Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a3a2f33342d3334203d3e20323637343535.roa
File:                     323830343a343163343a3a2f33342d3334203d3e20323637343535.roa (raw, json)
Hash identifier:          lcSgMR0z9Ushd6EMJ4IohICzAtzQmVJlWmSA+9rf18k=
Subject key identifier:   57:76:16:CB:B0:37:29:04:76:8A:FA:9C:24:60:50:3B:A3:D1:1E:C7
Certificate issuer:       /CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
Certificate serial:       3F4B4B165EA43AAF9C77B423B7F09328F9CBC92B
Authority key identifier: C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a3a2f33342d3334203d3e20323637343535.roa
Signing time:             Fri 29 Mar 2024 03:31:04 +0000
ROA not before:           Fri 29 Mar 2024 03:26:04 +0000
ROA not after:            Fri 28 Mar 2025 03:31:04 +0000
asID:                     267455
IP address blocks:        2804:41c4::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:4b:4b:16:5e:a4:3a:af:9c:77:b4:23:b7:f0:93:28:f9:cb:c9:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C105FF99BCA19864676CA5FCFCA53A25516E10F5
        Validity
            Not Before: Mar 29 03:26:04 2024 GMT
            Not After : Mar 28 03:31:04 2025 GMT
        Subject: CN=577616CBB0372904768AFA9C2460503BA3D11EC7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:ac:76:ca:c8:29:d3:d6:9c:7e:7c:66:d0:86:
                    66:e5:18:9a:2f:7e:3a:aa:c3:9c:97:25:fd:06:be:
                    5b:32:26:25:77:f7:88:70:ed:ab:d4:84:cd:a0:d3:
                    ef:95:81:3f:61:c9:24:b2:eb:44:09:c0:b0:9a:01:
                    5d:95:e4:00:65:fb:4a:7d:b4:82:96:95:65:9d:08:
                    eb:07:88:c6:db:34:08:44:cf:76:87:d8:73:6c:76:
                    72:9e:64:03:c1:3f:75:db:e1:49:25:a8:00:35:d0:
                    7f:e3:fb:09:4c:28:e0:b8:0d:67:d3:74:7e:a3:61:
                    11:14:12:3b:31:e3:5e:98:cf:24:ee:39:e0:0e:7b:
                    6d:91:79:12:a1:ea:a9:9b:e7:bb:f6:25:f3:8d:9a:
                    6b:69:b8:e9:97:b6:42:04:10:bf:a8:a9:6d:f2:a1:
                    32:e2:f5:9a:ff:08:6f:28:6f:f5:42:05:e0:47:12:
                    11:60:d1:cb:a0:72:c2:04:22:d2:1a:fd:2c:97:8a:
                    1c:76:8b:07:58:e4:38:2c:90:84:4a:22:72:3e:80:
                    eb:14:91:79:bc:cd:7e:6a:a0:c0:f9:dc:f1:08:0d:
                    09:ed:7f:1e:62:1b:87:21:2f:a3:a0:ae:84:f7:5f:
                    e1:a7:c8:2f:7c:28:f2:ca:ac:00:ac:cf:dd:fb:80:
                    be:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                57:76:16:CB:B0:37:29:04:76:8A:FA:9C:24:60:50:3B:A3:D1:1E:C7
            X509v3 Authority Key Identifier:
                keyid:C1:05:FF:99:BC:A1:98:64:67:6C:A5:FC:FC:A5:3A:25:51:6E:10:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C105FF99BCA19864676CA5FCFCA53A25516E10F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4erqKUcKg9JvxMspUgu9JjdkfErNhpq1KDNg68PJtHg3/0/323830343a343163343a3a2f33342d3334203d3e20323637343535.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:41c4::/34

    Signature Algorithm: sha256WithRSAEncryption
         9a:02:90:38:f8:da:a1:19:bc:66:21:1b:48:09:4c:ef:c2:a4:
         03:d7:cf:50:70:05:90:39:a1:1c:2c:06:ae:72:6e:8a:7a:64:
         e3:3d:4f:9f:7c:a1:a0:a1:c8:2b:36:8c:6a:1f:40:4f:1b:d1:
         7e:d0:58:41:aa:81:62:9e:e6:85:35:63:db:e3:53:a3:c7:5e:
         5f:cc:9a:b3:10:5f:d9:bc:54:26:4b:c3:bc:8d:df:20:1f:5e:
         40:39:77:a2:05:6d:83:ad:68:c1:b6:bb:a7:b5:43:74:e1:c7:
         27:dd:70:b3:72:55:1d:58:4d:10:51:3a:5b:a0:3c:ac:1c:40:
         45:e4:12:c0:f6:35:93:61:60:9c:cb:86:f2:69:2e:93:c9:36:
         72:c0:0b:82:80:36:fb:db:3b:c6:2e:73:7d:22:e9:f6:e4:72:
         9d:4a:8b:b6:37:29:54:1b:6c:71:77:a7:cc:bb:7c:8b:d7:62:
         06:9d:97:72:b4:f2:f1:57:18:97:be:55:a5:f6:fc:71:ed:f7:
         d3:33:09:63:65:13:57:3e:8d:3c:7e:b0:c4:6a:cc:59:80:f8:
         32:27:87:20:02:ea:ec:ba:6d:42:c3:69:b4:b7:42:b8:ee:b7:
         d2:e9:b2:52:03:4f:be:94:22:9d:6b:0a:69:e2:88:0f:e3:2c:
         d4:05:a3:9e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org