Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a633030303a3a2f33342d3334203d3e20323632343934.roa
File:                     323830343a6164383a633030303a3a2f33342d3334203d3e20323632343934.roa (raw, json)
Hash identifier:          kW6tF6lBIVd7QxIQVKVF+Tx4HDfwkzmYImlOQ9FtkTM=
Subject key identifier:   ED:A0:72:50:18:BD:5F:CF:EB:AC:4D:FD:7B:E0:F3:A5:0D:1E:36:65
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       559884EE97EE232A80A79BCF424E857694465C10
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a633030303a3a2f33342d3334203d3e20323632343934.roa
Signing time:             Thu 23 Nov 2023 19:00:00 +0000
ROA not before:           Thu 23 Nov 2023 18:55:00 +0000
ROA not after:            Sat 23 Nov 2024 19:00:00 +0000
asID:                     262494
IP address blocks:        2804:ad8:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:98:84:ee:97:ee:23:2a:80:a7:9b:cf:42:4e:85:76:94:46:5c:10
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Nov 23 18:55:00 2023 GMT
            Not After : Nov 23 19:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:a9:d2:74:f2:01:c6:47:48:ee:d2:46:54:36:
                    19:c3:f3:14:5e:29:6e:a1:b1:73:6e:bd:c8:2b:a0:
                    4a:98:2a:38:02:c9:9b:4f:46:14:80:0c:ec:87:c3:
                    f1:29:4c:3f:24:e2:5f:23:22:0c:0f:fb:e5:bf:4f:
                    eb:ee:be:5f:72:08:cd:bf:de:03:f2:c7:1e:f6:28:
                    75:cd:4b:79:e6:86:6c:e5:ff:a8:d0:25:34:23:7d:
                    34:ee:3e:53:4c:25:9b:6e:05:20:27:58:86:12:2b:
                    5d:b7:2a:ee:55:f6:98:c3:91:73:ac:26:ab:74:08:
                    1b:0b:b6:c3:73:7e:6c:fc:45:9d:7f:db:a5:f0:04:
                    5e:02:8e:63:68:d6:a3:88:b4:60:f7:5d:38:34:ad:
                    3e:13:9e:91:a6:80:8b:ec:65:97:e3:af:3c:78:ab:
                    71:9a:e0:e0:dd:c5:b9:c3:43:ad:06:2f:35:3f:6a:
                    15:ea:f2:ad:e3:61:e5:bc:d8:52:ce:4c:ca:22:13:
                    dd:46:2c:cf:b0:5f:21:83:83:7f:b8:80:ca:f6:71:
                    5e:be:d0:2a:86:ce:d8:fc:ab:6e:be:ef:d0:5d:77:
                    a1:9d:eb:84:58:99:59:3a:9d:73:0b:53:5c:a2:8a:
                    19:98:7b:d1:91:25:09:48:3f:88:dc:35:a9:41:b9:
                    24:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                ED:A0:72:50:18:BD:5F:CF:EB:AC:4D:FD:7B:E0:F3:A5:0D:1E:36:65
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a633030303a3a2f33342d3334203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5c:df:e9:e9:7a:6e:ee:36:9f:55:16:20:9e:03:be:71:e5:8b:
         ed:32:19:d6:12:13:d3:f7:88:b8:44:00:68:c4:2d:02:11:c3:
         3d:ff:b5:b3:f7:60:18:36:a1:6d:20:f3:b6:3d:2e:2e:b2:65:
         eb:e6:28:c7:48:95:f6:f0:df:64:cd:27:9b:fb:c4:88:c8:07:
         73:a1:d3:88:6c:de:66:2e:22:a6:e3:fe:dd:3d:c0:83:e6:dd:
         65:2d:c5:7f:f2:c9:e2:ea:cd:36:20:7f:07:d9:34:f1:1e:39:
         47:d1:69:b2:6f:39:43:36:7e:24:cf:6f:b1:cc:b8:35:93:fa:
         e3:5f:fd:e1:47:a2:e7:1c:e3:8b:b7:33:7e:8d:a7:02:c6:33:
         95:46:9c:ad:66:54:8f:13:b2:03:ad:19:38:f6:2a:7b:7d:c5:
         eb:54:b3:b9:32:f0:05:0f:1c:26:0c:68:fd:a9:67:1f:98:e1:
         4d:e7:45:40:6d:dc:fc:d9:94:c9:cb:d6:51:55:03:49:18:ca:
         41:e9:16:3f:80:1c:00:f5:04:b5:6e:2d:d8:14:86:27:6c:6f:
         7f:ca:24:7b:04:4c:be:7c:1c:fa:0b:64:d5:6a:94:59:96:ee:
         1f:d2:99:04:38:98:6d:9b:d4:c9:2e:05:44:1c:87:e9:63:74:
         e2:e0:3e:df
-----BEGIN CERTIFICATE-----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=
-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org