Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383030303a3a2f33332d3333203d3e203631363738.roa
File:                     323830343a316364343a383030303a3a2f33332d3333203d3e203631363738.roa (raw, json)
Hash identifier:          17ZkVS3qT779A1iKwQ7vLtudhJGHdKjRuzOsaa5YYrk=
Subject key identifier:   49:2F:86:61:E3:3E:F4:DD:C8:54:D7:A2:7E:FA:16:ED:13:69:40:47
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       1F1FE33D7B09433799D8335631AEB5C99BB98C80
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383030303a3a2f33332d3333203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:17 +0000
ROA not before:           Wed 03 Apr 2024 21:41:17 +0000
ROA not after:            Wed 02 Apr 2025 21:46:17 +0000
asID:                     61678
IP address blocks:        2804:1cd4:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:1f:e3:3d:7b:09:43:37:99:d8:33:56:31:ae:b5:c9:9b:b9:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:17 2024 GMT
            Not After : Apr  2 21:46:17 2025 GMT
        Subject: CN=492F8661E33EF4DDC854D7A27EFA16ED13694047
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:66:e4:67:79:fc:66:f5:c3:28:1c:1d:fc:19:
                    bd:fa:f6:86:4f:90:98:c9:ce:55:ab:21:e4:17:4a:
                    68:4b:ab:cf:94:a5:31:c0:85:56:18:b3:a4:a2:7a:
                    9e:26:27:b4:f9:89:1e:86:73:a5:64:eb:1d:7a:33:
                    3e:6d:89:e0:8e:a6:16:77:df:34:a8:b2:30:7a:25:
                    33:1d:e7:4e:42:8e:95:bd:b2:00:6a:b0:ed:83:a0:
                    2e:1d:41:54:e8:45:31:ae:32:de:ea:17:f8:98:7d:
                    bc:6a:fb:99:fc:d9:97:e3:e5:fd:75:eb:e8:c0:e4:
                    ba:40:2c:c1:27:c4:94:bc:f9:77:9e:96:3e:68:3e:
                    99:fc:53:cd:d9:15:f6:c8:e4:9c:4b:a1:3f:44:24:
                    15:9b:50:4f:2f:20:85:d0:37:36:44:88:98:7c:33:
                    60:8e:33:2e:f3:ce:e9:95:a9:8a:31:07:cc:51:b4:
                    9d:17:5e:4b:39:a5:4f:3e:6a:7c:70:89:94:3d:ae:
                    ce:e5:2b:27:c4:f5:f0:77:ee:c7:f5:3e:e8:1b:31:
                    a8:20:43:0e:b8:a2:5a:ff:a8:04:27:5a:2a:10:ba:
                    52:80:13:b1:3c:bb:2e:e2:60:f1:2f:5c:8e:df:0f:
                    07:a0:d7:d5:06:f0:72:65:e2:be:d2:c2:a0:55:47:
                    f2:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                49:2F:86:61:E3:3E:F4:DD:C8:54:D7:A2:7E:FA:16:ED:13:69:40:47
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383030303a3a2f33332d3333203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         23:9c:a5:5b:4e:27:72:6d:30:38:e7:fd:36:58:7b:ba:21:63:
         2e:ab:38:49:e8:1b:2f:94:c8:cc:55:f2:0c:2b:08:b7:7d:ce:
         be:97:95:48:9c:93:0a:02:11:5c:33:df:42:f9:a3:10:18:6a:
         f0:ce:48:64:69:87:66:88:00:9a:27:9b:78:37:fb:8c:f6:b0:
         94:23:dc:c4:80:e9:88:01:12:b9:a6:95:ec:15:e0:13:38:50:
         cf:cc:c5:9b:ed:7d:84:e4:b4:da:4c:aa:c6:df:ff:90:ee:23:
         74:94:84:b7:24:e1:3d:cd:ce:d8:72:7c:47:30:20:70:23:ae:
         1c:47:cd:8e:d6:e7:25:f2:aa:43:3d:2a:25:d6:4b:f0:c1:00:
         11:a4:77:01:a7:6a:41:a2:9f:48:2d:c5:ab:2d:a7:93:13:cc:
         77:13:90:2b:e3:50:1e:4a:c9:e1:60:8e:d4:16:4e:1b:26:c6:
         b9:77:57:d5:09:ce:79:6f:ec:1a:9f:91:05:d3:8c:43:ac:70:
         2b:df:75:e6:ac:c4:67:b8:50:74:04:57:a2:f1:75:09:4d:e6:
         36:63:3b:fa:d0:67:74:12:0c:1f:f9:6c:13:55:14:f2:25:ad:
         ee:f7:ed:de:90:d2:09:ec:bb:86:ac:cc:be:9c:aa:f4:ec:31:
         08:2d:7d:a7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org