Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a393030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a393030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          HUErbZGabbvZ94F/qeX/+47mpZEH/7GxM34S/GN9ecU=
Subject key identifier:   47:1E:2E:96:5B:0C:CD:ED:64:53:1E:9E:80:33:1B:74:A0:E9:73:5D
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       2E9CAE8BA75D4A76FF303DBE7D84F87299BDC709
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a393030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:20:28 +0000
ROA not before:           Thu 20 Jul 2023 14:15:28 +0000
ROA not after:            Thu 18 Jul 2024 14:20:28 +0000
asID:                     52706
IP address blocks:        2804:c70:9000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2e:9c:ae:8b:a7:5d:4a:76:ff:30:3d:be:7d:84:f8:72:99:bd:c7:09
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:15:28 2023 GMT
            Not After : Jul 18 14:20:28 2024 GMT
        Subject: CN=471E2E965B0CCDED64531E9E80331B74A0E9735D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e9:c2:c6:6d:4c:62:5a:1f:79:9d:0d:29:c0:5b:
                    4f:4a:13:33:53:1a:40:a7:00:a9:aa:91:cc:31:00:
                    45:0b:1b:44:e6:1b:b7:25:bc:d1:1c:66:0a:77:e1:
                    d5:76:01:59:cc:fc:5f:33:ed:31:c1:90:52:80:a3:
                    66:0d:c7:2b:e1:3d:4f:8a:82:b0:cb:52:23:db:10:
                    2a:51:c6:c9:97:47:26:3d:cb:d3:3d:32:56:0b:33:
                    65:09:69:aa:8e:ef:1c:0f:e7:ea:16:2e:00:d3:a6:
                    70:46:87:71:da:5d:a4:51:a6:2d:17:b3:59:e1:ed:
                    e0:8e:62:91:f2:83:94:b8:62:91:c3:a0:8e:ef:c2:
                    5a:11:e3:ae:e7:cb:f7:5d:43:ef:f6:94:b4:e3:75:
                    e7:19:7b:dc:44:0a:ac:63:e7:ce:66:ca:cd:51:60:
                    60:bf:4a:d7:e1:87:e8:1a:1a:27:11:4f:ee:b8:9d:
                    39:4c:41:e3:25:a4:ca:45:8c:eb:62:66:d7:df:7b:
                    06:ad:07:e1:38:6b:06:8d:4f:74:fe:2f:9f:f9:86:
                    d0:e8:5d:a9:82:43:5e:5c:51:bf:b8:86:ff:67:0d:
                    4b:8c:63:71:68:6a:3c:4a:10:bd:3a:28:2f:ca:da:
                    6a:10:d4:12:bd:87:8c:eb:8d:2f:b0:f6:9f:09:bb:
                    c6:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                47:1E:2E:96:5B:0C:CD:ED:64:53:1E:9E:80:33:1B:74:A0:E9:73:5D
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a393030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:9000::/36

    Signature Algorithm: sha256WithRSAEncryption
         2b:9a:ec:56:d6:37:13:b6:ab:41:be:51:b9:9b:ca:7c:2f:6a:
         24:5e:b1:68:84:e7:92:36:a1:fc:9d:65:61:7e:ce:89:4a:76:
         0d:77:b4:58:36:36:e5:bd:b4:ab:ea:5e:5d:69:71:83:bc:a8:
         ba:f0:ae:56:0a:68:1c:a8:d9:94:7c:f1:fd:67:d6:51:9d:07:
         42:a6:5e:83:be:38:10:e5:0b:37:9a:9e:33:ac:be:96:d6:5d:
         17:80:cb:0c:83:b2:1d:e9:9b:62:c9:73:90:c1:61:ec:3a:6a:
         e0:1b:af:71:9f:e4:3a:41:51:62:bb:2c:87:48:32:ea:60:f3:
         bd:1f:39:4f:c0:ea:ec:25:a8:4a:6b:16:f7:e6:ad:c8:3d:ec:
         ed:dd:20:9a:cc:e7:2a:27:d0:e9:5c:8e:5b:8b:b3:62:de:2e:
         c2:04:5d:47:5e:4f:41:c9:b3:1f:90:d0:fe:bf:99:89:c0:6a:
         2c:1d:19:34:b7:ba:58:33:b4:15:73:33:0b:fa:2a:fb:d0:dc:
         a4:63:20:84:74:6a:62:e5:f4:39:89:8f:96:1b:9c:4f:29:c1:
         ab:33:81:bb:a4:ed:e7:3b:67:a5:27:8f:29:e3:6d:4e:a8:a2:
         a9:58:b7:bc:f2:d8:60:69:16:0f:37:25:00:e2:2e:aa:51:a2:
         fe:33:7b:9f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org