Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d3336203d3e20323634353137.roa
File:                     323830343a323064633a3a2f33322d3336203d3e20323634353137.roa (raw, json)
Hash identifier:          UfvkIWUdvbt25GUHGuRMS/QDTYFVQL4S+HYxP4Xe/N8=
Subject key identifier:   B9:AF:CD:40:CB:99:55:C3:94:86:FC:83:6A:18:20:0A:07:85:11:DB
Certificate issuer:       /CN=7F686D97C07578DE89B36D9D965211C3C242B838
Certificate serial:       2500756230E30A6E1A1BE4A44700E57FA78B9E06
Authority key identifier: 7F:68:6D:97:C0:75:78:DE:89:B3:6D:9D:96:52:11:C3:C2:42:B8:38
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F686D97C07578DE89B36D9D965211C3C242B838.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d3336203d3e20323634353137.roa
Signing time:             Fri 22 Dec 2023 19:22:00 +0000
ROA not before:           Fri 22 Dec 2023 19:17:00 +0000
ROA not after:            Fri 20 Dec 2024 19:22:00 +0000
asID:                     264517
IP address blocks:        2804:20dc::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:00:75:62:30:e3:0a:6e:1a:1b:e4:a4:47:00:e5:7f:a7:8b:9e:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F686D97C07578DE89B36D9D965211C3C242B838
        Validity
            Not Before: Dec 22 19:17:00 2023 GMT
            Not After : Dec 20 19:22:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:7d:68:6b:05:4a:00:37:25:75:e3:1e:5d:76:
                    8e:52:20:0b:21:f3:50:a9:44:7c:a2:42:fc:7f:e3:
                    29:65:ae:ed:9f:40:4e:3d:7b:36:d2:10:71:79:df:
                    4a:69:5e:6d:3c:0e:58:7b:76:91:05:8d:75:6f:38:
                    d4:07:41:f5:97:96:de:99:d0:f6:cc:1d:80:de:c4:
                    3c:96:3f:3d:a7:80:c2:6f:cc:f5:7d:0c:da:2f:8a:
                    14:d3:fa:ea:6f:81:15:8c:2b:ab:f7:11:b4:2e:ef:
                    21:d1:74:13:d9:a6:de:41:d7:eb:b5:51:ea:8a:e2:
                    0c:07:60:77:ed:e7:ab:04:ca:67:4d:48:10:79:44:
                    ff:77:15:6b:46:1f:72:24:23:21:31:16:88:66:7e:
                    6a:dd:79:f7:b1:50:01:cb:c8:bc:15:b9:90:64:d0:
                    11:66:08:fd:f5:f0:d3:f2:9b:bf:70:92:b0:2b:2b:
                    97:fa:01:26:f0:6f:44:3d:90:16:c0:ab:39:b9:6c:
                    b6:7d:fb:c5:45:3e:ff:7c:a1:2a:6a:a1:76:b5:a2:
                    36:da:9a:52:d5:91:45:43:7b:4e:7b:8a:cb:81:3f:
                    b5:5c:5d:ce:e4:0d:56:c3:04:73:ab:c0:16:59:45:
                    76:67:00:b6:f8:9d:a6:7c:1b:31:68:29:29:42:37:
                    75:c1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:AF:CD:40:CB:99:55:C3:94:86:FC:83:6A:18:20:0A:07:85:11:DB
            X509v3 Authority Key Identifier:
                keyid:7F:68:6D:97:C0:75:78:DE:89:B3:6D:9D:96:52:11:C3:C2:42:B8:38

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/7F686D97C07578DE89B36D9D965211C3C242B838.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7F686D97C07578DE89B36D9D965211C3C242B838.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GnwX2mAgtYY3YoradsFmoSVX4njfzo5dTqho8mg8eRL/0/323830343a323064633a3a2f33322d3336203d3e20323634353137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:20dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         21:a9:80:39:0b:12:c3:35:03:4b:c1:81:c6:4e:10:c7:64:8c:
         5b:a6:90:5e:55:00:74:26:8d:0a:f3:4f:93:54:47:58:70:6f:
         94:44:0b:7d:a2:a2:5e:c2:58:52:63:5c:86:4c:3f:f8:5a:6e:
         7c:51:78:8d:43:16:7a:f3:0b:7a:0b:3a:e6:03:bb:f1:24:41:
         59:b5:c6:a3:d5:dd:ad:ad:3d:15:b2:39:98:5d:ed:60:a2:af:
         b3:c4:3b:27:4e:c0:8b:e3:0e:c3:82:f6:fc:9d:f4:6b:87:44:
         f6:5a:2c:57:b2:85:36:27:3e:52:11:26:f1:ff:34:a3:96:31:
         82:c8:bf:cb:b9:f4:5a:0a:50:71:24:f0:07:0a:1c:48:3a:3a:
         bf:84:f4:d7:b0:bd:c4:51:ca:6e:0f:70:73:d7:7e:44:a7:72:
         b4:69:b7:14:ba:c3:57:c0:a3:91:24:32:ed:3e:cc:3e:c9:84:
         7a:dc:85:77:13:5a:80:d7:39:11:2b:fb:a2:75:cc:87:e1:3c:
         30:ed:14:c4:3f:2a:68:b5:02:04:27:dc:4e:d2:1e:72:4d:70:
         ab:15:54:b7:d1:71:86:17:66:3d:1f:89:a5:2d:a9:7e:0f:37:
         b2:d2:03:f5:03:de:8c:2c:b7:94:71:85:3d:20:bb:ab:94:b2:
         17:7c:04:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org