Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa
File:                     323830343a376334303a3a2f33322d3332203d3e20323731343834.roa (raw, json)
Hash identifier:          4SLmT2ZVQc3vmbXBVP5ALotFH5KN6E4VocUs0/uNeIg=
Subject key identifier:   94:66:88:AF:62:CB:35:71:17:76:0E:9F:99:76:14:3A:96:C5:E8:09
Certificate issuer:       /CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
Certificate serial:       4D21C244FFDCD2FEB8E1383812477D7AA914D908
Authority key identifier: EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa
Signing time:             Thu 01 Feb 2024 18:09:21 +0000
ROA not before:           Thu 01 Feb 2024 18:04:21 +0000
ROA not after:            Thu 30 Jan 2025 18:09:21 +0000
asID:                     271484
IP address blocks:        2804:7c40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:21:c2:44:ff:dc:d2:fe:b8:e1:38:38:12:47:7d:7a:a9:14:d9:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF
        Validity
            Not Before: Feb  1 18:04:21 2024 GMT
            Not After : Jan 30 18:09:21 2025 GMT
        Subject: CN=946688AF62CB357117760E9F9976143A96C5E809
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:92:57:64:bb:1a:92:b6:44:1c:8d:8f:00:3e:
                    19:5a:16:b7:fd:7e:fa:e8:49:67:18:15:5a:6f:bd:
                    3b:cf:9d:f7:47:c0:a7:db:5b:78:24:e1:6d:08:42:
                    74:1a:b7:6c:41:ea:8d:96:5d:c5:63:4b:30:0b:10:
                    1b:61:5e:f5:dd:ed:9f:25:53:87:eb:5a:6d:6e:3e:
                    2b:5d:35:65:16:d1:72:66:94:0d:4c:76:6b:28:e7:
                    47:9c:a5:25:0f:32:1c:bb:82:4e:9a:d8:3a:33:2e:
                    03:a9:4e:ac:7e:d9:d6:39:9d:b2:71:58:ce:5d:0e:
                    d2:87:9c:ea:44:44:a6:89:96:57:27:08:ba:35:0e:
                    36:16:c1:ea:94:2c:b2:cf:f9:09:8f:55:35:55:3b:
                    27:87:94:cf:d4:04:b6:cf:5e:9e:da:b8:25:45:8a:
                    e0:5c:27:2c:1c:52:54:98:4c:fb:4b:52:8a:bb:3a:
                    db:d5:96:4f:2f:62:dd:e5:22:02:7d:9b:01:98:95:
                    72:95:e1:2e:12:12:7b:32:27:f7:39:da:ee:df:b1:
                    90:b4:13:1c:de:69:74:51:5d:26:07:64:b5:64:13:
                    b3:1c:0d:ae:80:3a:de:e8:5c:fc:fc:12:c8:59:7f:
                    ff:d2:cd:8c:4c:81:e9:42:bd:2c:4e:46:f1:bc:12:
                    da:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                94:66:88:AF:62:CB:35:71:17:76:0E:9F:99:76:14:3A:96:C5:E8:09
            X509v3 Authority Key Identifier:
                keyid:EC:C2:AB:C9:70:8B:74:7A:EF:EB:7A:F0:5C:21:E5:92:FD:EA:06:CF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ECC2ABC9708B747AEFEB7AF05C21E592FDEA06CF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/0/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         7f:7c:54:9d:96:dc:7b:c8:b0:80:78:2e:7a:65:93:a8:eb:6b:
         dd:01:5f:ff:49:d8:6f:6f:e7:4a:72:04:d0:2d:c9:d1:63:7c:
         2a:15:df:0c:af:3b:35:40:fd:7d:21:24:e3:8e:f2:f8:d5:9a:
         ce:c9:7f:e7:2e:0d:59:8a:97:71:05:15:43:a5:02:44:d5:fb:
         5f:6d:98:26:7f:46:d8:47:3e:7d:0e:7f:00:0f:c5:aa:2a:84:
         06:38:55:8d:96:68:5e:11:1d:c7:bd:c3:82:56:f0:80:59:b8:
         c9:07:ff:6e:76:51:df:d6:cc:f8:80:04:fb:66:99:c4:0a:1f:
         7b:27:4b:d7:8c:0c:76:2b:d6:72:17:16:78:13:d8:db:64:49:
         57:15:eb:f9:da:11:04:d5:b5:03:33:f4:0f:d5:09:e2:a2:35:
         29:ba:b7:a6:d1:82:b2:75:9a:7d:dd:30:26:78:10:70:a8:e7:
         ae:93:8b:0c:14:b7:81:fc:3b:62:43:b7:bc:4c:ca:a1:71:dd:
         15:53:99:30:73:73:7e:98:48:3f:77:0e:d5:66:2e:51:88:2e:
         02:1d:cf:4f:13:0c:f2:00:40:47:32:03:18:73:03:72:ac:5b:
         7e:f9:ff:e7:f1:09:2a:5c:ed:65:6a:48:44:57:de:87:50:2c:
         19:0b:f0:9a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:45 2024 by rpki-client on console-ams.rpki-client.org