Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33322d3430203d3e20323639313735.roa
File:                     323830343a316634633a3a2f33322d3430203d3e20323639313735.roa (raw, json)
Hash identifier:          3yzFUcK1gZohDKHgsGgfum5IF5RZEEmm3FTXJlFnwW4=
Subject key identifier:   99:BE:2F:EB:DD:F1:10:5F:7E:5E:9C:80:87:D6:F6:72:FF:97:72:2D
Certificate issuer:       /CN=D402AAFBAE178D53D194E6E1C2D54048BE15B08E
Certificate serial:       1DFEEDA8DDEFA1EC1AB41C63D6EE597ED4CBB7C1
Authority key identifier: D4:02:AA:FB:AE:17:8D:53:D1:94:E6:E1:C2:D5:40:48:BE:15:B0:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33322d3430203d3e20323639313735.roa
Signing time:             Thu 01 Feb 2024 15:31:48 +0000
ROA not before:           Thu 01 Feb 2024 15:26:48 +0000
ROA not after:            Thu 30 Jan 2025 15:31:48 +0000
asID:                     269175
IP address blocks:        2804:1f4c::/32 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1d:fe:ed:a8:dd:ef:a1:ec:1a:b4:1c:63:d6:ee:59:7e:d4:cb:b7:c1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D402AAFBAE178D53D194E6E1C2D54048BE15B08E
        Validity
            Not Before: Feb  1 15:26:48 2024 GMT
            Not After : Jan 30 15:31:48 2025 GMT
        Subject: CN=99BE2FEBDDF1105F7E5E9C8087D6F672FF97722D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:c9:a2:a5:2f:b9:67:6d:8d:af:60:b9:1f:50:
                    86:2d:75:f9:f2:3a:90:3f:62:0f:ed:0d:f3:3e:7b:
                    74:48:3a:c1:1f:7c:59:9f:f0:ce:da:78:f4:9d:ea:
                    c2:8c:5d:71:f8:3c:85:ff:20:cc:c0:e0:0f:27:df:
                    95:e6:eb:a7:90:51:09:de:f8:7d:ae:d7:3a:53:32:
                    f5:4e:12:3c:20:2b:da:81:9b:2d:78:90:14:27:78:
                    79:23:53:af:80:58:79:d8:49:e3:38:4e:0f:79:db:
                    0f:0c:a6:dd:eb:5c:61:57:68:21:ef:65:06:5e:65:
                    1f:51:76:ca:bd:b3:48:f3:59:46:55:49:91:07:4b:
                    a2:ea:0b:8c:bd:bb:f1:c2:04:5e:4e:61:fc:e9:32:
                    d1:01:0a:ec:93:49:cc:77:3e:cb:60:c5:5c:c6:7f:
                    75:01:19:b2:ff:d3:16:d9:37:95:e2:3d:2b:d3:4f:
                    84:e1:fd:6a:80:d8:b3:ba:c1:c0:bd:d5:10:3a:e8:
                    1b:4b:dd:d1:a5:d3:8e:9f:1e:c0:c6:90:f9:19:12:
                    9b:46:32:05:1a:1d:5e:63:dc:d4:3b:aa:d9:be:fe:
                    fc:1f:8f:75:90:6c:0c:7d:45:f0:8d:d3:5b:19:cf:
                    a7:93:24:91:a8:22:d2:bb:14:b4:c9:38:cc:c1:8a:
                    03:95
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                99:BE:2F:EB:DD:F1:10:5F:7E:5E:9C:80:87:D6:F6:72:FF:97:72:2D
            X509v3 Authority Key Identifier:
                keyid:D4:02:AA:FB:AE:17:8D:53:D1:94:E6:E1:C2:D5:40:48:BE:15:B0:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D402AAFBAE178D53D194E6E1C2D54048BE15B08E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GtEY61VzbXM3sSXnt9cWLAZeLKpb7bJH9jt1kwZLjtH/0/323830343a316634633a3a2f33322d3430203d3e20323639313735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1f4c::/32

    Signature Algorithm: sha256WithRSAEncryption
         2a:1c:2d:1d:c3:ab:57:68:11:fa:93:39:da:46:3d:0c:ff:00:
         8d:a1:3c:2a:77:0e:43:9e:c1:02:ff:3d:29:2c:6d:7b:0d:df:
         e9:53:dd:51:dd:16:a5:13:3f:1d:e8:6f:d2:fe:5f:e9:6f:f3:
         d5:ab:c2:fd:b3:6a:d6:75:14:ed:a9:9b:92:08:ed:1a:7b:df:
         fb:ec:b5:3b:43:59:5a:b9:12:b3:1f:73:10:ff:32:6c:ed:7c:
         b3:da:2f:6c:67:3c:34:81:3b:e5:df:01:18:f4:e2:75:dc:99:
         e4:1a:de:2d:d1:ce:dc:fd:54:8c:20:c2:f3:61:be:22:77:af:
         4a:90:e5:3d:7b:04:e8:30:ce:0f:d9:04:c9:db:49:af:5e:30:
         7b:1c:ec:e5:63:cf:b5:df:2f:b3:6c:75:5b:3e:e3:34:9c:f7:
         36:04:c6:4a:ec:9c:d1:56:67:0d:f9:3f:a8:a3:bc:d3:0e:b0:
         1d:f5:88:b4:61:8f:88:bb:d5:94:5d:f1:37:34:2c:97:4c:6d:
         9f:8e:3b:13:d8:ec:14:89:c1:7a:5e:81:4f:1a:10:d1:44:59:
         8d:ad:cd:a3:ac:1d:8e:99:25:5a:7b:53:a3:4d:1d:5c:78:fb:
         13:20:41:da:2b:78:df:47:e7:33:b3:82:f0:16:3e:59:d7:9a:
         86:df:84:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org