Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/323830343a313737343a3a2f33322d3336203d3e20323633313435.roa
File:                     323830343a313737343a3a2f33322d3336203d3e20323633313435.roa (raw, json)
Hash identifier:          ct0na+7srDkNlmPZh0s02lqAufIsLIL57k2sZRl6od8=
Subject key identifier:   96:26:4B:D2:72:6A:5E:3C:A3:1B:6E:E7:2C:BB:07:5C:BC:E6:9A:14
Certificate issuer:       /CN=302EB8317A945F8D97CC748C3CC1101F31F5E9CF
Certificate serial:       35E4C46055310EAEF1EDF4392BCA2F2BA2CF462F
Authority key identifier: 30:2E:B8:31:7A:94:5F:8D:97:CC:74:8C:3C:C1:10:1F:31:F5:E9:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/302EB8317A945F8D97CC748C3CC1101F31F5E9CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/323830343a313737343a3a2f33322d3336203d3e20323633313435.roa
Signing time:             Sun 07 Nov 2021 19:07:52 +0000
ROA not before:           Sun 07 Nov 2021 19:02:52 +0000
ROA not after:            Sun 06 Nov 2022 19:07:52 +0000
asID:                     263145
IP address blocks:        2804:1774::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:e4:c4:60:55:31:0e:ae:f1:ed:f4:39:2b:ca:2f:2b:a2:cf:46:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=302EB8317A945F8D97CC748C3CC1101F31F5E9CF
        Validity
            Not Before: Nov  7 19:02:52 2021 GMT
            Not After : Nov  6 19:07:52 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:33:4d:48:1f:e2:24:dd:6f:a0:ab:3b:67:cb:
                    b1:d7:3d:b5:ef:6a:7b:5b:04:ef:93:cb:8a:66:e6:
                    6c:7c:94:60:b6:ff:58:f2:57:bd:3f:2b:f6:91:dc:
                    8b:90:50:86:78:bf:33:62:86:c2:f4:f3:57:76:a7:
                    40:bf:7a:3e:38:0f:28:4e:c1:b2:d7:8c:dd:26:4d:
                    9a:71:51:5d:29:91:e6:f8:04:ed:47:67:b6:22:b3:
                    a1:77:e3:b1:c7:a1:99:99:f1:26:64:f4:7f:35:b1:
                    eb:e3:77:0d:63:3b:2a:15:67:d7:38:b1:73:49:da:
                    20:e6:74:c0:d3:f0:26:bc:6a:af:52:f4:30:6c:9c:
                    fc:e4:de:7a:0c:52:3a:6f:ac:81:4e:d3:78:2c:f8:
                    62:48:e9:7d:d6:f4:b7:1b:6b:0c:04:33:88:df:bb:
                    f2:f0:52:cb:e9:98:ce:66:59:02:19:c2:db:06:54:
                    cc:e0:bf:5e:1b:5c:20:00:a5:22:aa:71:6f:dd:4c:
                    9b:51:8e:b6:d4:05:f8:90:3d:72:1f:ef:a9:8a:19:
                    49:79:8b:c2:62:b4:26:69:2c:c8:b7:e9:82:0b:9c:
                    3e:42:18:14:8f:70:cc:95:ab:30:39:df:bd:1f:2c:
                    d9:82:a1:35:f4:d7:e3:c5:34:17:8a:b7:dc:30:0f:
                    0c:c3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:26:4B:D2:72:6A:5E:3C:A3:1B:6E:E7:2C:BB:07:5C:BC:E6:9A:14
            X509v3 Authority Key Identifier:
                keyid:30:2E:B8:31:7A:94:5F:8D:97:CC:74:8C:3C:C1:10:1F:31:F5:E9:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/302EB8317A945F8D97CC748C3CC1101F31F5E9CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/302EB8317A945F8D97CC748C3CC1101F31F5E9CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4511sHW1ApwKRYEAfHgEMa1Czsgw871Hp4SMpX3pKsRL/0/323830343a313737343a3a2f33322d3336203d3e20323633313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1774::/32

    Signature Algorithm: sha256WithRSAEncryption
         7d:cb:8b:8a:76:df:e2:a8:20:79:c9:21:88:12:4a:bc:08:8d:
         29:2b:26:4b:19:91:79:2d:6e:af:2c:a9:d6:02:40:0c:52:79:
         6b:8f:ea:26:fd:b3:59:1e:26:35:06:a1:03:0a:5a:f7:52:97:
         23:79:3e:b2:77:12:a1:1f:24:bd:d4:f1:e9:06:df:da:a0:ba:
         a0:a1:8e:2e:4c:0b:56:46:55:1f:ab:28:94:fd:18:e1:d5:2b:
         a9:94:b3:27:cf:5a:d5:43:c3:cf:f6:c9:7f:9a:28:d9:26:d0:
         85:5a:c2:25:e5:b1:93:80:6f:5c:50:c8:8f:09:25:54:05:7d:
         1e:05:06:02:83:1b:e1:5d:da:05:66:86:7a:52:d3:94:fa:9a:
         98:84:5d:b1:23:5a:f6:fb:5b:73:1e:17:5b:35:f5:b3:ae:74:
         97:bf:17:20:fe:4d:02:16:ab:3b:31:43:52:54:25:4f:c9:6d:
         39:44:d9:55:0a:78:54:45:36:3c:4d:2d:7b:48:15:3c:b0:ce:
         12:21:ee:91:89:49:fa:fc:71:44:b8:9c:62:b7:7d:e1:d3:e9:
         4b:78:5a:76:05:2e:f7:72:1a:30:6a:10:50:54:b3:4c:99:8a:
         e0:68:72:5e:4c:15:3d:9e:97:eb:b2:31:48:3d:29:2f:93:5b:
         e5:63:b2:75
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org