Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030323a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a363030323a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          xm5a0whX93wCZW+2WtL4preTE8lGMVBmU7EYJX0xc5Y=
Subject key identifier:   9B:4E:48:9E:55:C2:94:C8:F6:EF:48:07:B0:27:90:0A:69:B4:68:47
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       423D0F0D8999D092A29B8E14A45D7ACF4FA400FF
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030323a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:39:13 +0000
ROA not before:           Thu 20 Jul 2023 14:34:13 +0000
ROA not after:            Thu 18 Jul 2024 14:39:13 +0000
asID:                     52706
IP address blocks:        2804:c70:6002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:3d:0f:0d:89:99:d0:92:a2:9b:8e:14:a4:5d:7a:cf:4f:a4:00:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:34:13 2023 GMT
            Not After : Jul 18 14:39:13 2024 GMT
        Subject: CN=9B4E489E55C294C8F6EF4807B027900A69B46847
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c1:8c:eb:20:6b:e3:9a:5f:ca:c0:0d:91:2f:6c:
                    6f:be:64:aa:60:37:20:d0:01:11:e7:2a:8c:0e:e3:
                    77:b0:64:61:6d:e3:1a:01:26:ce:df:c5:96:ee:5c:
                    0f:da:05:d2:32:30:57:57:0f:1e:33:51:af:a3:7a:
                    56:37:ae:34:13:bc:18:92:02:b2:da:69:f0:f8:e2:
                    41:1f:41:0f:9f:f6:b1:ba:a3:9d:bc:69:2d:3b:6c:
                    b2:f0:75:cc:9e:8f:5c:e0:a7:7f:bb:98:e8:c4:85:
                    0f:79:23:d9:74:ad:f0:55:b1:c0:e7:13:b4:a8:e3:
                    3e:5e:d3:e1:18:f9:10:28:6c:f2:43:62:46:d3:ca:
                    ca:14:ef:03:ea:30:ec:4b:93:40:f9:cd:ef:86:89:
                    35:8e:35:5b:f0:0a:0f:9c:3d:25:62:df:d7:c4:a6:
                    17:7b:b3:f8:a3:01:ac:fa:44:7d:e7:2f:3b:1b:76:
                    4b:e3:92:0c:c0:6a:2a:76:8f:27:35:86:86:25:10:
                    fb:ec:a6:a6:a6:28:c6:10:59:fb:d6:30:d1:75:84:
                    c5:09:12:f7:9c:ef:3c:7b:d9:15:5c:80:38:f0:a9:
                    89:00:75:0f:f5:7c:35:20:ef:b9:50:22:18:15:5d:
                    3d:9f:d2:f9:8f:46:aa:b6:97:e7:4f:8d:d6:52:9d:
                    7b:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9B:4E:48:9E:55:C2:94:C8:F6:EF:48:07:B0:27:90:0A:69:B4:68:47
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a363030323a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:6002::/48

    Signature Algorithm: sha256WithRSAEncryption
         b0:da:39:79:83:84:cf:56:fd:e1:c6:e4:4a:68:b2:c3:7d:d7:
         56:f5:9a:e8:74:dd:1b:44:7c:26:cc:9a:c3:60:a9:c1:6f:2d:
         a2:6e:1d:a6:f3:35:1a:0b:e8:35:3b:7a:7f:84:26:e7:01:1e:
         8a:b1:0e:26:86:bb:ef:76:21:f5:0a:69:64:07:af:81:c9:b6:
         23:51:68:2a:1e:7d:2e:67:c0:d3:c8:df:d7:8f:7f:ea:e5:f9:
         fa:79:05:a6:48:5f:a0:0c:c7:0a:0a:c9:d5:38:53:d2:12:f4:
         bc:da:f1:ff:d5:f5:6e:4a:d5:31:be:ee:cf:c4:48:15:0a:b4:
         1f:66:63:7c:5d:b8:ef:81:af:12:e9:ea:2e:c2:88:ed:ea:9c:
         a3:fb:df:dd:e1:91:1a:ec:8b:92:cd:47:e1:e3:f5:b3:a9:38:
         53:1f:3e:61:bc:62:d4:2d:75:0e:fc:70:12:4e:75:91:25:99:
         cc:ae:71:4c:e5:6b:e8:99:ca:ce:d5:5a:da:c2:3a:a1:a7:b4:
         e7:1e:5d:ad:c9:3a:60:3c:cd:8d:f4:3e:db:31:f8:44:ee:a9:
         e7:29:13:c1:65:b8:92:af:47:8b:83:a5:ad:19:1f:00:52:53:
         01:f4:05:50:27:45:51:5f:8f:99:5c:ce:86:47:29:54:71:c1:
         fa:59:28:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org