Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a3a2f33332d3333203d3e203631363738.roa
File:                     323830343a316364343a3a2f33332d3333203d3e203631363738.roa (raw, json)
Hash identifier:          Pf2b/T3XMqS4Uullsc7D/mkiS2WUh1z+wEL6YzTHFd0=
Subject key identifier:   C2:78:E2:16:AE:05:23:16:E1:37:A7:FC:4A:7D:5C:A5:CB:5B:52:F7
Certificate issuer:       /CN=780522B472F71205BBA4B3297526858181869281
Certificate serial:       7AD8ED72FF89D0379BC9A6E167093C452F99C1B5
Authority key identifier: 78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a3a2f33332d3333203d3e203631363738.roa
Signing time:             Wed 03 Apr 2024 21:46:17 +0000
ROA not before:           Wed 03 Apr 2024 21:41:17 +0000
ROA not after:            Wed 02 Apr 2025 21:46:17 +0000
asID:                     61678
IP address blocks:        2804:1cd4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:d8:ed:72:ff:89:d0:37:9b:c9:a6:e1:67:09:3c:45:2f:99:c1:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=780522B472F71205BBA4B3297526858181869281
        Validity
            Not Before: Apr  3 21:41:17 2024 GMT
            Not After : Apr  2 21:46:17 2025 GMT
        Subject: CN=C278E216AE052316E137A7FC4A7D5CA5CB5B52F7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:61:a5:87:01:ff:c1:6d:52:a3:4d:10:8e:88:
                    33:a5:0f:79:87:a3:d9:1e:b1:ca:a3:b1:4f:d9:fa:
                    5c:1f:bd:76:09:48:9f:22:19:d0:d3:07:8c:29:7f:
                    80:fd:c4:61:98:9f:39:61:04:09:5b:5b:7a:57:b6:
                    98:cc:bd:d6:f6:bd:29:d2:82:1a:0a:8f:6e:44:fd:
                    47:3c:f0:f8:f9:82:6d:80:ff:dc:d8:a8:7c:83:9c:
                    e4:41:b9:f5:de:f3:0d:d1:39:03:02:c2:51:cf:ad:
                    22:f6:fc:1e:8a:10:49:37:62:be:59:51:60:89:13:
                    0d:5e:26:85:e3:fa:3d:57:d7:76:2d:c4:aa:04:fa:
                    4d:75:ce:a2:70:73:ea:fb:60:1e:c6:5d:7e:e1:60:
                    e8:07:42:43:76:10:6e:00:65:68:9f:2f:54:f8:26:
                    84:4d:96:62:99:c5:db:c2:2a:77:e4:0b:e9:80:1d:
                    1b:3e:bd:0f:81:53:9c:7f:4b:44:dd:26:17:8a:20:
                    e2:be:5b:69:43:c2:60:98:60:42:fc:58:d8:5d:57:
                    10:52:10:cf:be:75:c3:14:84:38:0d:1f:71:0d:89:
                    b7:b0:f3:9c:f5:13:53:6f:7e:5d:12:ee:fb:2f:18:
                    80:a8:46:e7:9c:48:ef:fe:66:ae:d5:b4:da:19:47:
                    b2:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:78:E2:16:AE:05:23:16:E1:37:A7:FC:4A:7D:5C:A5:CB:5B:52:F7
            X509v3 Authority Key Identifier:
                keyid:78:05:22:B4:72:F7:12:05:BB:A4:B3:29:75:26:85:81:81:86:92:81

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/780522B472F71205BBA4B3297526858181869281.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/780522B472F71205BBA4B3297526858181869281.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ThxcMVBnzFQJiwpWB1mKgMDSzxVR6h61L93ymbKv2k9/1/323830343a316364343a3a2f33332d3333203d3e203631363738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1cd4::/33

    Signature Algorithm: sha256WithRSAEncryption
         97:8e:fa:fb:fe:08:2c:40:3f:09:84:33:f4:50:b6:1e:48:3a:
         f2:2e:30:5b:fd:23:73:55:96:54:6a:27:5c:e4:5a:d0:a1:53:
         77:01:ea:3c:d0:3f:f7:e7:98:cd:22:58:c3:34:d4:b4:e0:f1:
         ac:ee:4d:8c:4b:a3:2e:83:60:71:71:0c:be:89:ce:4e:5f:41:
         91:5c:47:e0:89:43:21:03:ad:49:61:b2:0d:07:07:e6:17:47:
         3d:5f:fb:20:f5:84:ed:04:39:df:84:86:88:5b:db:9e:ff:b2:
         18:e6:00:a1:79:62:20:52:c1:06:e7:aa:5e:1e:55:fa:32:ee:
         1e:5c:6c:60:57:2c:c8:84:70:50:d2:70:4a:ae:74:48:7e:72:
         16:a2:bb:c4:6a:64:01:b7:c0:72:74:75:54:0c:c3:e2:19:f2:
         61:dd:64:5f:8c:48:9c:a1:52:dd:ab:a2:bb:e1:df:51:10:80:
         28:68:91:0e:50:3c:ad:6b:28:81:2f:77:f2:d8:c0:bb:55:6b:
         06:5b:01:77:7f:d2:91:1a:8e:00:19:2b:1a:7e:1f:a7:cc:36:
         22:38:8c:f4:4c:2d:3a:38:d0:32:dd:8a:62:08:16:b8:ed:b0:
         27:e9:25:3a:85:0d:26:31:34:27:73:f7:df:7f:06:3e:06:ae:
         a4:d1:ba:e1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 11 00:32:57 2024 by rpki-client on console-ams.rpki-client.org