Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a3a2f33322d3334203d3e20323731333236.roa
File:                     323830343a373963343a3a2f33322d3334203d3e20323731333236.roa (raw, json)
Hash identifier:          nbKYDF4A1r4bp395Klq4DVpMbZAT+yGNOSKt1/RXQTM=
Subject key identifier:   D8:91:9E:B5:23:74:AE:F7:45:75:BD:20:B7:12:42:CD:8A:4E:3B:F8
Certificate issuer:       /CN=1AE0C1F2C9972AB8443E15D59F3A4806830E233B
Certificate serial:       31091241FE59C170210A53BD62CD1E0BB2E5E23B
Authority key identifier: 1A:E0:C1:F2:C9:97:2A:B8:44:3E:15:D5:9F:3A:48:06:83:0E:23:3B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AE0C1F2C9972AB8443E15D59F3A4806830E233B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a3a2f33322d3334203d3e20323731333236.roa
Signing time:             Mon 12 Feb 2024 14:24:02 +0000
ROA not before:           Mon 12 Feb 2024 14:19:02 +0000
ROA not after:            Mon 10 Feb 2025 14:24:02 +0000
asID:                     271326
IP address blocks:        2804:79c4::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:09:12:41:fe:59:c1:70:21:0a:53:bd:62:cd:1e:0b:b2:e5:e2:3b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1AE0C1F2C9972AB8443E15D59F3A4806830E233B
        Validity
            Not Before: Feb 12 14:19:02 2024 GMT
            Not After : Feb 10 14:24:02 2025 GMT
        Subject: CN=D8919EB52374AEF74575BD20B71242CD8A4E3BF8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:6e:d4:3a:e1:ca:9d:d8:ca:b6:ac:e4:2b:76:
                    93:89:2f:15:45:a4:a2:a0:15:85:05:e4:6a:dc:29:
                    25:f6:47:cd:d0:49:81:8d:8d:6b:aa:0b:8e:0e:43:
                    ef:0a:4b:8f:21:52:03:db:47:35:e2:5b:aa:4b:79:
                    9b:d2:4b:2f:82:cd:3e:46:4f:b7:e3:08:32:d6:17:
                    d9:b3:76:d3:9f:67:fa:3d:f2:41:91:af:08:9f:65:
                    2b:cc:88:76:c0:c4:df:14:39:35:25:a7:05:d0:ab:
                    9e:9f:cb:85:ae:dd:85:47:7f:82:68:8f:5c:17:2a:
                    d6:16:04:ef:dc:01:48:87:a1:d9:a9:25:24:f9:c2:
                    fe:b0:46:53:67:0d:d0:88:a3:a0:70:52:3c:b2:37:
                    96:cb:bd:65:62:05:95:42:82:ee:e1:a7:f4:2a:bf:
                    f2:04:b1:5a:5f:cf:41:8e:03:3e:d2:32:07:7c:8d:
                    76:ef:c8:50:e8:85:91:3b:ed:5e:62:73:5c:f8:07:
                    44:f4:92:b6:59:97:9a:96:f8:c1:f9:97:fc:e8:79:
                    1d:68:2e:48:4f:1c:73:fd:f5:16:7b:31:af:44:1a:
                    0c:2c:1f:84:76:ff:e4:46:85:46:1b:96:49:68:ed:
                    66:cb:5e:fe:a1:b8:38:3a:0b:0b:55:0e:00:9d:f1:
                    78:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D8:91:9E:B5:23:74:AE:F7:45:75:BD:20:B7:12:42:CD:8A:4E:3B:F8
            X509v3 Authority Key Identifier:
                keyid:1A:E0:C1:F2:C9:97:2A:B8:44:3E:15:D5:9F:3A:48:06:83:0E:23:3B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/1AE0C1F2C9972AB8443E15D59F3A4806830E233B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1AE0C1F2C9972AB8443E15D59F3A4806830E233B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HEfp8GZWQqhTxygrRotWAYz1xCGjy2sfRevq1b95xvo/0/323830343a373963343a3a2f33322d3334203d3e20323731333236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:79c4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a7:fb:01:d8:e4:4e:18:78:bf:94:07:dd:d3:b7:78:1c:39:95:
         a9:4d:1d:14:6f:94:f6:f3:1a:92:01:7a:7a:5b:33:be:61:80:
         95:a6:d2:5e:3e:e8:39:0b:06:8e:b3:71:79:80:ca:1d:11:bd:
         9c:40:c1:49:d2:c6:a6:a4:48:ef:5d:86:1b:a7:bf:08:19:a7:
         9b:e6:56:ef:05:87:8f:41:59:e9:4d:2c:fc:27:3b:27:9e:4f:
         5a:2b:8c:81:da:cc:78:2d:65:98:c9:33:91:74:7b:13:de:27:
         a5:71:7d:a8:dc:8e:08:7f:c1:8c:92:ab:7c:91:36:e0:3a:5e:
         5a:37:07:16:89:50:51:58:b4:84:70:97:24:da:83:82:aa:9a:
         6a:f4:65:04:ae:a4:ac:e1:a4:b2:5b:3d:d3:e4:da:0b:c4:5e:
         01:ce:d1:79:c2:dd:80:76:c4:d9:f2:c7:29:ee:c1:cd:77:13:
         da:02:0b:c1:5f:2f:d0:5b:6b:ac:f8:13:87:8b:4d:33:80:ee:
         4e:e8:09:d0:28:d1:f6:8b:c2:fe:b6:a1:30:63:57:30:01:8c:
         ae:fc:30:09:1d:ac:a0:b1:c8:4a:ab:c1:5d:f0:49:7a:3c:09:
         b3:88:18:51:14:f1:fe:9f:8e:b6:41:9d:b2:27:70:7d:5d:59:
         a5:7a:d6:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:43 2024 by rpki-client on console-ams.rpki-client.org