Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383030323a3a2f34382d3438203d3e203631363738.roa
File:                     323830343a316364343a383030323a3a2f34382d3438203d3e203631363738.roa (raw, json)
Hash identifier:          ZDroRfsh2O66+kHPo2D9wASkeJJEBnHjEVkE8UT2iQY=
Subject key identifier:   F1:5F:BD:1B:C8:38:A2:B3:6F:6E:99:05:E6:A5:A4:69:B3:2D:32:B5
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       299C1BA5B993FA7B3BFD46474D76DE32CD6FCFCB
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383030323a3a2f34382d3438203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:17 +0000
ROA not before:           Wed 03 Apr 2024 21:41:17 +0000
ROA not after:            Wed 02 Apr 2025 21:46:17 +0000
asID:                     61678
IP address blocks:        2804:1cd4:8002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            29:9c:1b:a5:b9:93:fa:7b:3b:fd:46:47:4d:76:de:32:cd:6f:cf:cb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:17 2024 GMT
            Not After : Apr  2 21:46:17 2025 GMT
        Subject: CN=F15FBD1BC838A2B36F6E9905E6A5A469B32D32B5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:d8:ef:da:eb:6b:20:a9:24:b4:b7:9d:5b:58:
                    95:9b:2d:7c:ba:92:c9:f8:07:aa:3b:43:bb:c4:42:
                    9a:ac:4b:98:bf:96:59:e7:1f:39:d5:bc:9e:ba:77:
                    7a:c8:77:cb:30:e4:f0:36:98:ba:4c:f9:2e:a8:5d:
                    60:e8:37:6c:0b:35:2e:af:fb:98:28:15:85:a7:e2:
                    c6:76:1e:86:7d:11:65:87:65:23:b9:01:85:a0:19:
                    32:a6:d6:b4:cb:21:bf:b9:85:5c:2d:48:51:a1:23:
                    e7:76:4c:aa:91:c0:96:3d:ae:f5:3c:d1:32:3d:df:
                    6e:bc:b6:a6:20:b7:6a:e3:57:99:59:90:7f:a4:4b:
                    1f:6b:35:9f:97:3d:42:15:5d:18:6a:bf:a0:8b:96:
                    7c:1e:45:b6:ed:3b:47:84:cd:8b:5a:1c:6a:5d:05:
                    2c:4b:21:6a:59:14:85:bb:cb:f8:fd:e5:fd:67:3f:
                    92:41:b4:48:71:de:e3:41:cc:7d:24:36:dc:7d:3d:
                    57:2f:96:00:de:78:91:db:fb:02:26:91:c5:2e:6c:
                    3e:73:9b:ea:83:87:33:3e:6a:26:dd:57:bf:2e:31:
                    0a:4a:f5:d5:f4:07:17:3f:a1:57:13:6f:f3:80:4e:
                    ee:9e:90:21:07:97:0a:b9:d8:52:9d:37:cf:a6:64:
                    3e:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F1:5F:BD:1B:C8:38:A2:B3:6F:6E:99:05:E6:A5:A4:69:B3:2D:32:B5
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a383030323a3a2f34382d3438203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4:8002::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:d1:9f:a1:75:c1:58:9e:5d:fa:d6:fa:76:e3:83:ec:59:8a:
         ea:5d:d3:91:74:e1:41:6f:da:c1:45:be:51:37:d1:7c:ba:85:
         8f:67:41:22:f1:30:a2:e2:03:b2:f1:08:fd:bb:c2:ea:6b:fb:
         5b:e3:3a:04:4e:c4:39:06:ce:eb:75:f8:89:30:f5:da:82:1c:
         08:1d:66:2c:5e:74:4b:dc:fa:4d:c9:b1:0d:66:20:be:bd:ce:
         08:da:0f:10:66:a5:a7:56:9d:88:f6:e8:ab:b4:de:94:89:c0:
         9a:4a:d5:66:89:1a:ea:38:ac:4b:93:86:e4:d3:25:11:00:fe:
         95:25:f4:9d:35:2e:72:62:ad:96:70:c0:52:ed:19:5a:91:be:
         3f:92:ea:a5:52:ad:d8:a6:57:17:9c:7b:07:2f:46:c5:c7:03:
         24:25:7b:ac:62:e9:bb:93:43:e5:7a:f1:e9:1c:cf:ce:d0:bc:
         25:fb:9d:5f:4d:56:c3:dd:f0:00:8d:08:ee:cb:a7:6f:78:7b:
         2d:d3:f9:a2:51:04:e5:b5:f1:fe:a3:db:b0:39:e1:72:d2:3a:
         5f:38:4e:e6:f4:e6:1f:33:71:8d:a6:83:b2:ee:02:85:33:3e:
         e5:80:ac:6e:c4:7b:37:e5:d3:de:9c:33:8b:87:80:b0:d6:df:
         d5:40:57:3c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org