Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316431303a3a2f34342d3434203d3e203631363738.roa
File:                     323830343a316364343a316431303a3a2f34342d3434203d3e203631363738.roa (raw, json)
Hash identifier:          6qDds1jq44SIa0bFobWGTSTYR4TmOIGCaKXxDYXvg9Y=
Subject key identifier:   8C:D8:6F:BD:D8:42:8C:42:6F:AC:E7:47:0F:C1:75:4A:21:C7:97:0F
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       0C4A13F6056B5FC83DD0C5251054190A35F0CD94
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316431303a3a2f34342d3434203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:15 +0000
ROA not before:           Wed 03 Apr 2024 21:41:15 +0000
ROA not after:            Wed 02 Apr 2025 21:46:15 +0000
asID:                     61678
IP address blocks:        2804:1cd4:1d10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:4a:13:f6:05:6b:5f:c8:3d:d0:c5:25:10:54:19:0a:35:f0:cd:94
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:15 2024 GMT
            Not After : Apr  2 21:46:15 2025 GMT
        Subject: CN=8CD86FBDD8428C426FACE7470FC1754A21C7970F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:c2:0f:21:69:8e:d3:49:fd:e5:3e:72:76:03:
                    e6:a5:1f:bd:9b:e1:b7:c8:29:a0:62:9f:a9:98:a4:
                    65:0e:15:fd:5b:63:29:22:58:1c:d3:45:e3:1e:d5:
                    72:fe:f6:55:b2:9d:57:00:a4:52:b4:48:d3:d8:5e:
                    cf:e0:8a:3d:54:c2:cf:04:c8:c4:9c:81:09:a5:ce:
                    65:1b:47:fd:aa:47:d3:57:e3:ed:b4:e4:f4:f8:66:
                    80:5d:d3:fa:84:a1:4f:0b:5a:0b:93:e4:8d:eb:eb:
                    c1:17:e2:4d:5c:a2:1d:8d:8f:20:52:c5:15:d9:f4:
                    b4:0b:24:d0:c5:10:bd:e9:b7:7a:49:05:ea:7d:c8:
                    fd:bc:cb:a3:6f:99:11:77:ef:cb:00:19:2d:13:7f:
                    52:02:cb:6c:09:f0:de:19:64:c2:5a:e4:7f:aa:cd:
                    00:e7:3e:ea:4f:be:10:d9:bb:91:93:a5:1a:9c:61:
                    9a:8e:7a:22:57:9c:0e:18:98:ed:86:d2:53:f9:b7:
                    94:e5:e5:ec:49:b0:38:b4:d9:ba:23:ef:c1:70:29:
                    29:43:41:98:9e:69:76:c5:db:85:fd:4e:e4:bc:2d:
                    ba:df:f6:83:05:19:e6:02:13:bc:99:e3:20:40:48:
                    bb:e3:7a:9e:cd:4b:cf:de:a8:75:43:be:0e:93:66:
                    6b:47
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8C:D8:6F:BD:D8:42:8C:42:6F:AC:E7:47:0F:C1:75:4A:21:C7:97:0F
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a316431303a3a2f34342d3434203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:1d10::/44

    Signature Algorithm: sha256WithRSAEncryption
         c7:34:b8:01:d1:60:f0:ad:7a:fa:11:75:d1:a7:3c:25:92:cd:
         25:36:de:03:67:61:eb:f2:4b:3e:9d:e3:ec:a4:f2:bb:0e:94:
         47:8b:ce:e3:16:6a:8a:4a:c0:32:c3:fb:94:4a:fd:df:19:db:
         0f:d1:f9:93:34:ac:ec:a5:73:66:ad:41:a8:dc:a6:d8:6a:30:
         c0:f9:ea:a5:04:12:af:c3:ef:f6:1c:6b:b4:13:3f:68:50:8b:
         5b:02:f3:4f:d5:4d:6e:c5:c5:6a:7d:90:66:1e:18:fd:d5:67:
         05:66:46:e6:c4:1e:ee:a5:48:07:e4:64:7d:15:9e:cb:c3:12:
         d4:5c:bf:cf:0a:06:66:10:12:d3:48:53:b3:e1:32:93:3f:49:
         6e:56:6b:a1:57:5f:51:2d:eb:7d:ff:3f:ac:46:f8:d3:e5:ac:
         51:5a:2e:16:41:a3:20:21:d2:21:8c:3d:d4:34:de:6b:a7:e2:
         55:93:5b:86:ab:15:1a:7b:50:e5:40:43:0c:4c:f8:2c:bd:57:
         e1:8b:3b:88:69:cc:a3:6b:b8:cd:f4:6c:4e:3f:b2:39:19:ae:
         1b:b3:4f:b9:1b:47:65:38:09:01:cc:09:ce:6d:ee:91:a5:7a:
         82:9d:58:15:a1:3c:a4:28:f8:fe:af:da:9c:76:0e:cb:af:d9:
         d6:bc:87:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org