Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/323830343a336464303a3a2f33322d3332203d3e203238323230.roa
File:                     323830343a336464303a3a2f33322d3332203d3e203238323230.roa (raw, json)
Hash identifier:          rBfObM2T7MMlG7hSA8gbHNbQHJXVKbZdn98KY9QGCLQ=
Subject key identifier:   8C:D7:95:98:13:BA:91:23:1D:73:E4:8D:B3:AF:80:F5:E0:80:AF:DC
Certificate issuer:       /CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
Certificate serial:       020E2F369F43CDEE8C128D6ACDDDD4DCF3F1F74C
Authority key identifier: D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/323830343a336464303a3a2f33322d3332203d3e203238323230.roa
Signing time:             Thu 06 Oct 2022 18:07:12 +0000
ROA not before:           Thu 06 Oct 2022 18:02:12 +0000
ROA not after:            Thu 05 Oct 2023 18:07:12 +0000
asID:                     28220
IP address blocks:        2804:3dd0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            02:0e:2f:36:9f:43:cd:ee:8c:12:8d:6a:cd:dd:d4:dc:f3:f1:f7:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7F9A5F1DEF91840838A45D3C3174E077F15F3DA
        Validity
            Not Before: Oct  6 18:02:12 2022 GMT
            Not After : Oct  5 18:07:12 2023 GMT
        Subject: CN=8CD7959813BA91231D73E48DB3AF80F5E080AFDC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:a3:c3:e3:f1:fc:ba:3f:49:27:89:61:43:02:
                    20:01:bf:60:18:36:5b:97:59:c9:06:b9:23:73:92:
                    c9:fe:27:1b:e0:c5:77:cc:5b:ec:00:a5:36:2b:26:
                    99:d7:14:c0:88:1d:2b:b1:2a:a2:70:7c:1e:28:9b:
                    e4:d2:76:81:d0:ef:9e:4e:38:9d:7e:a3:10:d9:02:
                    4d:cd:ff:ba:b9:34:e4:f9:07:06:ec:50:4a:48:d4:
                    fb:69:42:d3:1a:98:e3:8e:68:d1:8f:39:8c:c7:12:
                    67:87:73:03:f7:a5:ff:8c:f2:21:8b:72:26:15:ec:
                    b0:b1:80:3a:85:6c:4e:68:58:db:c0:ff:65:4d:4b:
                    b2:e3:b8:df:c9:0f:52:96:e1:03:08:98:88:0a:70:
                    54:19:8e:e4:c2:a5:69:86:7a:a0:74:be:99:7f:06:
                    49:5c:66:63:7d:bf:82:a4:77:2e:ce:2c:6f:b1:2f:
                    60:ab:79:6d:5f:43:79:42:d8:f5:14:2d:22:a8:3b:
                    c0:1e:d6:4b:0d:a7:f6:a1:bb:f8:66:35:f2:24:d4:
                    44:e2:a0:cb:d0:08:d5:5d:eb:be:b6:37:10:a4:ab:
                    47:51:e2:fe:d2:d4:4a:2d:7e:63:ee:f5:29:d5:6f:
                    87:1c:bd:c0:e0:55:c7:a8:21:2e:49:35:9c:7f:86:
                    c1:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D7:95:98:13:BA:91:23:1D:73:E4:8D:B3:AF:80:F5:E0:80:AF:DC
            X509v3 Authority Key Identifier:
                keyid:D7:F9:A5:F1:DE:F9:18:40:83:8A:45:D3:C3:17:4E:07:7F:15:F3:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D7F9A5F1DEF91840838A45D3C3174E077F15F3DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4EV9igNn9b1UeFZprnYbPjyNi7WYZuZJx5pxXzZVZ3Se/0/323830343a336464303a3a2f33322d3332203d3e203238323230.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3dd0::/32

    Signature Algorithm: sha256WithRSAEncryption
         95:d4:e6:83:d8:2f:1d:01:fd:19:20:c0:2f:dc:b0:4c:a7:20:
         2f:0b:8a:16:9d:d8:74:4e:03:1e:36:21:71:ec:69:5c:a3:05:
         26:34:60:6e:a4:4a:c8:6d:96:e5:16:ca:12:9d:cc:6d:93:ee:
         7d:52:3b:12:13:d8:55:53:bf:0c:9f:17:ad:bc:97:e6:f8:f3:
         4f:c8:c7:fa:39:85:b9:0b:cf:7d:39:af:e1:89:60:24:cb:2d:
         c3:66:7b:87:d2:8f:bd:e5:50:b3:1a:67:d9:74:28:2c:ee:6a:
         39:78:fc:ca:fd:08:6f:62:0f:59:f7:35:41:5f:8a:53:34:bc:
         a5:79:df:5c:fe:e8:4a:bb:c0:60:f4:d0:a9:e7:19:5f:04:4d:
         d2:27:f4:33:3e:0a:45:ca:fe:98:72:a5:8c:9a:04:3f:31:5e:
         72:2c:98:a7:b5:32:20:18:d6:4c:ef:2f:02:7b:30:b9:05:ad:
         31:b4:57:e9:a5:f0:b0:de:35:1d:88:18:47:5a:55:4a:1b:c5:
         bb:cc:a3:97:d9:54:bd:73:8e:42:8f:8a:0b:0f:70:4c:97:67:
         02:4b:53:25:50:aa:7c:3a:a0:c0:64:cd:20:b5:06:94:4d:5f:
         1a:f3:b6:9b:c4:96:a3:65:70:90:77:1a:56:12:26:2f:cc:59:
         9f:4e:77:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:32 2024 by rpki-client on console-ams.rpki-client.org