Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a643030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a643030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          8gd1UmqxM5eZk2F8wC42BBVTWbw/tUTl1AIZRntbYwk=
Subject key identifier:   BA:D7:C2:F7:EE:EF:CC:64:E1:1F:EF:22:78:46:2A:DE:4C:4C:3F:EA
Certificate issuer:       /CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
Certificate serial:       2151CE1B6CDED5AB407DF0E8FED5CBFD67BA8819
Authority key identifier: D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a643030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Mon 19 Dec 2022 18:25:16 +0000
ROA not before:           Mon 19 Dec 2022 18:20:16 +0000
ROA not after:            Mon 18 Dec 2023 18:25:16 +0000
asID:                     52706
IP address blocks:        2804:c70:d000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:51:ce:1b:6c:de:d5:ab:40:7d:f0:e8:fe:d5:cb:fd:67:ba:88:19
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
        Validity
            Not Before: Dec 19 18:20:16 2022 GMT
            Not After : Dec 18 18:25:16 2023 GMT
        Subject: CN=BAD7C2F7EEEFCC64E11FEF2278462ADE4C4C3FEA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:fb:4d:7c:ee:9e:66:d9:0d:5d:5e:f9:2d:e1:
                    cd:5e:d6:b2:98:2d:d0:68:83:d7:5f:9b:15:8e:fb:
                    d7:e4:57:dc:9a:27:08:53:1d:65:a2:56:7e:3c:06:
                    c1:31:a1:6d:da:65:10:15:0e:ed:ee:bb:d9:71:ed:
                    06:91:6b:29:87:57:23:9b:25:15:44:e6:8e:f6:77:
                    45:36:0f:a9:93:ea:72:87:9a:fb:03:b6:8c:1f:ba:
                    45:b2:62:44:0f:78:14:53:da:96:01:e1:31:02:f7:
                    40:e8:18:a4:82:34:f0:55:52:de:b7:6c:f7:ce:1d:
                    f9:9e:ed:bc:23:db:01:be:62:dd:0a:33:b4:40:15:
                    ad:d1:49:28:da:2a:c2:58:04:23:30:01:d8:cb:6c:
                    d7:68:c9:e8:19:50:e1:18:f3:b6:8f:ac:b2:a9:9b:
                    03:42:61:54:d9:cc:9a:29:7a:0e:06:a5:14:73:2a:
                    97:23:01:4b:ff:d6:fc:d3:a8:14:7e:df:72:e4:9c:
                    b3:e7:f7:dc:f6:94:1b:c4:eb:aa:35:ec:28:ad:44:
                    4e:1d:42:9e:f5:27:48:26:0a:a5:37:a8:62:c7:b6:
                    e0:c4:9f:a4:aa:95:54:9e:3d:41:2e:45:b0:33:fb:
                    68:c0:1e:19:8c:cc:f7:b5:0c:c6:33:ea:05:83:d1:
                    57:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BA:D7:C2:F7:EE:EF:CC:64:E1:1F:EF:22:78:46:2A:DE:4C:4C:3F:EA
            X509v3 Authority Key Identifier:
                keyid:D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a643030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:d000::/36

    Signature Algorithm: sha256WithRSAEncryption
         43:3b:fc:fc:c4:71:e9:12:8d:05:c6:7d:b0:61:0d:c0:77:8a:
         87:f1:74:94:d3:e5:ee:59:3d:b2:9e:5b:20:b5:5b:1b:3a:c3:
         f7:b1:07:1a:5c:5b:2c:dd:dc:8a:a9:41:5a:9e:17:f8:76:8e:
         b0:87:5b:87:65:d3:23:ec:8e:45:f6:08:26:9a:63:ac:2c:33:
         7d:bb:70:63:ba:68:fb:40:31:2f:2d:d9:40:e1:ce:ac:da:06:
         38:9a:e6:f3:2a:76:1d:ef:e8:12:c0:53:7d:c6:49:aa:31:da:
         f3:93:72:c8:ef:40:02:b7:49:89:56:f5:1d:7a:7f:49:30:8d:
         63:7a:d6:4f:fa:fd:34:4c:8e:4e:42:97:86:8b:6d:36:e1:de:
         14:16:50:68:f0:46:43:fb:ed:52:dd:a4:3f:bc:a8:77:bc:72:
         35:e6:91:13:99:34:fe:1d:f4:2b:3f:84:b3:8d:c3:da:23:2d:
         2c:01:4b:96:6f:fa:fb:84:13:6e:10:5e:d7:83:f5:80:c8:fe:
         d6:56:6d:3a:79:0f:21:bc:43:4e:05:d7:ad:4b:b8:1c:20:0e:
         e6:44:27:72:8e:19:65:8c:59:43:ee:b7:01:da:95:39:fd:8d:
         98:62:69:e8:02:e2:2f:75:41:5a:75:85:1e:c6:db:72:af:3e:
         35:8f:0d:f4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org