Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa
File:                     323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa (raw, json)
Hash identifier:          57sumnRCjnIikul22+/ahEQIJxbqUPOSrbRgoEY7QrA=
Subject key identifier:   9A:05:E4:D6:66:51:E3:E2:BF:E5:7E:65:6E:82:A6:CB:A7:49:3F:F4
Certificate issuer:       /CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
Certificate serial:       325E9F23731947F3EEAF05449D43A854A8FB29D9
Authority key identifier: 71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa
Signing time:             Mon 16 Oct 2023 20:46:51 +0000
ROA not before:           Mon 16 Oct 2023 20:41:51 +0000
ROA not after:            Mon 14 Oct 2024 20:46:51 +0000
asID:                     28131
IP address blocks:        2804:170:4900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:5e:9f:23:73:19:47:f3:ee:af:05:44:9d:43:a8:54:a8:fb:29:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71C5C4E632B7A76B4E137F2B3E64580950B3A16D
        Validity
            Not Before: Oct 16 20:41:51 2023 GMT
            Not After : Oct 14 20:46:51 2024 GMT
        Subject: CN=9A05E4D66651E3E2BFE57E656E82A6CBA7493FF4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:91:f7:70:30:49:44:7a:01:45:bb:2b:b5:ac:
                    ec:4b:a0:42:7d:6e:6c:3a:50:4c:34:65:a2:b7:26:
                    67:74:45:f7:9f:c2:ee:e1:1d:8d:20:17:73:51:25:
                    8a:8b:c7:bd:3f:be:99:93:2e:17:cf:82:e7:81:ec:
                    b4:62:dc:92:b9:d4:e7:ab:61:93:83:fd:6b:24:f1:
                    e2:c1:94:73:3d:4a:56:93:d9:ea:35:81:74:77:b6:
                    47:79:8b:69:2f:ed:ed:0f:85:0a:64:56:54:a7:34:
                    50:a4:60:9c:f2:11:77:9d:88:89:46:da:9f:0c:5b:
                    17:80:6e:9f:17:ab:08:63:3a:6f:fc:0d:3e:7d:c4:
                    e3:5a:e7:2d:04:6d:3f:22:d9:5f:f1:ff:08:b3:8a:
                    eb:47:b2:b1:e2:29:e7:fc:aa:89:4a:a4:41:93:94:
                    62:a0:9a:0a:1a:67:5e:4d:99:2e:55:82:9f:1a:bb:
                    6b:11:2e:09:f1:49:05:66:a4:14:46:b3:60:ad:cb:
                    1b:21:76:78:d9:63:3b:89:27:d3:3f:91:aa:d4:30:
                    87:24:71:96:82:8d:9b:0d:b1:eb:20:2f:03:f7:fc:
                    37:96:96:b7:c9:f1:8c:ba:cc:65:3a:cd:22:24:87:
                    8f:8a:6f:2e:a2:9a:a7:92:f0:5b:e8:59:28:82:38:
                    c9:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9A:05:E4:D6:66:51:E3:E2:BF:E5:7E:65:6E:82:A6:CB:A7:49:3F:F4
            X509v3 Authority Key Identifier:
                keyid:71:C5:C4:E6:32:B7:A7:6B:4E:13:7F:2B:3E:64:58:09:50:B3:A1:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71C5C4E632B7A76B4E137F2B3E64580950B3A16D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/42kEQt8GWGYZkZJrKDdZC6gPzkN9E8FtcTbD93gzmPDX/0/323830343a3137303a343930303a3a2f34302d3430203d3e203238313331.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:170:4900::/40

    Signature Algorithm: sha256WithRSAEncryption
         70:19:f8:8d:cd:72:04:70:c1:5a:76:de:3f:7e:34:a6:7d:ee:
         50:40:75:75:9c:8f:90:b7:3a:1a:e5:b3:0c:d3:22:6b:f3:9b:
         8e:3c:5d:ff:51:30:76:72:69:49:01:0b:ef:e5:b8:19:10:ad:
         3f:94:46:2a:ff:70:78:bf:4b:c6:a4:1f:b8:91:c2:e1:70:ed:
         3d:ce:02:80:cd:7b:a4:3d:07:8e:11:47:87:ae:56:76:ae:31:
         2e:23:0c:2c:fe:6d:25:46:fb:f1:06:a8:01:f2:5a:ee:34:32:
         6a:12:e1:ba:5a:63:42:bc:2f:30:a9:99:f8:c4:a0:ce:a8:e4:
         05:44:dd:89:47:77:55:af:eb:10:48:ea:8f:7e:e9:d4:9c:28:
         46:f3:70:c8:95:85:a1:9b:91:a0:4b:f6:87:42:99:5d:2a:5e:
         df:07:b4:a6:b8:a4:bb:bd:1f:1b:d4:97:52:7a:e2:07:48:db:
         ff:f4:5d:d0:54:35:5b:70:55:95:ac:00:9f:d1:c0:b6:19:dc:
         c9:9c:70:45:c3:84:7b:38:c4:a8:bc:af:8b:3f:f8:92:cb:f5:
         e2:60:62:98:1a:c1:fa:72:a3:a0:90:5a:26:82:ed:75:93:5d:
         5a:76:9f:e5:7d:78:47:94:28:67:1d:ff:ea:93:20:1b:c1:0f:
         75:5c:82:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org