Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/323830343a323139383a3a2f33322d3332203d3e203532383037.roa
File:                     323830343a323139383a3a2f33322d3332203d3e203532383037.roa (raw, json)
Hash identifier:          wtk7hjY8qS6MCW3dfIL5TBNWBgzGcnhyj+GZxoMFhSw=
Subject key identifier:   54:F4:B0:D7:FE:4E:62:E4:6A:BB:29:9B:9E:ED:19:4E:EA:01:9C:25
Certificate issuer:       /CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
Certificate serial:       135370B3F105823F384BEBB21E91F85A5E89FA87
Authority key identifier: AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/323830343a323139383a3a2f33322d3332203d3e203532383037.roa
Signing time:             Thu 15 Feb 2024 13:43:48 +0000
ROA not before:           Thu 15 Feb 2024 13:38:48 +0000
ROA not after:            Thu 13 Feb 2025 13:43:48 +0000
asID:                     52807
IP address blocks:        2804:2198::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:53:70:b3:f1:05:82:3f:38:4b:eb:b2:1e:91:f8:5a:5e:89:fa:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=ACECCCA6A8F5684B004F5E53AE680A314B8D74BF
        Validity
            Not Before: Feb 15 13:38:48 2024 GMT
            Not After : Feb 13 13:43:48 2025 GMT
        Subject: CN=54F4B0D7FE4E62E46ABB299B9EED194EEA019C25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:ce:3d:91:4f:ee:29:9c:a2:2f:74:2a:97:66:
                    b3:2f:8a:54:df:59:f6:8d:ad:ad:5a:7a:a9:a6:48:
                    d2:86:df:ef:ac:d8:72:ca:1d:55:a8:ed:69:77:21:
                    a2:bf:3a:48:9b:84:b3:e6:0c:30:5b:42:90:61:16:
                    c7:c6:dd:23:7b:f6:a7:13:a8:45:69:20:9f:0e:e2:
                    94:8b:ce:52:06:c0:98:63:0f:da:4b:5c:4d:53:e4:
                    78:fc:fa:1f:b8:a5:ef:7d:3a:87:7a:e8:fa:7b:40:
                    6f:85:4b:04:83:e4:bc:67:8f:dc:be:32:03:da:2e:
                    b5:ac:0a:62:3f:d5:c3:6f:41:25:02:f4:ba:31:b1:
                    a2:ce:44:a8:78:9e:0e:bd:dc:a4:cc:6f:47:6a:0b:
                    f2:34:45:47:c9:e3:c8:71:09:65:b6:65:a1:15:e2:
                    6c:35:f3:d1:26:d0:e2:42:93:f7:9f:0a:ac:f3:ef:
                    bc:da:e9:20:df:e4:9d:10:6d:fd:e6:8c:ce:97:e6:
                    88:da:f2:7f:41:34:ef:63:e1:4a:86:31:0f:d0:9b:
                    a1:17:e3:8b:b3:db:03:35:2c:aa:b7:4a:aa:97:c3:
                    a4:68:7d:1f:a7:fd:a6:20:35:06:ea:eb:7f:b5:b7:
                    ea:b3:22:d5:14:70:20:db:9d:2e:05:4f:f6:47:cf:
                    d6:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:F4:B0:D7:FE:4E:62:E4:6A:BB:29:9B:9E:ED:19:4E:EA:01:9C:25
            X509v3 Authority Key Identifier:
                keyid:AC:EC:CC:A6:A8:F5:68:4B:00:4F:5E:53:AE:68:0A:31:4B:8D:74:BF

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/ACECCCA6A8F5684B004F5E53AE680A314B8D74BF.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4dAq1mjsbQCTt7s5zJADfiZ4bUvUQpxqhWfnZVRXbNw2/0/323830343a323139383a3a2f33322d3332203d3e203532383037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2198::/32

    Signature Algorithm: sha256WithRSAEncryption
         36:ef:9f:09:5f:a3:c8:23:f3:48:89:1f:b3:3f:60:fe:8b:b5:
         3a:46:69:c9:da:ee:69:b7:60:be:c1:ec:26:18:d9:93:53:1a:
         e7:e4:9f:3f:52:5a:ab:56:99:ed:07:7a:96:98:d2:ca:a5:95:
         29:de:9b:83:b7:88:04:aa:66:22:e3:f0:00:58:67:1e:95:c1:
         ec:44:79:7c:5f:c3:ae:dd:75:2c:ca:aa:ca:51:b0:93:47:a2:
         9d:f8:66:ea:25:0c:41:cf:a5:cd:c6:35:41:50:74:39:34:8d:
         0a:c2:fd:a8:3e:e5:dd:71:7b:89:9c:cc:91:68:be:34:6c:dd:
         96:09:81:21:be:a5:f0:61:8e:9e:5b:1a:74:41:93:96:a0:b7:
         e5:6f:4a:5c:2f:c2:22:08:99:e6:89:80:66:ad:71:85:aa:a7:
         33:4c:a2:fe:ae:34:05:17:5d:0e:d2:a4:bd:0c:7e:65:dd:7c:
         f6:a8:8c:72:e4:c1:ba:d3:39:df:f7:51:65:cc:30:33:c0:90:
         96:71:83:78:fe:e7:ca:29:68:b0:f3:48:af:70:4e:34:f8:9e:
         41:22:85:51:ab:d5:00:8c:e5:63:0a:3a:e0:15:ab:52:a6:87:
         ee:1d:2b:8b:7c:61:43:36:70:08:12:08:fa:c3:fc:1a:82:67:
         cb:74:ce:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:48 2024 by rpki-client on console-ams.rpki-client.org