Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a653a3a2f34382d3438203d3e20323632343934.roa
File:                     323830343a6164383a653a3a2f34382d3438203d3e20323632343934.roa (raw, json)
Hash identifier:          9bjT9aVydI2a3J4Or4hz64xsHxavxeQ+9TgKJYWT2ws=
Subject key identifier:   AF:E1:2A:F2:E4:65:F6:D1:98:CB:FF:A1:29:6B:D6:E9:C4:55:29:F8
Certificate issuer:       /CN=90201021D496C91310B04D1B9B9CF43013D52DE3
Certificate serial:       0468FB08C946A673926D534319DEA84430B1E02A
Authority key identifier: 90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a653a3a2f34382d3438203d3e20323632343934.roa
Signing time:             Sat 24 Feb 2024 01:12:16 +0000
ROA not before:           Sat 24 Feb 2024 01:07:16 +0000
ROA not after:            Mon 24 Feb 2025 01:12:16 +0000
asID:                     262494
IP address blocks:        2804:ad8:e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:68:fb:08:c9:46:a6:73:92:6d:53:43:19:de:a8:44:30:b1:e0:2a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=90201021D496C91310B04D1B9B9CF43013D52DE3
        Validity
            Not Before: Feb 24 01:07:16 2024 GMT
            Not After : Feb 24 01:12:16 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:55:ca:00:7a:19:b3:4c:3c:6c:e7:ad:fb:73:
                    1a:7c:ee:14:d7:ae:d6:f4:55:6b:4c:cf:8e:5d:b7:
                    6e:68:68:49:88:9f:66:5d:6e:cd:89:0c:45:7e:24:
                    1e:67:3d:9f:8e:d3:80:b2:6f:8f:ac:61:a5:46:15:
                    0a:fc:ea:40:0e:b4:07:60:48:85:93:f1:c7:34:77:
                    b6:90:ee:ee:8c:c3:83:67:59:4a:b2:90:d0:94:a5:
                    47:6b:31:d2:e6:d6:68:28:6f:fb:64:2f:c6:15:5d:
                    57:dd:4c:6a:26:ab:cf:73:2a:38:db:8b:6a:5e:aa:
                    41:24:d2:d6:9f:3d:c4:ce:69:70:6e:9a:5a:5d:e8:
                    1f:64:57:22:24:09:9a:c6:b0:87:77:3b:05:4e:38:
                    5a:84:f3:ae:db:71:ee:52:d3:4c:1d:c4:13:dc:7b:
                    d6:28:df:01:d5:f2:20:6b:a9:3d:4d:c2:85:19:88:
                    8e:f0:d0:8c:0f:cc:b5:c8:5c:29:8b:1f:80:44:e0:
                    fc:b9:09:21:60:cd:59:dc:ee:71:d0:c5:19:d0:0f:
                    8a:49:d4:3a:50:e1:3b:6f:32:40:22:b0:bc:41:81:
                    09:a7:87:08:0e:bb:05:a9:7f:d6:d3:a2:a2:35:2d:
                    b8:05:d8:ca:d3:13:1e:31:35:1f:ff:96:a1:75:31:
                    77:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:E1:2A:F2:E4:65:F6:D1:98:CB:FF:A1:29:6B:D6:E9:C4:55:29:F8
            X509v3 Authority Key Identifier:
                keyid:90:20:10:21:D4:96:C9:13:10:B0:4D:1B:9B:9C:F4:30:13:D5:2D:E3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/90201021D496C91310B04D1B9B9CF43013D52DE3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/90201021D496C91310B04D1B9B9CF43013D52DE3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47Wd48UuMueUCubTqQZLwj7EM6UhyupNs56kRcWXsEJC/0/323830343a6164383a653a3a2f34382d3438203d3e20323632343934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ad8:e::/48

    Signature Algorithm: sha256WithRSAEncryption
         b2:b0:5f:98:d2:0a:b4:33:66:37:9a:ca:c4:88:b8:7f:b1:33:
         ac:56:7a:66:10:16:4b:99:38:99:4e:3b:47:ee:75:26:e6:6d:
         c4:b2:4b:14:97:13:2d:c1:21:62:86:00:7a:12:05:dc:08:27:
         ea:5d:08:11:89:ff:fa:71:8c:1f:5b:ab:cc:7c:5c:b6:3c:8e:
         7d:db:8e:0a:1b:da:7a:13:09:2e:6f:26:4c:43:e5:db:8c:9f:
         c2:1f:5b:2a:36:20:cf:ef:94:53:4b:84:79:fc:71:21:59:e1:
         c7:ff:f5:50:a2:88:a1:3a:e3:12:6c:6a:79:5f:af:b8:2b:88:
         26:f1:4a:a0:45:ad:dd:af:32:c5:b1:44:fd:ac:52:d7:64:e5:
         93:61:3b:ae:66:c9:07:0a:87:4c:a2:09:6f:9d:c4:8a:f8:1d:
         68:a9:16:68:2e:34:52:97:84:1d:81:fd:fc:c9:b5:40:d2:08:
         94:e8:11:0a:08:0e:bd:b3:a4:b7:b3:fd:09:26:f8:21:e7:76:
         e6:d3:85:b6:6f:32:98:b4:b7:ce:00:b5:e4:38:ca:0b:c3:c8:
         15:00:b6:71:cf:79:fa:ec:11:86:0f:d3:b6:0b:62:98:c3:ae:
         9a:7a:93:57:98:04:61:b9:e7:bc:5b:7a:30:0e:0f:a7:3e:92:
         6a:53:17:5e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org