Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/323830343a323062343a3a2f33322d3332203d3e20323634353039.roa
File:                     323830343a323062343a3a2f33322d3332203d3e20323634353039.roa (raw, json)
Hash identifier:          gLc8O8zrfIZiWIqNE37KNz8z02Zf3l0xVofj5MnTJ9o=
Subject key identifier:   50:42:AD:58:E2:7B:CC:22:DD:22:6A:90:1F:1F:AD:89:8A:8B:4E:03
Certificate issuer:       /CN=1425E96015DE13B67E1065F8E62962A71308FD33
Certificate serial:       6FDFD28432FB34B6A544FC25B5650731532F33A5
Authority key identifier: 14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/323830343a323062343a3a2f33322d3332203d3e20323634353039.roa
Signing time:             Tue 02 Jan 2024 12:00:00 +0000
ROA not before:           Tue 02 Jan 2024 11:55:00 +0000
ROA not after:            Tue 31 Dec 2024 12:00:00 +0000
asID:                     264509
IP address blocks:        2804:20b4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:df:d2:84:32:fb:34:b6:a5:44:fc:25:b5:65:07:31:53:2f:33:a5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1425E96015DE13B67E1065F8E62962A71308FD33
        Validity
            Not Before: Jan  2 11:55:00 2024 GMT
            Not After : Dec 31 12:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:12:18:6b:91:7a:fe:ed:ff:90:c2:42:89:36:
                    43:e7:90:77:ad:06:39:83:c3:ce:63:97:db:14:43:
                    cd:84:c0:66:d3:6a:63:46:44:1b:d5:b0:74:d0:75:
                    00:27:28:b6:5f:4c:9f:9b:a7:43:48:81:34:71:07:
                    e7:6a:80:8e:c5:01:29:61:cf:80:47:50:34:4e:38:
                    0f:ba:6c:e0:f1:fb:1b:0d:d8:ab:0e:15:23:4d:e9:
                    18:4c:6a:d2:7d:56:21:98:2a:ce:c6:33:f4:c8:78:
                    d2:e1:7e:1f:ff:40:8d:8f:37:71:56:32:ad:63:d6:
                    aa:d1:54:49:8a:63:3e:ef:f9:69:62:7b:8a:d6:a1:
                    c3:79:2d:db:34:94:65:22:4b:7e:dd:a8:c1:30:97:
                    de:63:2b:6e:99:82:07:0e:29:84:4f:e1:6e:c7:76:
                    a5:7a:fe:96:a9:4c:59:62:c3:74:1b:04:0d:8c:21:
                    0d:85:7b:58:1d:64:05:a7:4a:4b:b1:1d:7c:98:5e:
                    fe:89:af:2f:e9:ba:8f:99:11:5d:78:7f:c1:cf:ae:
                    42:ea:07:df:1c:a1:d3:b3:8e:de:36:65:51:09:04:
                    28:8d:a8:73:be:ab:b2:0f:32:2b:92:27:50:6f:10:
                    81:69:6b:4e:ba:b3:6d:58:84:f7:40:a4:53:fa:b3:
                    f2:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:42:AD:58:E2:7B:CC:22:DD:22:6A:90:1F:1F:AD:89:8A:8B:4E:03
            X509v3 Authority Key Identifier:
                keyid:14:25:E9:60:15:DE:13:B6:7E:10:65:F8:E6:29:62:A7:13:08:FD:33

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/1425E96015DE13B67E1065F8E62962A71308FD33.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1425E96015DE13B67E1065F8E62962A71308FD33.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3G4e5sUsBr2AHSw7wgNSinVxwWxqnQoZBj66xx4kBYmC/0/323830343a323062343a3a2f33322d3332203d3e20323634353039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:5b:89:f1:97:23:eb:1b:3b:64:24:bd:b0:c2:48:b7:dd:ef:
         c9:d5:64:20:5c:31:77:3d:d4:cc:92:dd:53:99:ad:6e:c1:56:
         a9:54:77:80:c4:28:ed:ba:5d:1b:b1:a6:e0:50:41:d5:b4:bb:
         9c:84:b2:2f:d0:9e:d4:b8:cb:29:de:65:1f:22:8f:47:6c:18:
         09:a4:a9:75:d6:db:54:ff:bb:98:85:00:a1:a9:91:2b:83:84:
         bf:df:f2:09:1f:f1:14:d2:87:28:55:9f:d6:ca:40:14:3f:4f:
         11:10:9b:42:1f:a9:dc:b9:37:f4:49:df:a2:1d:22:79:af:a4:
         95:b2:42:8c:42:3c:e2:51:b5:a8:77:e8:9e:46:96:b0:fb:8f:
         04:2d:41:68:56:ac:1d:8e:dd:95:ea:d9:de:48:ec:72:d1:42:
         df:5c:4c:48:44:72:cd:8d:94:44:4f:5a:4e:cc:32:27:31:98:
         9d:19:d5:01:ee:97:76:04:94:dc:d2:5f:e5:94:38:f3:32:98:
         d5:a8:f2:1f:c5:6d:90:9a:dd:73:83:53:89:56:fa:2c:bc:e4:
         cc:7d:f4:b9:49:8e:79:00:1d:f8:67:77:15:89:8f:38:7e:c4:
         1d:4a:c4:db:57:aa:56:5a:e5:2f:fd:0f:fa:06:5d:f7:32:9a:
         99:c9:c1:33
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org