Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316364353a3a2f34382d3438203d3e203631363738.roa
File:                     323830343a316364343a316364353a3a2f34382d3438203d3e203631363738.roa (raw, json)
Hash identifier:          ZDLKI/NCJWK7WLzH6D+LixxKa98fArMe6tA3SjznCfg=
Subject key identifier:   4A:0E:BA:2D:11:B3:09:6F:6D:DD:9E:AF:FD:CC:28:AD:54:CE:83:93
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       651E85EBDDC4DF04EDD1DDDA453CE69C2769AEAD
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316364353a3a2f34382d3438203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:16 +0000
ROA not before:           Wed 03 Apr 2024 21:41:16 +0000
ROA not after:            Wed 02 Apr 2025 21:46:16 +0000
asID:                     61678
IP address blocks:        2804:1cd4:1cd5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:1e:85:eb:dd:c4:df:04:ed:d1:dd:da:45:3c:e6:9c:27:69:ae:ad
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:16 2024 GMT
            Not After : Apr  2 21:46:16 2025 GMT
        Subject: CN=4A0EBA2D11B3096F6DDD9EAFFDCC28AD54CE8393
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:19:ed:91:88:79:39:0c:b9:00:4d:1d:c2:cd:
                    9a:04:ca:28:11:db:96:65:08:3a:d6:b3:ba:e7:76:
                    4c:82:99:1f:6b:9a:ad:c2:96:ec:d3:15:be:73:5c:
                    76:76:42:c3:d9:73:6a:68:08:69:ae:6d:ad:07:da:
                    f6:ea:20:60:ab:06:6d:df:5b:19:0f:1c:f4:f0:f0:
                    36:c4:19:85:bb:92:49:b3:b0:47:66:de:41:5f:59:
                    79:54:7d:12:e3:a4:c3:ab:b6:cc:c1:70:28:69:bf:
                    22:22:f3:b2:69:7d:b0:a7:32:88:a0:ce:10:37:ab:
                    2c:9d:a5:8c:3b:e3:13:b5:09:34:b0:b7:cd:90:eb:
                    be:47:42:49:0b:8d:5a:eb:8d:1f:01:fd:9c:27:ea:
                    98:93:b9:18:4c:cc:ca:76:ac:34:59:f1:9f:0f:64:
                    36:21:73:d1:c1:ff:a9:fb:79:a6:73:7f:8c:11:24:
                    1a:c3:9e:18:18:79:66:34:ab:8f:e8:69:48:aa:59:
                    60:d7:0c:b3:7b:d3:50:f4:db:51:01:79:c4:59:ce:
                    db:17:61:16:fa:4f:e3:a6:30:d8:42:cc:35:8f:9a:
                    ff:3f:27:28:f3:f2:c0:23:6e:5e:7d:1b:fa:40:37:
                    71:80:98:c9:53:8b:cd:dd:a6:e9:dc:31:27:d9:84:
                    4b:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:0E:BA:2D:11:B3:09:6F:6D:DD:9E:AF:FD:CC:28:AD:54:CE:83:93
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316364353a3a2f34382d3438203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:1cd5::/48

    Signature Algorithm: sha256WithRSAEncryption
         08:58:d5:37:2b:5c:37:86:7d:fc:31:ce:41:db:8f:35:2b:99:
         5d:72:e1:52:af:ea:f7:33:f2:51:ba:c6:ec:2c:25:2c:58:63:
         1b:5f:18:fc:e2:a4:9a:91:94:5a:af:ec:08:8d:7b:45:92:f2:
         4b:7d:3e:80:9e:02:68:5b:76:e4:fd:3f:64:18:52:de:f8:d4:
         d7:4a:23:1e:53:86:a0:2b:30:44:d5:85:48:84:bb:a8:36:66:
         54:64:d2:3a:61:f6:dd:71:8d:b9:ad:cf:12:61:7c:01:cd:3c:
         8f:39:00:9a:58:1b:e5:49:ee:94:75:2f:fc:10:ba:1b:0b:4a:
         8f:02:ea:77:4d:49:3c:34:01:88:85:ee:0f:1e:e7:0c:74:10:
         fb:66:13:2d:43:c3:1d:46:eb:09:05:f8:3a:3f:0c:16:d9:5d:
         ab:cd:07:d2:27:c6:e8:66:c1:42:64:6b:3b:a7:58:f9:af:20:
         14:a9:a2:89:25:cb:29:38:1b:b8:e1:b0:cc:92:02:00:9d:a6:
         d1:b5:32:35:4b:ee:ac:92:64:f9:66:b7:4c:38:5d:5b:e3:7e:
         d5:6c:ed:27:ac:3f:7a:48:0a:23:53:f6:b3:77:b3:19:72:52:
         75:0e:40:b5:d6:9a:db:e1:69:d9:cf:f6:63:6e:af:81:36:19:
         00:f7:18:d8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:40:07 2024 by rpki-client on console-fra.rpki-client.org