Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa
File:                     323830343a376334303a3a2f33322d3332203d3e20323731343834.roa (raw, json)
Hash identifier:          pBgzxjpkcYrHg+QxQDG5Lf9OSG4RpxL2zSKbUJ5121Y=
Subject key identifier:   27:D1:02:5A:9E:96:5F:72:BD:5D:44:3F:BB:74:93:28:E1:7D:D2:55
Certificate issuer:       /CN=4035C7794AE83A88B90C35E2C4329AE45A5F4EF1
Certificate serial:       7D163706E36B98AD7555C2A3FE0FBCC271EC0D4E
Authority key identifier: 40:35:C7:79:4A:E8:3A:88:B9:0C:35:E2:C4:32:9A:E4:5A:5F:4E:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa
Signing time:             Mon 15 Jan 2024 00:42:56 +0000
ROA not before:           Mon 15 Jan 2024 00:37:56 +0000
ROA not after:            Mon 13 Jan 2025 00:42:56 +0000
asID:                     271484
IP address blocks:        2804:7c40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:16:37:06:e3:6b:98:ad:75:55:c2:a3:fe:0f:bc:c2:71:ec:0d:4e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4035C7794AE83A88B90C35E2C4329AE45A5F4EF1
        Validity
            Not Before: Jan 15 00:37:56 2024 GMT
            Not After : Jan 13 00:42:56 2025 GMT
        Subject: CN=27D1025A9E965F72BD5D443FBB749328E17DD255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f4:08:d5:1e:ef:13:89:1d:d2:87:a2:70:3e:f7:
                    89:0a:2b:48:4c:4a:5c:e5:28:75:86:51:40:f3:ab:
                    8d:15:57:b5:0a:f7:89:16:3c:a2:c1:2a:c3:cc:6f:
                    77:b2:7c:81:b8:6d:9f:db:41:59:3e:66:2d:ca:62:
                    ed:13:45:c7:7c:59:7f:f6:db:ed:f6:4c:1f:f1:17:
                    1f:7b:41:7a:ae:9e:3a:60:09:a5:47:9f:49:2a:a1:
                    d3:3e:9d:d1:f3:63:b9:be:d2:7f:6c:62:af:be:75:
                    e2:e2:42:31:67:87:0d:1a:0a:9e:d7:8d:41:09:85:
                    17:c2:49:09:e4:d1:30:78:06:1b:b0:7b:a7:1b:87:
                    a1:39:93:b9:1d:9e:3a:45:9c:48:1c:74:a8:3d:8e:
                    54:19:07:42:79:6e:12:89:fb:80:e7:cf:0a:6b:bd:
                    54:33:86:ef:80:12:10:14:2e:e0:a9:f7:ed:03:c7:
                    3d:47:91:95:dd:10:37:cb:de:9d:7c:63:ad:40:3e:
                    0b:83:17:69:d1:77:bc:b4:0a:fa:cb:73:98:fa:fb:
                    74:31:f3:5e:75:0b:3a:b0:7c:64:75:2c:c7:7b:91:
                    a1:04:e8:09:04:32:1e:e0:09:8e:81:ac:f1:09:54:
                    31:49:bb:72:fa:8f:86:5e:e6:00:5f:59:a5:78:f2:
                    74:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:D1:02:5A:9E:96:5F:72:BD:5D:44:3F:BB:74:93:28:E1:7D:D2:55
            X509v3 Authority Key Identifier:
                keyid:40:35:C7:79:4A:E8:3A:88:B9:0C:35:E2:C4:32:9A:E4:5A:5F:4E:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4035C7794AE83A88B90C35E2C4329AE45A5F4EF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4VrPdCrBpuDpfqUyiJbF2ijRvjtcKPrXUkTV7yLvgok4/2/323830343a376334303a3a2f33322d3332203d3e20323731343834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c40::/32

    Signature Algorithm: sha256WithRSAEncryption
         59:dd:86:d7:a2:5c:1a:8e:13:09:d5:7a:6f:60:42:c7:9c:b5:
         a0:3b:19:0e:a1:d4:47:0b:52:dd:a7:db:46:b6:b6:c2:f7:3e:
         95:f6:02:4b:b0:30:67:68:bc:58:e7:5a:c5:98:9b:bc:d4:d1:
         31:8e:1d:d6:80:a6:7a:ee:5a:60:33:1c:1d:d9:23:04:a3:26:
         0e:00:41:30:e6:87:4d:11:77:d5:25:40:c7:51:85:af:14:68:
         26:6a:40:2e:ad:35:7d:9b:f7:08:09:fe:b3:9f:de:fc:c1:72:
         b7:fc:48:9a:0b:ab:09:a0:08:c8:3e:af:5c:76:a5:a9:7f:6c:
         37:dd:34:fc:81:96:fc:d4:aa:5b:1c:ba:78:e8:fd:a6:77:59:
         25:cf:50:6c:8a:d4:b2:46:9a:2c:7f:d1:33:a3:43:f6:aa:a6:
         af:56:a1:99:37:67:18:fb:15:4a:03:1f:77:0a:8d:c3:eb:41:
         05:aa:61:33:bf:8a:4f:71:d4:e3:88:ba:d1:80:ad:5e:21:6e:
         71:ee:99:7e:7f:a0:b2:84:bf:e6:b2:52:1d:0a:5d:c7:23:29:
         7d:cb:0f:bf:fd:af:72:41:44:82:f6:41:5a:8a:cd:b9:b1:fe:
         fb:e7:30:f8:03:92:24:6b:62:35:a7:84:58:af:ba:af:a7:cb:
         37:d6:33:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org