Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343238303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a343238303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          kqb7On8IVqvLXJ9WDfujA1ysL9Si7N9OVsZsm3YIxKo=
Subject key identifier:   73:52:71:4D:1B:4F:E3:35:FA:1B:AC:5A:13:92:80:E8:57:D8:CD:98
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       57B29426030C606A948869C2C88708393AADEF1C
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343238303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Fri 22 Mar 2024 13:00:00 +0000
ROA not before:           Fri 22 Mar 2024 12:55:00 +0000
ROA not after:            Sat 22 Mar 2025 13:00:00 +0000
asID:                     262494
IP address blocks:        2804:ad8:4280::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            57:b2:94:26:03:0c:60:6a:94:88:69:c2:c8:87:08:39:3a:ad:ef:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Mar 22 12:55:00 2024 GMT
            Not After : Mar 22 13:00:00 2025 GMT
        Subject: CN=3082010A0282010100DE14B8CFC1FBB533C84B49C93FEC87F0DA47CA79109D2BADF4AA9E60D45E3FC0DB3310FA76BF7CB3B6E44F8B9EB384CA5AACDE4D07B08B0D2568EC0F93633D032AD078DA95A1DA26B32752409E866BB9E7657D345326D2B58C06B06574423C20E089EAE8FF6186633FEF650CEF4D86C0999E9291C32CE3D38880AA1432504E6AFCE5AB7028AD9EF8D3DD14F3A52D8E88A24AD876F6A2C6137B6BC7B701EF44DB135F2FF698FBD994C6C79A8F149AA34C73D70D94E3DCBF63FCE41FCDADF96D444779E09B0CFBFB1D3E3A2C3008E3C51394C93602DD10E8CA8ACCD870D118E1CE2D03488B21664A4E4960C48D5382AB8753791724775DC475E1954286E8F498050203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:14:b8:cf:c1:fb:b5:33:c8:4b:49:c9:3f:ec:
                    87:f0:da:47:ca:79:10:9d:2b:ad:f4:aa:9e:60:d4:
                    5e:3f:c0:db:33:10:fa:76:bf:7c:b3:b6:e4:4f:8b:
                    9e:b3:84:ca:5a:ac:de:4d:07:b0:8b:0d:25:68:ec:
                    0f:93:63:3d:03:2a:d0:78:da:95:a1:da:26:b3:27:
                    52:40:9e:86:6b:b9:e7:65:7d:34:53:26:d2:b5:8c:
                    06:b0:65:74:42:3c:20:e0:89:ea:e8:ff:61:86:63:
                    3f:ef:65:0c:ef:4d:86:c0:99:9e:92:91:c3:2c:e3:
                    d3:88:80:aa:14:32:50:4e:6a:fc:e5:ab:70:28:ad:
                    9e:f8:d3:dd:14:f3:a5:2d:8e:88:a2:4a:d8:76:f6:
                    a2:c6:13:7b:6b:c7:b7:01:ef:44:db:13:5f:2f:f6:
                    98:fb:d9:94:c6:c7:9a:8f:14:9a:a3:4c:73:d7:0d:
                    94:e3:dc:bf:63:fc:e4:1f:cd:ad:f9:6d:44:47:79:
                    e0:9b:0c:fb:fb:1d:3e:3a:2c:30:08:e3:c5:13:94:
                    c9:36:02:dd:10:e8:ca:8a:cc:d8:70:d1:18:e1:ce:
                    2d:03:48:8b:21:66:4a:4e:49:60:c4:8d:53:82:ab:
                    87:53:79:17:24:77:5d:c4:75:e1:95:42:86:e8:f4:
                    98:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                73:52:71:4D:1B:4F:E3:35:FA:1B:AC:5A:13:92:80:E8:57:D8:CD:98
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a343238303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:4280::/41

    Signature Algorithm: sha256WithRSAEncryption
         5a:ee:4f:80:b5:a1:9f:1b:f3:1a:ec:1e:76:9f:65:16:13:39:
         96:b3:a8:64:c0:0d:60:59:f5:f1:da:23:38:fa:09:33:1c:fe:
         12:39:21:e8:23:bc:31:2a:94:a5:b8:06:98:fd:26:2f:db:79:
         4d:dc:73:45:50:27:b8:fe:46:fe:d2:ac:99:ed:29:13:10:25:
         88:b5:ae:0d:43:79:f1:12:fd:91:cb:7a:38:ed:51:c5:99:3a:
         44:af:4a:27:81:7b:5f:4d:c7:0f:02:05:ce:9b:d5:bf:13:99:
         d6:97:25:5e:08:96:46:e3:95:ac:2d:80:f2:e4:f6:f2:b5:97:
         2b:c0:00:0e:df:fe:4c:e2:7d:c7:83:f8:85:6c:fc:f9:49:16:
         02:9c:f8:47:76:eb:dd:be:fa:a2:96:cc:b1:17:05:62:a3:b1:
         5c:0d:a6:0c:cf:dc:7c:3d:86:9c:50:2f:47:e1:17:63:f2:71:
         e1:5d:5e:44:1f:4d:7d:66:dd:32:57:0c:33:10:ab:5c:0b:ab:
         87:c5:2f:ca:2d:95:49:70:87:2a:52:d1:ac:5e:1b:2e:77:6b:
         b2:96:c7:99:9d:1d:3f:b3:73:f6:37:99:d2:ac:86:34:47:5d:
         52:89:30:f8:29:73:e2:05:bc:86:58:a8:7d:67:80:94:1d:34:
         26:02:b2:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org