Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/323830343a346339303a3a2f33322d3438203d3e20323637333738.roa
File:                     323830343a346339303a3a2f33322d3438203d3e20323637333738.roa (raw, json)
Hash identifier:          2ZJgNbcZRACsR2eNwYJyCO/ndJUG/bm1kiKDUDoUbdw=
Subject key identifier:   96:E4:46:95:20:FD:E1:6A:1E:07:68:4D:2D:7B:7E:7D:AD:EF:1B:3F
Certificate issuer:       /CN=EC389DE08DFB27C1537B15EF34B9BAC05F951EF4
Certificate serial:       3BC56854663B7B031DB9DF4E9815EDA435346F5F
Authority key identifier: EC:38:9D:E0:8D:FB:27:C1:53:7B:15:EF:34:B9:BA:C0:5F:95:1E:F4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/323830343a346339303a3a2f33322d3438203d3e20323637333738.roa
Signing time:             Tue 12 Dec 2023 18:01:21 +0000
ROA not before:           Tue 12 Dec 2023 17:56:21 +0000
ROA not after:            Tue 10 Dec 2024 18:01:21 +0000
asID:                     267378
IP address blocks:        2804:4c90::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:c5:68:54:66:3b:7b:03:1d:b9:df:4e:98:15:ed:a4:35:34:6f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC389DE08DFB27C1537B15EF34B9BAC05F951EF4
        Validity
            Not Before: Dec 12 17:56:21 2023 GMT
            Not After : Dec 10 18:01:21 2024 GMT
        Subject: CN=96E4469520FDE16A1E07684D2D7B7E7DADEF1B3F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a4:a4:cd:36:5c:51:ad:26:26:c1:83:27:21:
                    ef:0d:bf:25:45:9e:40:d7:23:f7:e3:bb:5a:7a:e9:
                    62:77:c6:63:90:b8:b2:eb:63:f4:2d:43:c8:36:6e:
                    f3:8a:71:f4:20:d0:d1:d0:27:be:e8:11:a2:f5:7d:
                    0e:f0:6c:e8:cb:c7:e3:fe:76:81:a4:83:b7:14:46:
                    0f:16:66:e1:a0:b2:e9:b6:cf:7a:1e:15:f3:79:c7:
                    81:59:d1:05:58:99:6e:7f:6d:cd:2b:4c:14:2b:2c:
                    cf:16:34:2d:d4:75:18:3f:f2:fd:b1:bd:c2:58:9d:
                    f9:92:f7:d8:c5:6c:65:a6:b9:d7:85:cf:67:00:0a:
                    5f:36:fa:a5:fb:35:90:d6:e9:df:d9:c3:0f:af:7e:
                    6e:b8:cc:94:fb:b2:54:b2:e5:96:da:3c:44:3f:05:
                    9a:fb:99:8b:c3:cb:da:a2:59:fe:75:3d:d0:0d:f8:
                    f7:7c:07:c0:4f:57:78:d1:e6:e8:6c:53:71:e7:4f:
                    a6:4f:e3:4c:d3:9c:2a:9f:1d:39:26:81:51:67:42:
                    17:1c:ae:5a:f8:1e:6f:d0:58:37:b9:83:83:61:4e:
                    0b:da:30:ff:c1:cf:62:d1:3c:1b:ab:2a:fd:89:0d:
                    47:49:aa:c1:04:cd:22:99:80:18:c0:be:11:69:62:
                    7c:81
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:E4:46:95:20:FD:E1:6A:1E:07:68:4D:2D:7B:7E:7D:AD:EF:1B:3F
            X509v3 Authority Key Identifier:
                keyid:EC:38:9D:E0:8D:FB:27:C1:53:7B:15:EF:34:B9:BA:C0:5F:95:1E:F4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC389DE08DFB27C1537B15EF34B9BAC05F951EF4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4cZZ1U7qrCVsVkKrTnWzie9GTwEToKYb6WLBs699aQHv/0/323830343a346339303a3a2f33322d3438203d3e20323637333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4c90::/32

    Signature Algorithm: sha256WithRSAEncryption
         8f:ae:ea:19:b1:39:fc:dc:a2:4a:f6:99:33:8a:6b:3d:f3:3d:
         2e:08:ba:7d:61:44:7b:2b:8d:65:83:36:33:10:d5:a2:fd:92:
         c8:26:8e:af:5f:72:7e:63:25:2f:5d:e5:50:b9:a3:8b:9e:c0:
         0e:c0:3f:b8:49:1d:c7:f3:48:94:4e:2a:19:62:ef:da:18:a1:
         e1:65:a8:60:c8:70:92:7c:66:53:5c:14:7b:ed:78:08:3b:26:
         48:65:7e:e4:68:db:86:1c:df:32:8a:40:2c:7f:1c:ab:62:8a:
         4b:d1:aa:69:99:d7:74:8b:fb:6f:06:24:4e:2e:b3:19:f7:a4:
         fd:81:21:8a:f8:65:70:e2:0a:1a:84:55:65:1f:37:5d:5d:47:
         db:cf:4d:9a:ad:1e:92:10:76:8a:74:07:47:d4:87:7a:f3:f2:
         27:ec:ec:6f:96:cb:b1:9b:59:9e:9a:e9:34:37:9f:c9:41:04:
         3c:ea:3d:22:f1:73:94:b4:c9:fb:ff:55:07:57:7b:47:25:d8:
         fd:77:f1:0c:0e:3e:22:6e:31:18:bf:4b:e5:f0:9c:e6:75:0a:
         5f:5b:9b:85:9b:9c:08:75:49:0f:14:9f:55:e5:c1:1f:15:36:
         f9:ef:6d:15:21:da:4c:3c:5e:9d:f9:9f:2e:77:7f:72:23:fa:
         3f:ea:a6:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org