Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383330303a3a2f34312d3431203d3e20323632343934.roa
File:                     323830343a6164383a383330303a3a2f34312d3431203d3e20323632343934.roa (raw, json)
Hash identifier:          SeJh5GwiyH0aa/QrrkvSHgwnA8vZwkMBBujzXT7J0dE=
Subject key identifier:   36:91:26:9A:0D:7C:A1:63:44:85:54:D2:3E:2A:64:FD:A3:A7:EF:EF
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       64793BF7E9CCA0A4E019DD1FB957AC64B5BCAD7C
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383330303a3a2f34312d3431203d3e20323632343934.roa
Signing time:             Thu 11 Apr 2024 12:08:55 +0000
ROA not before:           Thu 11 Apr 2024 12:03:55 +0000
ROA not after:            Fri 11 Apr 2025 12:08:55 +0000
asID:                     262494
IP address blocks:        2804:ad8:8300::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:79:3b:f7:e9:cc:a0:a4:e0:19:dd:1f:b9:57:ac:64:b5:bc:ad:7c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Apr 11 12:03:55 2024 GMT
            Not After : Apr 11 12:08:55 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:fb:ad:07:c6:4c:fc:35:aa:c2:c1:08:ef:aa:e8:
                    6e:f4:70:56:cc:e8:b6:d0:c9:61:5f:8e:15:19:1e:
                    ea:51:79:60:30:f5:0d:51:59:9f:54:58:c1:84:d7:
                    28:5f:24:6e:9f:d1:bd:57:e1:b9:a3:1b:3a:52:72:
                    4d:a5:5e:84:2a:4a:b4:47:19:1e:c0:6d:c2:ee:95:
                    4e:1b:72:4b:e9:75:91:12:05:b0:c5:3b:16:71:62:
                    30:33:fb:92:82:76:ab:4d:39:68:bc:e9:4e:3e:77:
                    41:17:93:cd:44:04:03:8d:21:90:2f:55:43:35:51:
                    7f:03:89:0a:9f:a4:04:bf:da:4d:d4:cf:16:ce:55:
                    d7:45:36:2e:56:28:bc:68:ac:25:3e:6d:70:cf:91:
                    a4:28:58:86:cf:ad:92:c5:d0:f7:97:b9:ad:f7:ab:
                    d3:99:66:83:87:db:13:1e:0d:1a:ea:29:40:4a:4f:
                    32:23:8f:f7:cf:78:51:e5:80:7a:8d:0e:96:65:a1:
                    91:10:1e:89:62:66:54:b0:80:a9:2b:e9:ac:88:0d:
                    a1:ff:5d:17:11:4f:27:38:7c:03:ae:f5:41:a9:ad:
                    8f:40:7a:bb:4f:b3:11:35:63:23:8c:a0:79:8b:88:
                    78:1d:48:70:71:3e:bd:fe:0d:03:45:2b:76:e8:fa:
                    ae:29
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                36:91:26:9A:0D:7C:A1:63:44:85:54:D2:3E:2A:64:FD:A3:A7:EF:EF
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a383330303a3a2f34312d3431203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:8300::/41

    Signature Algorithm: sha256WithRSAEncryption
         1d:81:f5:35:7a:51:92:d7:77:92:74:b0:5e:db:27:04:d4:47:
         a6:77:ac:69:34:6e:b8:58:4d:cf:26:e8:36:2c:84:93:4c:a9:
         d9:16:19:6c:07:ae:b4:38:24:fa:99:2c:1c:ef:ce:9a:48:6e:
         80:04:06:fa:fb:f1:40:83:c6:a9:ff:43:d7:53:06:ea:d3:01:
         b2:c8:8c:b0:47:8c:30:08:9f:3d:ad:9d:4f:f5:df:f0:1f:1c:
         a0:36:e2:86:47:19:e8:34:61:10:3d:e8:df:f3:54:45:e1:8b:
         a3:20:e9:27:8f:fa:f3:f9:d0:0b:ad:03:d3:ef:cc:f7:76:ee:
         1c:ad:5e:68:db:6c:29:d1:2e:0c:d9:89:40:1a:a7:15:7a:0b:
         0c:51:53:5a:cc:dc:31:a5:d7:22:e9:d8:78:e5:17:85:f0:bd:
         44:b8:0c:fa:ef:f1:48:4b:59:af:0d:7d:52:37:77:1e:3a:0a:
         0e:18:28:e2:88:33:89:b8:ec:d3:83:05:ac:a8:55:66:c0:28:
         6e:12:6a:3c:53:77:0b:b0:dd:10:84:25:1d:1e:70:c4:a9:1e:
         36:25:83:ff:55:da:5f:37:fd:2a:56:ce:04:9c:07:5b:51:3b:
         aa:cc:d0:d1:30:d2:0c:1c:d1:7c:24:a2:58:40:ee:2d:07:48:
         0e:d2:04:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:25:58 2024 by rpki-client on console-ams.rpki-client.org