Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a3a2f33322d313238203d3e20323639303730.roa
File:                     323830343a356630303a3a2f33322d313238203d3e20323639303730.roa (raw, json)
Hash identifier:          /3+07jvlS2a6Ac3cEuDIzdnWChHpveQahAwTivyY7Bo=
Subject key identifier:   76:DA:D5:46:3F:7F:F3:2A:0D:3A:DA:56:80:AD:AB:B1:F7:3B:09:94
Certificate issuer:       /CN=502248B719FD13C9281385732A8072536E8D0577
Certificate serial:       1049293CC309EC8B989429E9D61498168DECD10C
Authority key identifier: 50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a3a2f33322d313238203d3e20323639303730.roa
Signing time:             Mon 31 Jul 2023 21:22:37 +0000
ROA not before:           Mon 31 Jul 2023 21:17:37 +0000
ROA not after:            Mon 29 Jul 2024 21:22:37 +0000
asID:                     269070
IP address blocks:        2804:5f00::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:49:29:3c:c3:09:ec:8b:98:94:29:e9:d6:14:98:16:8d:ec:d1:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=502248B719FD13C9281385732A8072536E8D0577
        Validity
            Not Before: Jul 31 21:17:37 2023 GMT
            Not After : Jul 29 21:22:37 2024 GMT
        Subject: CN=3082010A0282010100F7AACAFDD2376293F0E1262E1BDA122CEC98EF8D599F74D805A232C2028075BE712471EE9B3032FE026A3CD5B251C3B2D48A1C511D1FCF976FF54461D18AF73A41ADF7E6523BEEE0EB5B04C460C8DDC77E177BD4AFA8DF4905F92F74AFB00A0F3A9468D0847BF3C35E0B8F2821C592CE25071DC1A92CA320AAC4175C189B9C47A459FC41A9C487788B968FF72230605C6D80EA294D1F8CEDF624D545142FC3898480BB8679B98D949E02234A2EF7D63E269451A81346E78DFBD3F5755BC4FC333341B38A96BD538F2E24D0BD120A16BE5AB47C503CE2A3DA57DA9352C7E99F6F8050024E28191F0A6170DAA7679755C32BB40E044E6EC4300430B919D842CD9F0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f7:aa:ca:fd:d2:37:62:93:f0:e1:26:2e:1b:da:
                    12:2c:ec:98:ef:8d:59:9f:74:d8:05:a2:32:c2:02:
                    80:75:be:71:24:71:ee:9b:30:32:fe:02:6a:3c:d5:
                    b2:51:c3:b2:d4:8a:1c:51:1d:1f:cf:97:6f:f5:44:
                    61:d1:8a:f7:3a:41:ad:f7:e6:52:3b:ee:e0:eb:5b:
                    04:c4:60:c8:dd:c7:7e:17:7b:d4:af:a8:df:49:05:
                    f9:2f:74:af:b0:0a:0f:3a:94:68:d0:84:7b:f3:c3:
                    5e:0b:8f:28:21:c5:92:ce:25:07:1d:c1:a9:2c:a3:
                    20:aa:c4:17:5c:18:9b:9c:47:a4:59:fc:41:a9:c4:
                    87:78:8b:96:8f:f7:22:30:60:5c:6d:80:ea:29:4d:
                    1f:8c:ed:f6:24:d5:45:14:2f:c3:89:84:80:bb:86:
                    79:b9:8d:94:9e:02:23:4a:2e:f7:d6:3e:26:94:51:
                    a8:13:46:e7:8d:fb:d3:f5:75:5b:c4:fc:33:33:41:
                    b3:8a:96:bd:53:8f:2e:24:d0:bd:12:0a:16:be:5a:
                    b4:7c:50:3c:e2:a3:da:57:da:93:52:c7:e9:9f:6f:
                    80:50:02:4e:28:19:1f:0a:61:70:da:a7:67:97:55:
                    c3:2b:b4:0e:04:4e:6e:c4:30:04:30:b9:19:d8:42:
                    cd:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:DA:D5:46:3F:7F:F3:2A:0D:3A:DA:56:80:AD:AB:B1:F7:3B:09:94
            X509v3 Authority Key Identifier:
                keyid:50:22:48:B7:19:FD:13:C9:28:13:85:73:2A:80:72:53:6E:8D:05:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/502248B719FD13C9281385732A8072536E8D0577.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/502248B719FD13C9281385732A8072536E8D0577.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3JGkZ9wS8pGxAkDR55EPXu1PXih9r1vZcTBCVUztYiQe/0/323830343a356630303a3a2f33322d313238203d3e20323639303730.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f00::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:95:b1:31:ca:ec:e1:7f:60:2a:21:d6:4c:07:79:5c:1c:8d:
         36:c3:15:5f:ae:2c:e8:a4:f6:ad:52:54:a9:0c:ae:a7:46:58:
         e3:29:7f:73:4d:5f:18:ab:22:3d:2d:3e:51:23:dd:aa:c9:c7:
         ed:93:50:52:91:98:d1:e9:3d:e6:48:e1:fb:9c:6a:ea:b1:f4:
         53:a7:f0:32:20:c1:73:4e:2c:e4:d4:b6:fc:f0:d1:61:cd:95:
         59:a5:83:3e:2c:b5:2f:37:14:e0:c6:ed:fe:10:97:c9:41:32:
         fd:01:88:80:4b:bb:25:9d:ae:fd:c1:dc:85:b0:1c:2b:31:d0:
         9f:7b:7d:bc:d4:54:c3:91:98:ca:bc:13:0f:fa:75:0c:42:18:
         cd:7f:ae:bf:bd:e0:88:bb:e3:6c:13:5a:b1:0d:f1:97:ce:d8:
         dd:c1:b4:0c:77:ca:01:76:22:fd:be:63:a3:93:8d:29:81:47:
         08:aa:81:7d:d2:b0:5c:90:c7:a9:32:f6:4d:1e:8c:c5:7d:d6:
         7c:ae:b6:8d:13:73:fe:10:83:b5:0d:52:6f:00:d8:8e:2c:26:
         92:ef:6d:86:15:09:5d:76:09:38:fc:9e:b7:51:34:ac:b2:f6:
         0c:3f:7c:c4:3e:1c:df:23:ef:f4:f9:c5:22:60:14:08:6b:23:
         7d:12:e7:bd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org