Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/1/323830343a386463633a3a2f33322d3332203d3e20323733333831.roa
File:                     323830343a386463633a3a2f33322d3332203d3e20323733333831.roa (raw, json)
Hash identifier:          WU3rwVTr3u8J6klgXYsv8KV1GAPbem0GHmzktcbxDYg=
Subject key identifier:   54:BF:CA:19:AB:84:14:BC:44:06:BF:5D:9B:30:1C:7C:00:39:33:03
Certificate issuer:       /CN=8729C54CBC6364DCA8237AC18164DEFAD71A6FF8
Certificate serial:       1AA1CB005298F0BA92658B0AFD24C5456C41780C
Authority key identifier: 87:29:C5:4C:BC:63:64:DC:A8:23:7A:C1:81:64:DE:FA:D7:1A:6F:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8729C54CBC6364DCA8237AC18164DEFAD71A6FF8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/1/323830343a386463633a3a2f33322d3332203d3e20323733333831.roa
Signing time:             Wed 17 Apr 2024 13:39:03 +0000
ROA not before:           Wed 17 Apr 2024 13:34:03 +0000
ROA not after:            Wed 16 Apr 2025 13:39:03 +0000
asID:                     273381
IP address blocks:        2804:8dcc::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:a1:cb:00:52:98:f0:ba:92:65:8b:0a:fd:24:c5:45:6c:41:78:0c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=8729C54CBC6364DCA8237AC18164DEFAD71A6FF8
        Validity
            Not Before: Apr 17 13:34:03 2024 GMT
            Not After : Apr 16 13:39:03 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:a8:e8:7f:fe:f6:6a:ee:ad:b3:fc:83:8d:13:
                    6d:dc:9c:0b:3d:4a:ff:eb:bc:55:90:23:cd:fe:a9:
                    e2:21:9e:26:5d:91:67:63:4e:1c:e6:d7:bf:3f:9e:
                    6a:48:5b:99:a3:39:f5:47:52:87:52:a9:d3:75:c8:
                    2e:3d:a2:1b:ec:14:51:50:0d:53:5e:c5:8c:4f:6a:
                    f8:78:5c:2a:1b:ea:92:5d:f4:0d:bb:df:f5:8e:d5:
                    1a:66:c0:d3:51:f4:73:49:0f:35:cc:b5:63:04:1b:
                    74:12:1b:3f:a6:2a:b7:6e:f3:ea:dd:e2:1a:41:ab:
                    82:e8:6b:26:61:a8:f5:02:57:40:83:24:b9:a4:2e:
                    32:a3:af:a2:3d:a4:31:0b:66:6a:d9:15:af:45:b5:
                    5f:fc:d9:4a:5e:67:48:d2:da:61:12:df:bf:8e:67:
                    32:11:e0:a6:8c:d9:2d:32:c0:13:5b:a2:10:ef:65:
                    57:e8:10:02:92:8c:47:af:91:4a:c8:7c:28:8d:f0:
                    71:6f:32:42:f3:98:9d:85:49:fb:b9:1d:76:d9:07:
                    b3:19:76:48:ee:0f:e0:35:e4:1b:bf:b4:0a:f8:e7:
                    f4:9d:c4:f2:77:e9:55:4d:fc:6e:40:45:00:ef:ce:
                    a1:bf:6c:12:85:e6:a6:a1:49:f4:13:61:ed:18:d7:
                    e2:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:BF:CA:19:AB:84:14:BC:44:06:BF:5D:9B:30:1C:7C:00:39:33:03
            X509v3 Authority Key Identifier:
                keyid:87:29:C5:4C:BC:63:64:DC:A8:23:7A:C1:81:64:DE:FA:D7:1A:6F:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/1/8729C54CBC6364DCA8237AC18164DEFAD71A6FF8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/8729C54CBC6364DCA8237AC18164DEFAD71A6FF8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4FkAAdRe6HGQgonQKDfumJwbQ9ibSuSA5Lz78rTJvHsG/1/323830343a386463633a3a2f33322d3332203d3e20323733333831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8dcc::/32

    Signature Algorithm: sha256WithRSAEncryption
         8a:a1:72:8d:08:b3:e3:d6:56:44:31:39:8c:84:8e:7f:37:ce:
         16:ca:6e:fe:a1:21:2e:ca:10:fa:f5:9b:27:e8:d2:e7:5e:47:
         f9:22:a9:e6:04:82:c8:0b:51:54:33:86:41:2e:e8:95:78:8d:
         fa:e3:62:ca:7c:00:cf:e6:c7:79:60:84:11:5e:f1:7c:8f:3a:
         d0:1f:f5:b0:93:7e:e6:4e:51:21:32:8b:0f:b5:66:97:78:73:
         94:ef:48:72:1a:0c:f8:f0:36:fd:39:e7:d3:a6:c0:f3:ae:e2:
         1b:a3:a0:d0:17:38:02:13:7b:11:89:ac:44:bc:ea:43:fc:11:
         12:12:be:4d:4a:31:79:a2:4c:64:58:80:e6:22:ce:d5:f8:9e:
         e9:54:d4:87:ef:c0:fb:f3:7e:41:60:75:62:6d:63:47:ee:79:
         5b:3e:d6:26:03:1d:05:ca:06:ed:73:ed:b4:79:28:89:37:10:
         13:ff:2a:94:0a:e7:05:42:2b:48:f1:d6:cc:5f:de:98:c9:f2:
         15:09:05:3c:ba:c5:d0:53:66:af:d7:94:79:40:d8:bd:04:ae:
         96:be:39:6d:90:54:04:88:d8:9f:36:37:25:6e:75:ec:6a:fa:
         3a:19:b6:18:2f:d8:97:52:4e:98:44:35:24:33:c5:41:6b:e9:
         1d:95:c7:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org