Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/323830343a373634383a3a2f33322d3438203d3e20323731313031.roa
File:                     323830343a373634383a3a2f33322d3438203d3e20323731313031.roa (raw, json)
Hash identifier:          hZpkiwHF/y/80sDJS8VvjP1ceKAWChoI5hr9cpNOo6M=
Subject key identifier:   C0:F1:B0:5C:4D:52:98:40:36:A9:5A:8C:A1:8F:5D:FC:CF:EB:AA:C5
Certificate issuer:       /CN=967EAC98B729C911A753A351D688123490AD5ACB
Certificate serial:       58B482FCA5B680DF5686C66AAADBD222C52AB0FE
Authority key identifier: 96:7E:AC:98:B7:29:C9:11:A7:53:A3:51:D6:88:12:34:90:AD:5A:CB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/967EAC98B729C911A753A351D688123490AD5ACB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/323830343a373634383a3a2f33322d3438203d3e20323731313031.roa
Signing time:             Tue 09 Jan 2024 12:18:57 +0000
ROA not before:           Tue 09 Jan 2024 12:13:57 +0000
ROA not after:            Tue 07 Jan 2025 12:18:57 +0000
asID:                     271101
IP address blocks:        2804:7648::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            58:b4:82:fc:a5:b6:80:df:56:86:c6:6a:aa:db:d2:22:c5:2a:b0:fe
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=967EAC98B729C911A753A351D688123490AD5ACB
        Validity
            Not Before: Jan  9 12:13:57 2024 GMT
            Not After : Jan  7 12:18:57 2025 GMT
        Subject: CN=C0F1B05C4D52984036A95A8CA18F5DFCCFEBAAC5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:aa:15:06:83:52:31:56:d6:72:74:5c:9d:42:09:
                    26:a4:60:7a:dd:3a:cf:8c:82:62:d9:7d:d3:b8:5f:
                    63:5a:73:67:6c:e7:33:c0:bd:53:df:e1:17:89:a9:
                    a6:98:37:ce:87:91:69:ce:b5:14:25:fb:bc:91:cc:
                    77:d0:73:c3:37:23:ae:03:4a:26:a4:8e:5d:d7:20:
                    1f:f2:88:a6:08:3e:cb:54:52:de:c8:ec:a4:b4:aa:
                    8e:25:27:31:a6:69:17:9a:20:f1:30:25:34:06:df:
                    7a:38:34:cb:1c:57:b2:04:e5:b3:06:3f:a3:00:59:
                    57:13:99:84:62:1b:af:06:c3:42:42:e3:68:e8:54:
                    6f:d8:e1:d2:01:2a:23:6f:15:19:6a:b9:5f:00:39:
                    0b:7c:5e:68:d9:81:75:3d:89:45:2d:18:f8:a1:d8:
                    bb:0c:7a:f3:e4:ad:b1:b7:d0:36:f5:33:9d:09:8f:
                    7e:b7:29:73:5b:aa:ee:14:5b:9b:0d:7f:54:1a:90:
                    b6:22:be:b5:36:65:34:85:93:e6:21:82:e1:57:7b:
                    f3:0e:20:08:10:de:6c:80:21:c8:1d:04:a3:83:bd:
                    89:a8:a4:25:2b:19:36:d8:89:12:a0:0c:53:d0:6a:
                    11:c1:53:dd:1c:79:af:a1:f5:77:71:64:79:87:94:
                    41:01
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:F1:B0:5C:4D:52:98:40:36:A9:5A:8C:A1:8F:5D:FC:CF:EB:AA:C5
            X509v3 Authority Key Identifier:
                keyid:96:7E:AC:98:B7:29:C9:11:A7:53:A3:51:D6:88:12:34:90:AD:5A:CB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/967EAC98B729C911A753A351D688123490AD5ACB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/967EAC98B729C911A753A351D688123490AD5ACB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/47q5fYUVqAzbrkLQo4PoYS2kGv8GXsKnN8qAYw5RGx2F/0/323830343a373634383a3a2f33322d3438203d3e20323731313031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7648::/32

    Signature Algorithm: sha256WithRSAEncryption
         a3:bf:38:55:b1:38:a3:a9:56:12:1c:70:ac:12:fb:77:6a:25:
         af:cf:3a:fe:46:e3:c5:b9:a6:a7:72:d6:b4:46:55:24:d9:19:
         07:f2:24:e0:04:37:e2:da:b0:93:6d:1c:e0:1f:55:2e:17:36:
         93:e5:61:67:99:dc:58:c5:22:fb:90:c7:a6:39:6f:24:84:b6:
         f7:ba:a4:ee:1c:c9:69:8b:69:a7:17:ef:d1:cd:75:58:cb:8a:
         e4:cc:9e:5c:da:4b:62:25:31:5c:fd:b1:44:6f:5a:14:f3:16:
         c5:8b:2f:cf:08:8d:61:7f:08:b9:d9:26:86:bd:79:7b:c1:90:
         9b:fd:f8:76:4c:54:20:0f:b0:f8:2f:9a:6e:a1:09:11:6d:17:
         24:ee:d9:27:9c:ed:7c:ae:a8:35:57:9d:46:57:6b:cb:95:9d:
         f1:f4:41:31:32:ef:05:b3:c5:e3:d0:a5:c5:58:fe:20:46:aa:
         9b:20:e2:18:88:63:15:f9:34:2c:ff:bf:91:6b:0b:52:18:d0:
         72:d6:37:f4:ea:2f:e8:54:34:8a:3c:2b:fb:c4:64:d5:24:96:
         eb:43:d3:b2:de:40:18:06:75:26:11:f4:3f:48:c3:25:c8:bb:
         90:af:22:ef:d0:da:cc:6c:17:73:40:0e:ed:37:b5:62:a0:1d:
         f4:cb:c9:be
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org