Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa
File:                     323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa (raw, json)
Hash identifier:          wYeRZrDbvZieJ1nERXnEnjyZ+NLAXPpjjc9beaKFC2k=
Subject key identifier:   FF:FD:73:FA:2E:2C:16:E5:B2:E3:4E:5F:70:29:8A:29:2F:84:9F:03
Certificate issuer:       /CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
Certificate serial:       190BA0B2AC9954D7C166DADAA39138C2F21F2B1E
Authority key identifier: EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa
Signing time:             Thu 01 Feb 2024 18:09:13 +0000
ROA not before:           Thu 01 Feb 2024 18:04:13 +0000
ROA not after:            Thu 30 Jan 2025 18:09:13 +0000
asID:                     271484
IP address blocks:        2804:7c40:8000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:0b:a0:b2:ac:99:54:d7:c1:66:da:da:a3:91:38:c2:f2:1f:2b:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
        Validity
            Not Before: Feb  1 18:04:13 2024 GMT
            Not After : Jan 30 18:09:13 2025 GMT
        Subject: CN=FFFD73FA2E2C16E5B2E34E5F70298A292F849F03
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:f2:ce:8f:d5:44:ad:6d:bd:22:93:6a:7b:a7:
                    d0:ec:91:31:76:6b:41:19:78:a2:25:4f:f9:d1:37:
                    ea:c2:be:f6:b2:a9:01:2c:a2:80:04:9d:68:a9:aa:
                    5f:c6:c6:d3:a8:b5:78:82:d2:c0:1d:e3:0e:c5:5b:
                    ad:9a:00:d9:87:b7:c7:69:24:94:60:65:d9:4e:10:
                    18:78:0f:0b:db:7f:5d:66:06:d2:0d:aa:88:32:7b:
                    f0:2a:f7:f4:59:98:21:40:fc:ab:43:55:52:ad:07:
                    19:4d:8b:0c:24:12:24:d3:0f:58:39:32:d5:f4:55:
                    ae:68:b3:92:c2:00:69:ee:bb:53:56:ba:52:83:fd:
                    40:76:47:74:11:2a:85:41:0c:8f:da:5b:78:bf:57:
                    64:44:92:d5:33:50:7b:af:fb:17:f1:83:f7:da:14:
                    c5:40:4e:79:de:0d:69:fc:cd:0a:d2:cf:5f:2c:91:
                    67:3f:d7:e0:3f:65:53:10:a2:14:36:79:0f:a5:46:
                    30:ff:cc:2a:56:d0:3d:32:e1:27:4e:bb:ed:e6:cf:
                    46:27:df:9c:b2:53:d9:fc:23:a7:20:91:8d:da:86:
                    d5:ee:25:ba:f7:bb:b8:d1:a5:df:ec:20:11:a1:0d:
                    df:ec:1b:79:2f:c0:13:e9:94:54:a0:67:02:5b:54:
                    24:03
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FF:FD:73:FA:2E:2C:16:E5:B2:E3:4E:5F:70:29:8A:29:2F:84:9F:03
            X509v3 Authority Key Identifier:
                keyid:EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a383030303a3a2f34302d3430203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40:8000::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:65:bf:e7:3d:a5:a7:ca:6a:e5:19:77:a2:4a:cd:24:08:ea:
         5a:ab:f0:db:6d:ba:9d:be:f4:ab:0e:c0:b0:76:34:e3:b6:e0:
         f6:9f:70:ee:23:16:2f:c9:cd:61:5a:a8:82:ec:ad:f2:90:cc:
         b8:b1:63:f2:55:5f:58:cc:95:45:7d:48:13:9e:b9:29:93:5b:
         73:fb:89:6f:fd:c6:8e:4b:90:6b:cd:60:43:fa:22:57:5d:38:
         34:da:00:e1:b5:3e:ae:13:6c:eb:44:2b:9e:20:6e:d2:17:bf:
         42:26:27:56:3e:c7:6e:49:7f:b9:c2:39:52:25:c8:cf:b0:68:
         3a:59:a1:66:f6:25:70:f5:e5:1e:4d:14:8c:11:b2:1f:21:13:
         13:7f:ab:1d:ac:cf:60:af:a4:71:1d:5a:7e:5a:8b:3d:71:55:
         fc:42:9e:41:0a:32:2c:d5:14:ea:a7:db:34:9b:a4:7c:b9:5c:
         3b:e8:06:51:a2:11:fc:66:c5:b1:59:71:e5:4f:43:4e:1e:8f:
         81:e5:5a:8e:27:fd:db:bb:a2:4a:cf:d4:2c:c4:f5:dc:7f:0b:
         c6:f5:5a:34:f3:4f:cd:62:b8:8b:d9:c0:42:d9:2f:39:1c:22:
         0e:cc:b7:22:0d:1d:0c:a9:07:e0:d1:38:47:8b:60:5c:54:44:
         28:c6:04:ab
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org