Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030313a3a2f34382d3438203d3e203532373036.roa
File:                     323830343a6337303a383030313a3a2f34382d3438203d3e203532373036.roa (raw, json)
Hash identifier:          VFCS7SzfUNUHmkKfAnKbyXgRGkBUYSUFbNeOTcUWqjs=
Subject key identifier:   71:17:E8:E3:40:8D:8F:73:AF:33:2D:5A:7E:BB:20:05:09:CA:01:0A
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       225139DAA981DE8FE7A29CDFC7A64D6487DA029D
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030313a3a2f34382d3438203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:42:10 +0000
ROA not before:           Thu 20 Jul 2023 14:37:10 +0000
ROA not after:            Thu 18 Jul 2024 14:42:10 +0000
asID:                     52706
IP address blocks:        2804:c70:8001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:51:39:da:a9:81:de:8f:e7:a2:9c:df:c7:a6:4d:64:87:da:02:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:37:10 2023 GMT
            Not After : Jul 18 14:42:10 2024 GMT
        Subject: CN=7117E8E3408D8F73AF332D5A7EBB200509CA010A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ba:25:cb:d0:43:41:7e:f7:59:44:21:4b:40:d9:
                    72:c2:b3:d1:1c:fd:85:66:9e:58:bd:b1:eb:18:db:
                    5a:a6:b6:34:41:0c:c5:7f:5c:b6:3c:5d:7c:ed:ef:
                    0d:3c:03:b2:7c:09:fc:18:3f:03:9e:34:64:95:59:
                    be:3b:fc:f7:fb:50:a9:3d:f1:30:d5:64:90:8f:2c:
                    23:1c:da:0e:3a:5c:f8:b5:59:ca:31:76:bf:1a:73:
                    00:4f:5f:24:50:cc:0b:ca:15:23:5f:fc:7e:bd:fe:
                    74:9f:ef:84:17:a1:d8:d1:50:93:b2:fc:3d:af:73:
                    cc:13:c0:fa:d3:dc:c0:05:f1:17:67:91:1b:ed:82:
                    29:ea:b3:b5:05:42:04:1a:ca:b1:ed:85:14:2c:5e:
                    e5:49:03:e2:6a:17:d8:3a:b3:68:2c:0a:7d:11:4c:
                    cb:a4:4e:e8:de:0a:25:56:b7:26:aa:34:16:ce:56:
                    2b:91:4e:6e:73:dc:1f:6f:38:4c:dd:3e:3e:c1:f1:
                    a7:a3:2a:7d:05:5e:b4:05:b8:2e:54:77:59:0a:f1:
                    0e:1a:8d:93:27:fa:ce:50:56:6a:a7:5c:16:09:cb:
                    66:55:06:5b:b8:f1:a8:f4:8b:60:b6:8a:78:fa:23:
                    e5:1d:b4:aa:b3:9a:55:c9:9c:75:6d:90:96:e8:39:
                    22:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:17:E8:E3:40:8D:8F:73:AF:33:2D:5A:7E:BB:20:05:09:CA:01:0A
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a383030313a3a2f34382d3438203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:8001::/48

    Signature Algorithm: sha256WithRSAEncryption
         4f:e6:51:80:19:85:89:81:f2:7e:8d:8e:78:1b:a4:f1:15:ef:
         73:a6:6e:12:bb:f4:09:0f:11:4f:f1:ad:22:71:99:23:50:a8:
         83:49:68:5f:f2:3f:11:20:2d:53:67:d9:a3:91:61:a7:f0:03:
         54:ae:0c:c9:70:89:c3:fd:f8:e3:d7:65:57:bf:61:48:9a:3e:
         22:fa:3f:12:4e:6b:a6:91:5c:cd:e2:5a:93:ca:5e:b1:47:70:
         be:19:da:53:4a:4c:d3:88:d7:57:8d:7f:5d:f9:c3:3c:81:e6:
         96:c9:fd:30:1b:da:80:74:6b:7c:42:1d:fb:82:2d:95:06:dd:
         d9:37:e0:12:93:29:1f:55:4f:28:d8:a9:4a:58:4c:85:e5:ed:
         c2:23:3a:28:3c:c5:db:26:85:14:ac:5b:a3:1b:8c:d6:82:3e:
         85:0d:3c:b1:23:3f:fc:ee:51:e8:d4:37:0f:15:77:2d:b6:45:
         1e:57:ed:82:cc:4d:13:f0:82:64:f6:10:83:0a:af:2e:eb:f2:
         4d:c9:02:ed:22:f6:c9:f8:d7:97:17:22:81:d7:25:ec:d9:ec:
         d5:54:a4:d7:bb:e2:64:44:f1:66:60:22:54:17:0c:59:a5:60:
         15:97:43:c0:1e:23:e4:a8:2f:58:b8:81:c9:f9:2c:9e:25:8b:
         e2:4b:4e:7e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org