Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383261303a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a383261303a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          D55/ofv62LaRcMZsfGegL9acK9CepucB20oseoOmLco=
Subject key identifier:   2F:18:82:39:7E:9D:C7:9D:8B:98:92:66:10:4F:F3:09:6D:86:2F:99
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       211FA619946DFE13DA0247A5D5EF90D92D1CFADE
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383261303a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 01:15:41 +0000
ROA not before:           Sat 24 Feb 2024 01:10:41 +0000
ROA not after:            Mon 24 Feb 2025 01:15:41 +0000
asID:                     262494
IP address blocks:        2804:ad8:82a0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:1f:a6:19:94:6d:fe:13:da:02:47:a5:d5:ef:90:d9:2d:1c:fa:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 01:10:41 2024 GMT
            Not After : Feb 24 01:15:41 2025 GMT
        Subject: CN=3082010A02820101009A0004210E03AED703071BD16376E08E3F3F52BA2FF996F367BB92CE214432D363D17B44C75A27A061E19EA0458927D64E132DECAE7938C5CD04E44A4E5317E085C8A31A4F9B332E4391484EF2CC4E087152C268139227871C6386CC95821B90E612570C98EEADB09A064EF8B87562F538D4630F7CD3E4E2E3765B6D438B7379E17D0F72EB7604669DF3A2E30977B467624AC491FBD8A9C3EB28ECA2E055B7688D867CBDF95C221A7069A2D706FC983AAED781FAB8496F2749A45C5BF4F50F7AC5E32BDE37EB6192A5D935A2E1751C709EBEAA58A4BE498CEC20F3121ED46A0A77F4087262F465C9C187D7D7990D420BAC4F77C2F14BC8356BF3A1C84B4638430203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:00:04:21:0e:03:ae:d7:03:07:1b:d1:63:76:
                    e0:8e:3f:3f:52:ba:2f:f9:96:f3:67:bb:92:ce:21:
                    44:32:d3:63:d1:7b:44:c7:5a:27:a0:61:e1:9e:a0:
                    45:89:27:d6:4e:13:2d:ec:ae:79:38:c5:cd:04:e4:
                    4a:4e:53:17:e0:85:c8:a3:1a:4f:9b:33:2e:43:91:
                    48:4e:f2:cc:4e:08:71:52:c2:68:13:92:27:87:1c:
                    63:86:cc:95:82:1b:90:e6:12:57:0c:98:ee:ad:b0:
                    9a:06:4e:f8:b8:75:62:f5:38:d4:63:0f:7c:d3:e4:
                    e2:e3:76:5b:6d:43:8b:73:79:e1:7d:0f:72:eb:76:
                    04:66:9d:f3:a2:e3:09:77:b4:67:62:4a:c4:91:fb:
                    d8:a9:c3:eb:28:ec:a2:e0:55:b7:68:8d:86:7c:bd:
                    f9:5c:22:1a:70:69:a2:d7:06:fc:98:3a:ae:d7:81:
                    fa:b8:49:6f:27:49:a4:5c:5b:f4:f5:0f:7a:c5:e3:
                    2b:de:37:eb:61:92:a5:d9:35:a2:e1:75:1c:70:9e:
                    be:aa:58:a4:be:49:8c:ec:20:f3:12:1e:d4:6a:0a:
                    77:f4:08:72:62:f4:65:c9:c1:87:d7:d7:99:0d:42:
                    0b:ac:4f:77:c2:f1:4b:c8:35:6b:f3:a1:c8:4b:46:
                    38:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2F:18:82:39:7E:9D:C7:9D:8B:98:92:66:10:4F:F3:09:6D:86:2F:99
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383261303a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:82a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         b6:6b:55:19:dc:25:f2:29:65:40:1a:e8:2b:c3:27:6a:c6:1c:
         4b:da:18:32:ad:c3:7a:d8:ae:92:2a:56:58:4c:23:45:f7:63:
         f3:37:0a:af:89:ed:b7:e8:7b:6e:75:cd:36:07:fe:2d:1f:0e:
         98:66:dc:63:04:e3:65:6e:43:70:08:55:36:f6:33:fa:6f:59:
         a7:97:21:aa:84:4a:53:6e:02:cf:20:1e:05:58:e1:1f:62:7f:
         b6:51:49:26:45:f5:ad:3a:92:6c:66:02:4f:e5:96:72:09:3a:
         77:82:d2:4c:16:84:56:6c:f6:b8:2c:d8:e5:01:d5:34:4a:70:
         3c:e4:8b:26:aa:bf:32:1c:41:db:42:ce:37:b2:b9:1c:d2:da:
         9a:35:3e:48:93:18:31:f4:50:8c:70:66:36:67:34:2e:b6:4c:
         f8:0c:9a:49:43:3b:96:36:99:65:01:fe:8c:61:2b:d6:68:fe:
         65:b2:b6:9f:fb:f4:18:8f:2a:3a:4a:13:72:ca:7f:ea:cf:9b:
         28:9e:53:f1:a8:a6:21:f4:f3:43:50:c5:1b:1f:e9:ad:ec:76:
         e5:cc:69:6c:58:c5:98:57:40:c9:37:82:6c:bd:f7:2d:9b:a8:
         2b:df:37:55:57:5f:51:49:b3:98:89:53:ee:29:ac:56:52:02:
         63:79:f7:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:31 2024 by rpki-client on console-ams.rpki-client.org