Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa
File:                     323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa (raw, json)
Hash identifier:          Zz40UZ+Sj6bdOK1Xn2SEeUtQ7yIC1HK0BWOXar25FKw=
Subject key identifier:   B1:17:BB:C7:B4:4B:2B:6E:0E:F4:30:C1:FC:9E:24:44:26:7A:47:90
Certificate issuer:       /CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
Certificate serial:       65C813CA0A1440B48BEC9F02E45F793C682492C2
Authority key identifier: C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa
Signing time:             Fri 29 Mar 2024 03:31:07 +0000
ROA not before:           Fri 29 Mar 2024 03:26:07 +0000
ROA not after:            Fri 28 Mar 2025 03:31:07 +0000
asID:                     267455
IP address blocks:        2804:41c4:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:c8:13:ca:0a:14:40:b4:8b:ec:9f:02:e4:5f:79:3c:68:24:92:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
        Validity
            Not Before: Mar 29 03:26:07 2024 GMT
            Not After : Mar 28 03:31:07 2025 GMT
        Subject: CN=B117BBC7B44B2B6E0EF430C1FC9E2444267A4790
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:c3:c2:8e:64:bc:60:fc:03:11:7a:11:62:be:
                    68:ba:0b:3d:d5:ef:b6:cd:bd:2b:4d:bb:4e:23:92:
                    b8:36:1b:7c:ff:e0:b2:2a:ff:99:80:57:a7:0b:3b:
                    97:ad:af:58:f9:a4:ed:9a:b2:c8:af:e9:01:5f:4d:
                    29:33:63:0f:cd:27:a1:00:9b:c6:11:a8:76:78:7b:
                    96:39:22:f9:8a:9b:35:51:8e:2a:19:9c:d9:f6:d5:
                    1a:68:34:97:cb:5e:c7:d2:e4:71:51:9d:ab:58:db:
                    51:f5:ab:54:bc:fb:7b:56:78:94:cf:d9:62:13:55:
                    17:0c:8c:35:fa:1e:d8:a0:b0:76:32:d5:65:73:e4:
                    95:50:35:1b:1a:be:23:7b:91:b8:77:63:a2:0f:05:
                    da:81:b8:f9:c1:3d:bb:43:56:04:5c:fd:a2:30:42:
                    a2:0c:da:50:60:96:31:f1:0e:69:f0:69:d3:36:25:
                    ce:71:5b:57:d2:29:9a:44:6c:ae:29:1f:5d:f8:3c:
                    36:a2:0f:a9:25:6c:60:13:1b:71:8e:9e:3d:ed:52:
                    08:02:6f:23:dc:eb:d9:e8:8a:a5:da:74:36:15:aa:
                    f0:f7:71:f1:0b:f4:35:27:53:c0:de:96:8e:c1:7a:
                    d1:b4:b0:03:3d:67:f1:82:5a:f9:10:41:64:ba:0e:
                    df:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:17:BB:C7:B4:4B:2B:6E:0E:F4:30:C1:FC:9E:24:44:26:7A:47:90
            X509v3 Authority Key Identifier:
                keyid:C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a343030303a3a2f33342d3334203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c4:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:c2:15:b8:da:89:83:ed:43:b1:5e:cf:43:0b:12:c9:16:96:
         44:6a:d8:aa:7a:3a:dd:e6:36:86:b1:86:13:58:3a:81:cf:cf:
         aa:3e:79:51:ab:96:6c:eb:ab:f0:25:28:1f:a6:c5:20:7b:12:
         07:12:6b:76:f8:92:db:6f:ef:68:38:cf:ec:28:33:04:c3:98:
         8a:f7:0b:fe:5f:db:6f:12:ca:18:7c:02:f3:51:e3:5d:da:ad:
         37:e5:48:aa:f9:37:38:e8:17:dc:7a:ed:a5:59:d9:92:20:42:
         49:a0:d0:f5:04:72:06:ca:da:ee:c3:31:ca:53:7e:bb:20:8b:
         2e:ae:ec:ec:a0:0e:f1:8b:e0:79:f3:04:09:89:e6:21:fa:70:
         6f:8c:0f:6f:a7:53:fb:a0:fa:85:7a:fd:34:9e:4a:8e:07:04:
         1c:57:27:97:5e:91:6d:1a:18:55:94:a3:cd:6a:71:3c:85:15:
         76:a1:b7:31:38:e5:9a:df:24:64:03:b3:c2:cb:29:05:0d:0f:
         c9:26:45:76:9e:a4:74:97:e3:9d:d3:ac:f9:81:35:b9:81:04:
         61:82:fd:44:1e:ae:1d:5f:47:97:e6:7e:6b:d0:ab:3b:8d:ab:
         24:90:1e:70:7b:15:d7:89:53:7e:63:b9:4c:f2:b4:ae:ac:78:
         24:d7:1a:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org