Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/323830343a3961633a3a2f33322d3334203d3e203237363536.roa
File:                     323830343a3961633a3a2f33322d3334203d3e203237363536.roa (raw, json)
Hash identifier:          A85WWj/K5L4LaB8L9JL1eyPMYXj+Qdo4TKwHKpp50Ow=
Subject key identifier:   4A:D7:82:B7:E1:89:B1:62:91:1F:DF:3B:D6:F4:C3:2F:A5:29:A1:84
Certificate issuer:       /CN=A1245EC98762AD84913719A50BE145ED5A82ADF1
Certificate serial:       489CD930FBA0F8C50DC2C34ABA9D8A4233472450
Authority key identifier: A1:24:5E:C9:87:62:AD:84:91:37:19:A5:0B:E1:45:ED:5A:82:AD:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/323830343a3961633a3a2f33322d3334203d3e203237363536.roa
Signing time:             Mon 29 Jan 2024 19:30:08 +0000
ROA not before:           Mon 29 Jan 2024 19:25:08 +0000
ROA not after:            Mon 27 Jan 2025 19:30:08 +0000
asID:                     27656
IP address blocks:        2804:9ac::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:9c:d9:30:fb:a0:f8:c5:0d:c2:c3:4a:ba:9d:8a:42:33:47:24:50
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A1245EC98762AD84913719A50BE145ED5A82ADF1
        Validity
            Not Before: Jan 29 19:25:08 2024 GMT
            Not After : Jan 27 19:30:08 2025 GMT
        Subject: CN=4AD782B7E189B162911FDF3BD6F4C32FA529A184
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:9d:a5:10:27:f6:4e:20:27:72:3e:9d:14:14:
                    9f:ad:07:11:85:1c:17:bc:c4:53:ed:73:a8:bb:21:
                    c5:06:18:7b:37:ff:a9:2f:7e:23:68:76:a8:09:e2:
                    58:2c:57:e5:45:ca:d4:6b:96:a8:a5:3d:dc:08:21:
                    67:72:de:68:bc:4e:a6:a6:4f:f1:6c:f9:6e:9a:af:
                    1e:82:64:e8:f4:a3:34:a8:95:cd:40:d3:12:7a:2c:
                    ef:78:f6:7f:c6:e3:bc:ba:22:30:8a:c3:2c:fb:42:
                    a6:02:56:09:15:19:c2:e3:f8:a6:34:f7:df:23:1b:
                    3e:da:c9:31:ee:24:69:3b:08:f2:5c:b2:f9:d6:37:
                    85:d2:90:e8:38:e3:64:f3:16:79:ea:9a:71:48:e3:
                    ff:97:98:de:8e:f9:a1:90:59:9f:4d:fb:40:69:fa:
                    91:07:39:51:0b:89:55:87:f0:c5:99:89:d4:b9:91:
                    7d:3b:b4:f5:9f:23:70:97:6a:ea:99:52:30:3f:10:
                    54:ee:58:3b:a3:41:34:93:50:e5:b7:60:2b:28:59:
                    c6:0f:a8:df:b9:29:f2:d0:11:48:e6:92:53:f7:87:
                    d7:cd:cd:50:d4:04:f2:8b:ef:4c:6b:9a:ef:bb:65:
                    a8:1b:1a:d8:c2:40:94:51:53:8c:aa:07:8a:f6:ae:
                    3a:a9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:D7:82:B7:E1:89:B1:62:91:1F:DF:3B:D6:F4:C3:2F:A5:29:A1:84
            X509v3 Authority Key Identifier:
                keyid:A1:24:5E:C9:87:62:AD:84:91:37:19:A5:0B:E1:45:ED:5A:82:AD:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A1245EC98762AD84913719A50BE145ED5A82ADF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4NeQRoMny6bLPPwwXtg4xzh3R3Eh2EXXH8kqLaCvXDr9/0/323830343a3961633a3a2f33322d3334203d3e203237363536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:9ac::/32

    Signature Algorithm: sha256WithRSAEncryption
         ba:ee:7a:c1:dd:b9:21:a3:72:a0:c0:86:99:c4:3e:57:12:4f:
         d9:90:79:a4:58:37:4c:85:27:69:6a:8c:5a:9c:45:8f:19:b4:
         4b:fb:73:cd:bb:1f:60:eb:ad:9b:8f:75:c2:e4:dd:2b:80:50:
         e3:05:42:5d:5a:09:f3:7c:9a:36:c7:7e:22:3a:78:69:7e:c5:
         3d:d4:c7:a2:ae:f8:5f:8a:b0:1c:73:01:3e:d3:7f:1d:fd:81:
         ba:10:63:2d:dd:32:c9:23:fa:40:f2:7d:43:b0:84:68:b5:2c:
         32:75:1b:ba:b7:eb:19:88:3e:59:d2:23:d8:ee:1a:2e:e4:ea:
         0b:04:e9:21:d7:07:35:6f:3c:2c:e3:75:2a:85:8c:1e:66:05:
         1f:3d:5e:50:c8:64:3a:94:8f:07:db:ef:ea:22:df:42:1b:b7:
         88:10:36:db:df:3f:35:9e:0f:22:2f:d9:77:e8:8c:3f:ce:d8:
         66:5c:e1:e6:75:54:c4:ad:42:7a:34:f8:a2:30:77:5b:b2:d3:
         ae:78:cb:07:f5:62:8b:b9:a4:a3:0c:1c:f0:55:93:65:ed:3f:
         42:01:93:4f:f8:59:dc:e0:f7:97:e7:0c:39:9c:fc:0a:b1:50:
         9b:b4:dd:0d:55:dd:dd:8b:19:d2:d2:ff:c6:c5:5e:e7:15:0b:
         d7:40:8c:96
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org