Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/0/323830343a343137343a3a2f33322d3332203d3e20323637343334.roa
File:                     323830343a343137343a3a2f33322d3332203d3e20323637343334.roa (raw, json)
Hash identifier:          4Hz5nMMKmwwzPElqz/7BR6P2CXtQVcEU+i/hxu2RhMQ=
Subject key identifier:   43:AB:D3:93:9E:13:D0:D7:C9:32:2C:DF:AE:6B:B9:A1:94:1F:68:DD
Certificate issuer:       /CN=2ED4A75C3B268064A6DAF31B405A577C5C320F23
Certificate serial:       0758B59F07348B18B4F426489051875B162AF075
Authority key identifier: 2E:D4:A7:5C:3B:26:80:64:A6:DA:F3:1B:40:5A:57:7C:5C:32:0F:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ED4A75C3B268064A6DAF31B405A577C5C320F23.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/0/323830343a343137343a3a2f33322d3332203d3e20323637343334.roa
Signing time:             Tue 20 Feb 2024 13:41:44 +0000
ROA not before:           Tue 20 Feb 2024 13:36:44 +0000
ROA not after:            Tue 18 Feb 2025 13:41:44 +0000
asID:                     267434
IP address blocks:        2804:4174::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            07:58:b5:9f:07:34:8b:18:b4:f4:26:48:90:51:87:5b:16:2a:f0:75
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2ED4A75C3B268064A6DAF31B405A577C5C320F23
        Validity
            Not Before: Feb 20 13:36:44 2024 GMT
            Not After : Feb 18 13:41:44 2025 GMT
        Subject: CN=43ABD3939E13D0D7C9322CDFAE6BB9A1941F68DD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:cb:ac:c5:9f:c2:0a:52:7e:a9:b2:85:80:f6:
                    e0:47:b9:47:05:f6:90:aa:54:37:f2:d7:03:07:94:
                    58:28:0a:aa:47:98:7d:cc:b0:0c:cf:ea:4e:16:91:
                    73:1c:da:02:af:bc:28:83:a5:ec:71:95:69:01:f7:
                    10:30:84:db:e8:b0:6f:01:4d:8d:59:e2:44:6a:69:
                    bf:80:5d:0a:84:16:ee:e5:4e:f2:1a:e2:b9:e6:da:
                    31:cc:d6:58:87:e3:a8:81:ce:91:69:5a:2a:6d:f7:
                    21:04:b5:f4:21:15:bd:13:7e:10:ce:5d:e6:85:5c:
                    63:6e:9d:df:ee:7f:ec:e0:10:e6:cb:60:ad:bf:3a:
                    39:2c:d1:4b:60:e3:8c:d7:f1:88:57:4b:d2:e4:f9:
                    3c:3f:1a:48:ff:dd:68:5b:a5:b5:21:c5:60:b4:8a:
                    07:b9:75:90:13:f3:b8:c7:2d:16:c6:3c:da:fe:00:
                    83:e2:0f:a0:d6:17:14:b7:08:cb:01:50:c5:35:53:
                    49:ac:7c:4f:b5:0b:93:66:ff:72:49:b1:a3:80:f0:
                    db:d5:ce:32:e0:99:a0:d3:a1:73:1e:b8:3f:7c:40:
                    e3:3d:70:92:a0:ca:a4:b9:34:e7:53:c3:5d:f8:bb:
                    22:d4:13:9f:93:51:aa:06:67:56:a8:12:94:4e:fc:
                    bc:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:AB:D3:93:9E:13:D0:D7:C9:32:2C:DF:AE:6B:B9:A1:94:1F:68:DD
            X509v3 Authority Key Identifier:
                keyid:2E:D4:A7:5C:3B:26:80:64:A6:DA:F3:1B:40:5A:57:7C:5C:32:0F:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/0/2ED4A75C3B268064A6DAF31B405A577C5C320F23.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2ED4A75C3B268064A6DAF31B405A577C5C320F23.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3K7adNY6QLXq8CAHJyRfhBJmVC93XWBnvkcHP2smgFkT/0/323830343a343137343a3a2f33322d3332203d3e20323637343334.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4174::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:b8:4c:fe:6a:cc:33:ff:66:3e:da:ee:c3:c2:1f:02:a2:7b:
         19:ca:e8:9d:83:a2:a4:c1:9c:96:83:be:a6:51:fa:16:c6:f4:
         81:16:94:9f:fc:df:68:db:fa:4e:10:be:43:ff:12:b3:af:a7:
         76:98:13:33:c1:9b:ff:81:2c:74:fa:94:18:5c:3b:34:10:1d:
         cd:7d:42:f5:8c:ad:93:4e:69:4b:4d:51:bf:af:0d:34:3e:78:
         59:38:8a:5f:39:3e:54:41:05:2f:d2:d2:42:a9:41:5a:0e:16:
         77:70:5e:ae:7c:ee:1b:b9:3d:b3:91:37:a5:36:90:22:0b:17:
         c8:22:63:fc:a4:b1:f1:dc:86:47:44:4b:26:f0:f4:ad:31:13:
         06:92:1d:71:62:ed:86:c2:a1:c9:e5:1a:c9:86:d9:44:6a:94:
         39:fd:2e:6b:57:0a:96:fc:e4:4e:fd:e4:8e:91:fb:dd:ba:06:
         7a:c4:14:1a:b9:8e:c2:08:54:72:ae:a1:10:64:9a:bf:d2:5f:
         03:76:32:66:b9:f5:15:a3:5c:2b:c0:1f:e9:fe:d0:1e:59:a8:
         5c:19:d1:4e:9c:93:2f:2b:19:bb:ce:ad:41:ba:41:03:19:eb:
         2a:13:86:9f:ff:dd:25:7a:bc:7c:83:07:91:e9:9a:30:b3:80:
         7b:82:09:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org