da:20:64:32:ee:bd:84:be:d6:d7:e4:91:92:a0:9c:29:95:
         56:35:ba:9e:32:36:08:ad:3c:77:6b:fe:01:78:a5:d8:1e:ea:
         5b:25:d3:ce:49:11:a3:45:92:cb:e9:1f:36:12:74:f7:b1:1d:
         f6:37:80:5a:80:34:9b:c8:db:e5:b9:02:0b:d4:71:2c:5c:70:
         33:12:ca:ad:46:4f:cf:33:77:85:0e:0b:93:10:fb:18:49:c1:
         c0:9e:e7:28
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:20 2024 by rpki-client on console-fra.rpki-client.org