Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33322d3334203d3e20323731333837.roa
File:                     323830343a376162343a3a2f33322d3334203d3e20323731333837.roa (raw, json)
Hash identifier:          w0fD3gEtNlh7olodl58S/fxGjvgh/mNldlpkGmB4JSg=
Subject key identifier:   96:BB:7B:00:1D:7B:95:84:9C:5A:E2:99:C2:63:59:AA:45:AB:57:8A
Certificate issuer:       /CN=96D6AE6D52F298970A86B774958FB5B4488CAF64
Certificate serial:       7BE351E2DB2BA0BAE2D51078219F9670EC240851
Authority key identifier: 96:D6:AE:6D:52:F2:98:97:0A:86:B7:74:95:8F:B5:B4:48:8C:AF:64
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33322d3334203d3e20323731333837.roa
Signing time:             Thu 04 Jan 2024 13:31:53 +0000
ROA not before:           Thu 04 Jan 2024 13:26:53 +0000
ROA not after:            Thu 02 Jan 2025 13:31:53 +0000
asID:                     271387
IP address blocks:        2804:7ab4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:e3:51:e2:db:2b:a0:ba:e2:d5:10:78:21:9f:96:70:ec:24:08:51
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=96D6AE6D52F298970A86B774958FB5B4488CAF64
        Validity
            Not Before: Jan  4 13:26:53 2024 GMT
            Not After : Jan  2 13:31:53 2025 GMT
        Subject: CN=96BB7B001D7B95849C5AE299C26359AA45AB578A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:ea:8a:5b:26:75:a4:39:14:ea:0c:d2:67:84:
                    01:99:3b:85:a4:35:25:44:c1:2f:21:01:21:5d:88:
                    78:35:14:60:69:bf:49:f4:2e:9c:56:38:ac:d1:32:
                    da:0e:bb:f6:53:49:23:ab:7b:55:ce:c3:21:ec:8e:
                    8f:a5:c3:8c:09:3f:fb:c3:6e:44:b1:35:6d:07:b4:
                    53:a5:3c:a1:98:53:f9:e0:6f:af:03:fd:f0:4c:82:
                    a4:fa:04:42:36:b0:4b:4b:53:06:d8:46:6b:d3:18:
                    9b:15:ee:c8:e4:a7:7a:1f:cd:23:b8:72:a3:50:29:
                    15:43:8e:d4:d5:57:4b:4b:a4:90:80:ea:00:c3:ac:
                    8e:0d:a7:31:42:0b:9c:65:77:78:3a:08:bf:ae:6c:
                    5b:8a:f0:25:d2:25:47:59:67:41:6f:1f:ad:05:49:
                    32:0c:25:fe:c6:e0:f3:88:39:18:ca:31:8b:61:4d:
                    26:50:d0:50:42:47:28:1c:16:33:e6:f2:01:f5:a7:
                    54:58:3b:55:9a:24:7d:bf:4a:e1:d7:28:2c:7b:c2:
                    de:9f:fb:76:3c:c3:0a:d2:98:91:8c:11:de:c0:1d:
                    e6:c5:95:69:43:cf:29:56:f0:97:00:85:5d:85:c7:
                    fd:37:aa:2d:8c:d2:3a:f6:b5:e5:d1:5c:fe:c4:36:
                    b0:d7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:BB:7B:00:1D:7B:95:84:9C:5A:E2:99:C2:63:59:AA:45:AB:57:8A
            X509v3 Authority Key Identifier:
                keyid:96:D6:AE:6D:52:F2:98:97:0A:86:B7:74:95:8F:B5:B4:48:8C:AF:64

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/96D6AE6D52F298970A86B774958FB5B4488CAF64.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ZkWMBqosmZbwQQrMRH7nsY8H7Th3CZBrjt74rHbHotJ/0/323830343a376162343a3a2f33322d3334203d3e20323731333837.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7ab4::/32

    Signature Algorithm: sha256WithRSAEncryption
         70:be:71:79:7e:b5:c6:76:2d:34:84:15:cd:9d:c7:68:ed:65:
         34:36:3a:18:af:bf:a4:44:7f:5c:22:b6:47:63:bc:e4:57:77:
         2c:e6:a7:9b:a7:2e:95:f8:66:ab:22:5d:19:67:48:8a:4d:af:
         e5:26:b1:44:e8:86:5b:23:e9:c5:fd:bc:a6:9b:49:73:97:ab:
         d7:f7:c1:d1:13:d1:1a:fc:12:c4:77:8f:58:6c:7f:12:3b:89:
         04:24:81:89:e2:47:a1:e4:3d:0b:08:72:69:b0:3d:5b:ac:8b:
         7f:9c:5c:c5:35:e8:b7:fe:9e:29:76:5f:a7:50:59:82:e5:23:
         e6:0c:ee:e7:cc:3f:42:1d:a7:de:de:13:b5:f5:4d:7d:81:39:
         55:92:fb:4a:81:2e:f2:14:62:94:44:ac:1f:fa:3e:95:21:75:
         33:ce:17:2c:fd:ab:9a:2d:b7:83:af:07:50:d2:ab:68:4c:21:
         53:29:e3:f6:03:ae:88:dc:67:ea:00:45:03:dc:e5:67:b6:d1:
         a4:52:8e:b5:1c:57:2d:42:79:8d:19:15:c0:e0:87:a8:34:0e:
         3f:68:fb:b5:3b:23:be:86:0e:de:15:26:66:fc:38:c9:9a:bf:
         fb:87:50:41:4b:c7:e0:02:d2:37:5b:92:51:f4:fb:bf:01:7a:
         bb:fb:cd:e7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:25 2024 by rpki-client on console-ams.rpki-client.org