Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a3a2f33342d3334203d3e20323633383738.roa
File:                     323830343a323732303a3a2f33342d3334203d3e20323633383738.roa (raw, json)
Hash identifier:          r59cMH1vWvfnMoK3lmbSt+l4H8NWzKzSck/K/oePnGw=
Subject key identifier:   B5:C5:75:FD:3B:8F:F2:82:EB:96:18:D9:4A:E8:D4:58:D3:61:F6:A7
Certificate issuer:       /CN=3479A07990261201A4636EAD12C16D32507ECB61
Certificate serial:       4581599B60570884D288DD53347F49A25D7DBE17
Authority key identifier: 34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a3a2f33342d3334203d3e20323633383738.roa
Signing time:             Tue 16 Jan 2024 13:29:07 +0000
ROA not before:           Tue 16 Jan 2024 13:24:07 +0000
ROA not after:            Tue 14 Jan 2025 13:29:07 +0000
asID:                     263878
IP address blocks:        2804:2720::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:81:59:9b:60:57:08:84:d2:88:dd:53:34:7f:49:a2:5d:7d:be:17
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3479A07990261201A4636EAD12C16D32507ECB61
        Validity
            Not Before: Jan 16 13:24:07 2024 GMT
            Not After : Jan 14 13:29:07 2025 GMT
        Subject: CN=B5C575FD3B8FF282EB9618D94AE8D458D361F6A7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:2e:f9:e1:3d:58:20:0e:66:00:3a:70:e7:ab:
                    22:98:e3:f0:ed:c1:8e:b6:a6:59:2a:d9:03:33:38:
                    ac:b7:2d:47:6c:58:b2:9e:bf:d7:5b:2a:04:43:f4:
                    ec:5e:5d:fd:e2:33:67:2b:db:f1:97:4f:c6:13:a7:
                    ee:07:28:44:a5:21:a3:95:6f:5d:51:ed:f9:6d:85:
                    cb:aa:41:e5:b8:e7:fa:62:e5:4e:e4:80:05:ad:52:
                    af:9d:0f:e0:1b:af:ee:7b:c2:62:fe:f7:53:2c:19:
                    b1:5f:cb:6e:2e:ed:f6:7b:4c:c9:5b:c6:e8:ce:55:
                    04:13:ca:9c:e0:bd:50:4f:56:58:32:c2:d3:be:33:
                    fa:11:ca:d6:40:d9:f5:7f:b2:84:77:2e:be:31:de:
                    2f:84:0f:5b:29:29:c5:b2:c8:ae:8b:64:01:04:9b:
                    18:7c:de:40:cd:e8:68:87:a7:44:84:20:da:e6:8d:
                    e9:ac:15:6c:dc:c2:e4:e6:bc:86:17:c1:95:e0:d7:
                    6a:f2:77:81:9a:59:70:76:ac:45:3b:9d:03:6f:05:
                    6e:41:5b:a9:44:1c:88:e6:5c:c4:51:e5:ca:6b:8e:
                    28:10:80:ce:59:1a:1f:00:a1:c4:9f:3a:96:b7:be:
                    15:c2:37:f4:db:5f:27:03:d4:84:bc:54:e3:69:4e:
                    39:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B5:C5:75:FD:3B:8F:F2:82:EB:96:18:D9:4A:E8:D4:58:D3:61:F6:A7
            X509v3 Authority Key Identifier:
                keyid:34:79:A0:79:90:26:12:01:A4:63:6E:AD:12:C1:6D:32:50:7E:CB:61

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/3479A07990261201A4636EAD12C16D32507ECB61.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3479A07990261201A4636EAD12C16D32507ECB61.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4H9bRRRCDVqfcmaJzw76p9UXXMQoaHiwxpdeuhneZFTX/0/323830343a323732303a3a2f33342d3334203d3e20323633383738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2720::/34

    Signature Algorithm: sha256WithRSAEncryption
         3f:a5:3c:5a:eb:98:c5:e4:bd:6f:20:98:16:0f:dd:6a:85:a2:
         e4:17:02:93:b7:38:2b:0d:e6:66:91:fe:de:ff:f6:86:ce:70:
         77:ce:7c:19:58:45:92:d0:57:58:c6:19:21:09:ad:bb:8d:a5:
         12:e7:1b:2f:73:cd:20:06:3e:9f:64:a2:fb:6b:1b:05:68:ef:
         96:42:db:28:71:1c:04:f8:ea:38:9a:6e:12:e5:bc:cd:cc:8d:
         e6:a2:09:80:c9:46:8f:3c:5e:9d:6c:52:bc:8d:16:85:d8:f8:
         28:da:6e:83:7d:08:79:f6:b6:5f:79:68:0c:6c:fc:13:e4:0c:
         83:58:6e:ab:2a:12:f9:a4:d2:a9:84:3f:9e:fe:08:6a:9f:c5:
         d2:2d:2c:0c:b8:80:87:aa:f4:02:81:01:1b:3c:3f:44:b3:68:
         0e:38:d5:9c:12:8b:15:00:22:e2:85:66:90:61:b4:2f:64:3c:
         fb:b5:ac:35:5d:4a:84:32:50:70:0e:cf:a0:f3:8c:cc:81:cc:
         48:ea:2b:93:4d:72:cb:30:4d:86:37:a8:a9:d7:44:9b:50:00:
         3f:58:02:80:7a:12:1a:3f:75:6a:bb:f3:b1:b3:39:fa:15:d0:
         72:ba:a7:9b:c8:66:00:2d:e5:ad:5c:86:a7:98:84:d8:ee:e2:
         8d:4d:7f:6f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org