Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a343a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          x+1xq4gFc4OEXKdo1p+HI9T4S6XlMAH/ygIx0WajC7U=
Subject key identifier:   3B:3B:F1:F3:BB:FB:FB:30:05:90:D3:6A:1F:C1:A5:CA:3C:E1:D8:54
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       673E27B723683E0C113941E5E4D89B421472DFB2
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:24:16 +0000
ROA not before:           Thu 20 Jul 2023 14:19:16 +0000
ROA not after:            Thu 18 Jul 2024 14:24:16 +0000
asID:                     52706
IP address blocks:        2804:c70:4::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            67:3e:27:b7:23:68:3e:0c:11:39:41:e5:e4:d8:9b:42:14:72:df:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:19:16 2023 GMT
            Not After : Jul 18 14:24:16 2024 GMT
        Subject: CN=3B3BF1F3BBFBFB300590D36A1FC1A5CA3CE1D854
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:de:7d:7f:36:37:f9:20:23:41:9f:81:f0:d1:
                    a8:b1:92:e8:2a:1e:c7:86:d0:66:be:db:9e:5a:06:
                    64:a5:94:5c:27:10:a8:d0:fd:05:52:13:d9:ba:1f:
                    a7:d8:90:06:53:5b:2e:e2:a5:10:37:a6:7f:e5:1c:
                    88:1f:b5:f2:a8:11:d9:f3:3f:07:13:9a:8a:d5:21:
                    e2:4b:32:6c:b4:3b:60:48:87:42:a2:38:49:bd:60:
                    56:f4:19:d2:7f:05:e8:51:5b:2d:77:e0:4b:29:ef:
                    67:9e:29:6a:d5:10:b5:b8:19:e0:c1:25:0c:11:00:
                    36:53:5b:42:e4:f2:94:5a:b0:03:14:5a:9d:ec:ac:
                    e7:c3:72:1c:c8:24:a6:51:1b:88:e2:d2:15:8a:49:
                    0d:64:85:18:30:87:9f:4b:24:09:ee:f8:d3:f3:a6:
                    1f:cf:57:2f:07:a5:a0:56:7d:bf:e1:98:00:2b:8a:
                    29:62:3d:4a:48:de:b2:f5:23:64:1d:67:2a:ab:eb:
                    e7:83:df:4a:d5:b2:46:32:32:cd:16:bc:b3:4d:82:
                    98:51:ae:c5:ac:ed:cf:cc:2c:c9:0e:d8:8c:71:73:
                    59:b4:7f:61:14:54:d6:a1:9c:3f:c3:1d:1b:76:22:
                    74:aa:df:40:d4:43:8a:af:9a:00:74:c2:a3:1b:9c:
                    ce:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:3B:F1:F3:BB:FB:FB:30:05:90:D3:6A:1F:C1:A5:CA:3C:E1:D8:54
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a343a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:4::/48

    Signature Algorithm: sha256WithRSAEncryption
         2e:18:63:83:73:2f:c3:b9:28:d1:db:16:74:31:11:c6:51:da:
         72:57:af:bf:9f:e0:12:36:99:d9:1b:54:1e:11:1d:b3:32:c9:
         fc:d9:14:d7:40:39:ce:d7:f3:7c:47:6c:df:76:a6:2e:02:a4:
         d1:ca:df:a8:63:66:58:b6:c7:77:77:64:04:7c:0d:00:6c:ab:
         4d:01:c7:f1:83:c9:e4:c6:1c:33:cd:6b:21:21:64:53:fd:1c:
         34:17:e9:5f:72:8b:45:d0:53:cd:14:34:f0:8c:69:52:f9:c7:
         7b:7f:fe:8b:90:10:43:8b:03:c4:9b:a6:67:9f:53:3d:e9:5e:
         b0:46:d3:99:a9:f9:9c:ac:45:88:15:28:72:d8:08:17:ca:95:
         d8:cf:d8:c9:1f:f1:e2:f0:96:e6:b7:ac:15:f0:a8:59:fc:f3:
         e1:fe:6a:8e:6f:1c:3d:25:d5:72:4a:d8:4b:6d:df:38:7b:56:
         68:09:f5:33:91:30:65:c0:a5:1a:e7:01:f0:da:8f:14:3a:f3:
         79:3f:e5:7d:4d:66:bc:f6:ef:c6:f0:e9:16:34:5d:cf:9d:fb:
         37:60:47:6c:97:c5:f8:cb:5a:91:c6:6c:fb:65:47:bb:0a:0c:
         ab:d5:0f:0a:ef:99:3c:96:a3:a5:93:60:aa:47:8e:70:8a:94:
         a0:ed:00:eb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org