Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4HufT6zCNxXBAE32P7QyppzpwE6Qxx6DbaXotG9agcm7/0/323830343a343230633a3a2f33322d3438203d3e20323637343734.roa
File:                     323830343a343230633a3a2f33322d3438203d3e20323637343734.roa (raw, json)
Hash identifier:          m5uxFH3OxfOGTHhPYP5S73Z3WZqxHH2yq1IrEU9ejAo=
Subject key identifier:   48:0A:33:C2:27:7B:58:92:7C:78:6C:E6:E1:82:27:A0:7D:18:9E:AF
Certificate issuer:       /CN=0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000
Certificate serial:       7575C3E8F91F1210929AC69AC95740287225B393
Authority key identifier: 0B:FB:53:DE:E2:9C:7D:19:78:AB:6A:0F:9C:CB:8E:ED:83:2A:D0:00
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4HufT6zCNxXBAE32P7QyppzpwE6Qxx6DbaXotG9agcm7/0/323830343a343230633a3a2f33322d3438203d3e20323637343734.roa
Signing time:             Tue 18 Apr 2023 12:58:47 +0000
ROA not before:           Tue 18 Apr 2023 12:53:47 +0000
ROA not after:            Tue 16 Apr 2024 12:58:47 +0000
asID:                     267474
IP address blocks:        2804:420c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            75:75:c3:e8:f9:1f:12:10:92:9a:c6:9a:c9:57:40:28:72:25:b3:93
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000
        Validity
            Not Before: Apr 18 12:53:47 2023 GMT
            Not After : Apr 16 12:58:47 2024 GMT
        Subject: CN=480A33C2277B58927C786CE6E18227A07D189EAF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:2d:a3:25:2f:6c:c2:50:fa:c1:d2:a8:05:eb:
                    0b:8c:95:fb:03:18:fb:3b:ef:d9:3e:a6:44:d2:67:
                    20:29:5a:c6:6f:51:26:6a:1d:13:d3:19:3f:7d:08:
                    79:16:29:bc:31:9d:63:37:c0:ba:e3:f1:ae:c8:ae:
                    25:8f:40:69:f3:41:cc:1b:e8:0c:ab:18:d7:17:e6:
                    a1:60:74:9c:b4:8b:08:6c:1b:7b:cc:c9:45:77:a9:
                    07:05:8e:4a:c3:3a:b8:aa:56:41:08:02:ee:c6:b5:
                    c8:90:5b:14:77:3d:47:7a:d1:a8:7d:89:86:9a:88:
                    ce:2c:a4:01:a2:4c:8a:7d:c9:77:73:46:ca:89:ea:
                    a4:9c:74:3a:f3:ee:9b:16:4e:1e:69:32:61:f6:6e:
                    d8:c5:40:0e:f0:60:84:fb:a8:3d:22:22:e8:8d:e9:
                    83:3c:ab:7d:f7:09:ad:4e:64:96:80:b7:12:11:bf:
                    a0:09:4e:a7:79:e3:b7:22:af:19:59:cc:c8:1d:3c:
                    41:f5:c9:cf:1e:0d:06:2c:d6:db:c6:87:c1:16:5f:
                    f1:ee:de:6f:d8:cd:4f:b5:51:f5:d3:92:77:b5:e3:
                    fc:af:c6:d9:4f:fe:6b:42:27:71:24:75:9d:58:9c:
                    f9:b4:51:a5:de:e4:b4:92:b5:b9:e4:ec:b4:3f:eb:
                    e8:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                48:0A:33:C2:27:7B:58:92:7C:78:6C:E6:E1:82:27:A0:7D:18:9E:AF
            X509v3 Authority Key Identifier:
                keyid:0B:FB:53:DE:E2:9C:7D:19:78:AB:6A:0F:9C:CB:8E:ED:83:2A:D0:00

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4HufT6zCNxXBAE32P7QyppzpwE6Qxx6DbaXotG9agcm7/0/0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0BFB53DEE29C7D1978AB6A0F9CCB8EED832AD000.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4HufT6zCNxXBAE32P7QyppzpwE6Qxx6DbaXotG9agcm7/0/323830343a343230633a3a2f33322d3438203d3e20323637343734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:420c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:48:87:ba:01:7f:13:78:4c:dd:8e:de:7e:08:a5:e1:69:3a:
         c0:4d:77:47:eb:ef:33:35:7b:96:14:17:3b:70:81:f7:3a:36:
         36:21:26:1a:ac:3b:cf:fb:da:f7:05:79:ff:f7:72:d6:37:f2:
         32:5b:b0:c7:70:ed:19:04:87:c4:f0:44:d2:98:eb:8c:54:ee:
         eb:ee:59:24:ea:ad:7c:94:15:51:be:83:50:11:e8:49:17:b5:
         da:df:9d:50:e5:82:f3:d6:97:af:21:36:8d:3b:1e:46:7a:b6:
         eb:e7:23:2f:c3:26:76:65:cb:50:36:f6:ff:fc:b5:27:6f:bd:
         31:06:28:59:cc:71:33:89:6c:5f:0f:d2:45:53:fe:d9:31:ce:
         75:9c:73:85:5a:a1:a6:b1:66:94:31:aa:60:c0:d9:54:96:e5:
         c3:cd:c3:6e:bb:a6:f6:a9:f6:3d:8f:4a:f3:31:13:9a:9d:36:
         87:50:92:53:df:cd:85:8a:bd:47:58:34:7c:71:39:e8:4e:ad:
         78:8a:4e:ba:0a:95:cb:6a:6b:de:d8:83:a8:99:d8:36:6a:48:
         30:d5:fb:a1:d8:19:bc:e4:44:02:63:be:a6:60:37:ae:14:5d:
         4e:d9:20:80:ff:26:e6:4a:03:f2:74:73:23:89:ab:30:98:34:
         15:61:2c:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org