Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/323830343a353235633a393038303a3a2f34312d3431203d3e20323638353133.roa
File:                     323830343a353235633a393038303a3a2f34312d3431203d3e20323638353133.roa (raw, json)
Hash identifier:          eESOHfx/CAB2nxZRdtu+2TIyyQhpdf7qszbHNyirwTQ=
Subject key identifier:   E3:FF:CE:0F:ED:89:3C:19:17:A1:AF:18:A5:1D:3A:8F:6A:44:C8:37
Certificate issuer:       /CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
Certificate serial:       745D63173005AEE37071B60A4E96F5DC1B4FCC49
Authority key identifier: 7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/323830343a353235633a393038303a3a2f34312d3431203d3e20323638353133.roa
Signing time:             Thu 22 Feb 2024 16:46:53 +0000
ROA not before:           Thu 22 Feb 2024 16:41:53 +0000
ROA not after:            Thu 20 Feb 2025 16:46:53 +0000
asID:                     268513
IP address blocks:        2804:525c:9080::/41 maxlen: 41

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            74:5d:63:17:30:05:ae:e3:70:71:b6:0a:4e:96:f5:dc:1b:4f:cc:49
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7D41250B864CCAC75BADB9B24712630BE0F9C265
        Validity
            Not Before: Feb 22 16:41:53 2024 GMT
            Not After : Feb 20 16:46:53 2025 GMT
        Subject: CN=E3FFCE0FED893C1917A1AF18A51D3A8F6A44C837
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:0d:e2:36:9b:cb:af:48:20:d7:0e:0a:55:d9:
                    03:08:c9:65:39:8a:1c:c4:5c:91:2e:39:e1:b1:1f:
                    61:9c:2a:a8:cd:4e:72:82:5b:cc:cd:09:d8:1e:eb:
                    9c:4e:7a:9a:8c:5d:0b:bf:2e:45:d7:0d:7b:b0:d6:
                    f9:e8:11:3e:e3:c5:0a:2b:a3:b9:e8:7e:f6:4e:6d:
                    4b:38:36:2c:b7:f5:78:41:e9:c2:89:82:9c:d5:73:
                    f7:24:1b:f6:a9:e2:5e:57:f9:6f:0f:4e:fd:99:20:
                    08:7f:36:0e:fa:97:30:0c:11:36:2d:c1:6c:e3:66:
                    42:2c:56:51:63:14:e0:19:5a:d6:5b:d5:bc:06:ba:
                    4b:74:d1:8b:a0:7e:6a:32:da:1a:70:3c:e0:69:fe:
                    20:5e:4b:fa:48:90:84:5e:77:8b:84:aa:66:59:a5:
                    5c:36:2d:20:e2:1d:6f:ec:70:30:8d:2c:97:13:70:
                    a6:18:e0:52:0b:65:70:f7:8e:99:0f:db:4f:ea:42:
                    ce:bc:68:a3:27:38:38:0e:89:f6:7c:d8:d6:ba:5c:
                    3b:af:ad:0a:ab:f8:bf:88:d6:45:c2:fa:f2:d2:d8:
                    51:ba:39:e1:62:93:96:7c:04:e4:8c:a5:ad:f2:1d:
                    a8:b3:68:57:31:aa:85:4b:ad:95:d4:91:2d:ba:93:
                    a9:0f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E3:FF:CE:0F:ED:89:3C:19:17:A1:AF:18:A5:1D:3A:8F:6A:44:C8:37
            X509v3 Authority Key Identifier:
                keyid:7D:41:25:0B:86:4C:CA:C7:5B:AD:B9:B2:47:12:63:0B:E0:F9:C2:65

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7D41250B864CCAC75BADB9B24712630BE0F9C265.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4favpPUYEtaDXzumBoBj4fhPU5vcmKwJ3HBurdeZBbob/0/323830343a353235633a393038303a3a2f34312d3431203d3e20323638353133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:525c:9080::/41

    Signature Algorithm: sha256WithRSAEncryption
         56:b6:1d:06:db:d3:03:15:c8:9c:c4:3a:08:6c:4c:0d:2b:a3:
         b7:62:cc:4f:12:2d:24:ce:24:5f:de:e8:b6:7f:37:55:51:4a:
         81:05:1a:7f:ad:87:ce:0d:dd:3d:f9:61:85:39:9f:d8:05:b6:
         b3:ec:e5:04:b6:ad:b1:f4:0e:00:dd:24:1b:7f:2f:6e:b7:b5:
         ed:37:b4:de:51:a3:8d:11:ba:49:27:d9:e2:16:21:c8:ca:97:
         5e:4d:a8:4c:3c:83:bb:36:7a:1f:45:b9:41:07:0e:4c:9f:cd:
         bf:46:2f:cf:f7:a1:eb:df:8d:00:0e:e0:0f:c3:ba:c6:c0:97:
         6d:e9:36:73:b6:53:6e:70:bf:db:ee:41:52:25:6f:3d:da:eb:
         66:9b:8e:c8:f5:2b:66:d7:f7:be:11:3c:69:be:2f:7b:e2:b7:
         3c:50:9f:43:7f:80:22:00:5c:f8:d2:22:49:12:fa:6d:26:3e:
         89:39:57:74:a0:a2:a1:f3:e3:31:b2:f0:d3:0d:a1:7c:0f:82:
         d2:dd:86:08:cf:0c:6b:10:5b:72:ad:a8:76:52:6e:58:b9:74:
         ab:40:ce:7f:92:de:39:36:b6:bc:0a:ad:64:d8:aa:e4:4b:98:
         ab:31:cd:ce:e3:3b:d2:49:ca:f2:df:dc:ac:a8:6b:32:f0:3c:
         3e:74:57:97
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org