Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/0/323830343a336239383a3a2f33322d3332203d3e20323636313539.roa
File:                     323830343a336239383a3a2f33322d3332203d3e20323636313539.roa (raw, json)
Hash identifier:          XgmLwzl1YhGLmcR0oBrIVpR64N1Qm9p8dIWL5OxRf3w=
Subject key identifier:   62:51:9F:CC:25:9E:AA:87:A7:0C:F9:5B:5B:D4:02:26:D7:35:4A:C0
Certificate issuer:       /CN=BA05FA500E415B56175D97B8CD9EC5C3A4A25285
Certificate serial:       347E64C0DA039225B4860C9E49EE7FFCEF188C85
Authority key identifier: BA:05:FA:50:0E:41:5B:56:17:5D:97:B8:CD:9E:C5:C3:A4:A2:52:85
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA05FA500E415B56175D97B8CD9EC5C3A4A25285.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/0/323830343a336239383a3a2f33322d3332203d3e20323636313539.roa
Signing time:             Thu 30 Nov 2023 15:18:56 +0000
ROA not before:           Thu 30 Nov 2023 15:13:56 +0000
ROA not after:            Thu 28 Nov 2024 15:18:56 +0000
asID:                     266159
IP address blocks:        2804:3b98::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:7e:64:c0:da:03:92:25:b4:86:0c:9e:49:ee:7f:fc:ef:18:8c:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=BA05FA500E415B56175D97B8CD9EC5C3A4A25285
        Validity
            Not Before: Nov 30 15:13:56 2023 GMT
            Not After : Nov 28 15:18:56 2024 GMT
        Subject: CN=62519FCC259EAA87A70CF95B5BD40226D7354AC0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:c9:3c:13:f7:0f:92:8c:05:6f:0f:21:4c:25:
                    cb:17:cc:24:35:2c:70:bc:25:d9:0a:38:97:e9:b8:
                    f9:34:05:ea:24:54:cb:ff:2a:45:d1:3e:fc:72:32:
                    26:45:ce:95:27:c7:8d:60:a9:40:d7:7d:d4:66:35:
                    c5:68:a9:80:56:ff:4b:78:44:85:c4:cc:4b:2d:88:
                    df:71:36:bb:6a:05:9e:fd:fd:38:3e:84:df:0c:70:
                    10:81:82:da:49:b2:c7:b0:2d:77:8d:ab:4b:e2:fc:
                    41:0b:5b:c6:8b:13:6c:f9:85:51:b3:15:d6:82:af:
                    d5:0c:67:18:16:80:49:00:c9:78:9a:ea:42:dd:36:
                    96:20:dc:bf:e0:ad:a5:19:5b:d7:4e:72:d6:76:5f:
                    ea:9d:d6:9a:af:53:ee:03:f2:90:c7:33:43:67:90:
                    0a:de:08:2a:ff:e3:41:c4:9d:0d:fd:d2:1f:de:da:
                    80:ce:49:06:41:0e:06:38:b4:fb:59:4b:bb:55:98:
                    e8:e8:3e:20:c3:4f:75:c2:a0:ed:89:cd:13:50:12:
                    c8:e5:ca:07:91:e2:8c:ff:81:26:18:97:60:35:59:
                    f0:90:11:cd:1e:2e:83:01:52:f0:1c:3c:0d:1f:07:
                    b2:5b:b4:22:a8:fa:b7:49:f9:6c:b4:1d:c6:e0:23:
                    73:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                62:51:9F:CC:25:9E:AA:87:A7:0C:F9:5B:5B:D4:02:26:D7:35:4A:C0
            X509v3 Authority Key Identifier:
                keyid:BA:05:FA:50:0E:41:5B:56:17:5D:97:B8:CD:9E:C5:C3:A4:A2:52:85

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/0/BA05FA500E415B56175D97B8CD9EC5C3A4A25285.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/BA05FA500E415B56175D97B8CD9EC5C3A4A25285.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3hKi5Ys82hcybRZNYyZBgfnHhhkU4s9D8JUxjguATLhd/0/323830343a336239383a3a2f33322d3332203d3e20323636313539.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b98::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:65:d6:f4:c5:04:ac:88:5e:32:d0:9d:ff:81:5b:e7:45:bf:
         5f:5e:27:69:bd:31:d6:6f:6c:ea:89:17:ec:e7:28:9b:49:bd:
         39:20:8f:24:f4:c8:0e:04:c3:6c:04:b0:4c:c0:92:71:f5:a0:
         2c:0d:39:2d:5c:91:8a:77:36:2d:2d:ef:db:ee:ef:68:ad:72:
         48:15:78:31:6f:a3:db:02:6b:a7:11:32:3b:7a:5d:80:e1:1c:
         6f:af:47:7e:26:8c:20:14:bb:d5:2b:a8:69:2e:b3:f8:f1:14:
         14:d2:3c:77:63:4c:3e:aa:18:4f:b7:96:f6:11:43:9f:f6:6e:
         c4:ab:23:07:c3:78:fc:a1:2a:53:5c:af:34:bc:cf:8a:b7:82:
         93:f0:13:d9:5c:b4:88:3e:6a:5e:89:dc:8a:eb:d6:3c:3d:98:
         44:a5:aa:c3:6b:54:6f:8f:6f:97:ec:f4:5e:c2:48:80:8d:06:
         cd:9a:dc:a5:46:ef:e5:f7:9c:6c:35:ce:0c:20:a6:48:11:7e:
         e7:31:72:8b:74:16:df:7f:43:d6:43:96:b2:1a:c2:a7:1a:0a:
         9a:9a:20:c5:23:9e:d6:31:b9:3e:d0:07:d5:31:80:ee:65:ed:
         41:6d:a5:19:e6:21:bb:a0:d1:9f:af:53:1e:15:92:68:2e:74:
         90:a5:21:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:28 2024 by rpki-client on console-fra.rpki-client.org