Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          VIno+lnjKsfIlYSzCroBc+hpuojNbSg5/kccRXWth7Y=
Subject key identifier:   9E:2A:B0:CF:A4:FE:95:C2:CB:B4:0C:3A:46:1B:31:D1:7A:01:7B:8E
Certificate issuer:       /CN=21A02AA2E829E518343958EE9E7A7D284839B404
Certificate serial:       4FF014588D0F9C5C12FEB2A6D6A40540CB7C2690
Authority key identifier: 21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Thu 20 Jul 2023 14:19:40 +0000
ROA not before:           Thu 20 Jul 2023 14:14:40 +0000
ROA not after:            Thu 18 Jul 2024 14:19:40 +0000
asID:                     52706
IP address blocks:        2804:c70::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4f:f0:14:58:8d:0f:9c:5c:12:fe:b2:a6:d6:a4:05:40:cb:7c:26:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=21A02AA2E829E518343958EE9E7A7D284839B404
        Validity
            Not Before: Jul 20 14:14:40 2023 GMT
            Not After : Jul 18 14:19:40 2024 GMT
        Subject: CN=9E2AB0CFA4FE95C2CBB40C3A461B31D17A017B8E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:2d:20:20:50:50:3c:69:46:41:b6:9a:56:65:
                    c1:80:e0:50:6e:72:fe:60:0d:69:44:de:9e:1e:9a:
                    ee:c7:20:b4:d8:a6:1b:2f:7e:6a:09:ed:53:56:48:
                    dd:86:b4:36:8f:64:31:92:78:30:aa:44:6e:18:6e:
                    fa:f8:de:c7:2e:64:e8:36:1a:cd:b2:ac:1b:a3:5f:
                    a5:1c:61:f2:38:1a:ae:0b:bf:d8:2f:3d:02:bc:e7:
                    b8:9b:aa:d7:55:ca:af:fe:72:cd:ac:94:7b:e6:61:
                    e1:a7:7f:53:77:a5:32:0b:86:0d:10:2d:8b:70:ae:
                    e8:aa:0d:41:6a:94:33:60:09:98:e8:96:56:c3:39:
                    f3:a1:39:51:9f:fa:4c:00:99:e3:28:d6:24:c4:79:
                    45:39:11:1a:c6:0f:05:9b:75:7a:6b:fb:1e:cd:3f:
                    5d:41:51:9c:48:e5:cd:46:5a:52:db:9b:92:7b:89:
                    47:69:61:c4:89:d1:b0:2a:bd:42:51:ec:ad:04:91:
                    10:b5:4f:8e:e6:b9:30:32:4b:50:07:c3:27:a3:ee:
                    f1:19:6a:bf:4e:73:85:65:e9:95:ef:c9:83:5d:2d:
                    2f:ce:0b:3a:3d:5f:79:bc:77:ad:01:32:98:09:32:
                    c0:67:c3:a6:84:8d:6f:31:a0:80:82:c0:14:92:77:
                    e1:43
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:2A:B0:CF:A4:FE:95:C2:CB:B4:0C:3A:46:1B:31:D1:7A:01:7B:8E
            X509v3 Authority Key Identifier:
                keyid:21:A0:2A:A2:E8:29:E5:18:34:39:58:EE:9E:7A:7D:28:48:39:B4:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/21A02AA2E829E518343958EE9E7A7D284839B404.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/21A02AA2E829E518343958EE9E7A7D284839B404.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70::/36

    Signature Algorithm: sha256WithRSAEncryption
         51:6a:61:c7:d3:10:3a:27:e9:da:2b:3d:41:68:b9:63:b2:71:
         cd:1f:78:d4:be:28:92:0f:aa:1b:85:58:66:dc:a7:ea:7e:0e:
         10:52:47:f1:20:40:c3:ce:89:53:6f:73:e2:cb:6a:89:7f:68:
         15:1a:3a:3f:b4:30:76:76:cd:7d:69:99:37:1f:83:56:f9:46:
         d4:9f:02:e1:6b:26:10:59:85:74:ba:80:19:32:37:8a:a5:4b:
         ab:7b:4c:79:a8:3d:e6:f4:ef:7c:19:49:07:73:9e:06:2d:c3:
         91:9d:f7:ed:1b:5a:da:41:6e:f7:aa:84:ff:68:9e:c5:a2:49:
         fc:2f:2c:ef:5c:d2:82:cc:7d:91:c0:25:64:ce:e1:9c:db:8f:
         32:16:e0:9e:b0:86:ba:54:9b:68:09:77:3e:eb:30:d7:43:26:
         2c:8b:73:ac:52:08:f2:6c:b1:7a:a7:0d:ab:4e:c7:b2:10:09:
         24:1f:a7:43:77:9b:3b:d5:9a:a5:6e:3b:fb:fd:a5:fa:cf:51:
         75:d6:15:fd:60:95:9c:38:ad:c1:71:0e:2c:f7:dc:77:f8:f6:
         0d:7c:c1:14:80:ab:d8:01:55:7e:e4:b6:d6:a5:39:09:22:60:
         1f:de:94:c6:06:61:a1:eb:43:21:ad:4d:ea:43:f1:ca:da:a1:
         85:2c:21:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org