Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a3a2f34382d3438203d3e20323634353839.roa
File:                     323830343a323231303a3a2f34382d3438203d3e20323634353839.roa (raw, json)
Hash identifier:          JjP0z/OLpucMMy7LA+C+XJDq/o6dizQDzbhBd6JBDo4=
Subject key identifier:   23:EE:72:37:38:12:2C:D9:FC:1E:81:FE:04:66:EC:49:E7:E9:2A:2E
Certificate issuer:       /CN=9AB232D2E2328522F328939E61A9457DA0361AF1
Certificate serial:       7264AA95380EC2D72F87D14375BD5F64DDA8CAAF
Authority key identifier: 9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a3a2f34382d3438203d3e20323634353839.roa
Signing time:             Fri 23 Jun 2023 19:06:43 +0000
ROA not before:           Fri 23 Jun 2023 19:01:43 +0000
ROA not after:            Fri 21 Jun 2024 19:06:43 +0000
asID:                     264589
IP address blocks:        2804:2210::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:64:aa:95:38:0e:c2:d7:2f:87:d1:43:75:bd:5f:64:dd:a8:ca:af
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9AB232D2E2328522F328939E61A9457DA0361AF1
        Validity
            Not Before: Jun 23 19:01:43 2023 GMT
            Not After : Jun 21 19:06:43 2024 GMT
        Subject: CN=23EE723738122CD9FC1E81FE0466EC49E7E92A2E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:d5:95:5e:e7:cd:6b:76:6f:76:6c:d6:d8:81:
                    df:92:30:9a:ef:6b:08:47:69:e8:9a:2e:14:36:2b:
                    b6:e5:d4:ae:7d:e2:e3:4f:7e:73:0c:72:e0:28:1b:
                    9a:75:8a:fe:20:66:5c:ae:7e:e4:0a:3c:2e:d8:c6:
                    12:b9:46:1a:c0:e2:65:51:fc:1f:9b:8b:ca:64:50:
                    ff:7f:2d:b6:49:fb:34:de:81:26:22:1f:f7:e7:f7:
                    11:be:f8:1e:9f:a7:92:bc:7e:e3:8e:fe:7c:dd:18:
                    62:a6:ad:eb:ac:78:c6:9c:63:e7:62:61:71:5e:a6:
                    ff:68:81:73:38:f9:28:61:71:40:ef:e0:72:cb:a8:
                    c7:f4:62:3f:60:94:ea:0c:7a:ea:94:d4:d7:db:c2:
                    59:34:67:5d:cf:6d:cf:8a:7a:00:a2:7f:61:3e:09:
                    cf:d1:fe:29:eb:1b:26:2c:34:22:42:dc:b4:3a:fb:
                    bd:4f:b2:f4:ec:da:02:af:a0:ea:06:b2:b5:66:35:
                    a1:db:62:ab:04:75:08:2f:1e:04:54:80:97:3d:c5:
                    74:b6:0e:24:c1:99:0a:06:f9:29:00:7b:57:ce:72:
                    3b:a2:c8:da:b8:f9:88:ab:20:ff:77:d2:07:ed:d6:
                    6c:fa:60:64:a2:29:84:25:bd:b0:3c:f5:bb:0a:62:
                    9b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                23:EE:72:37:38:12:2C:D9:FC:1E:81:FE:04:66:EC:49:E7:E9:2A:2E
            X509v3 Authority Key Identifier:
                keyid:9A:B2:32:D2:E2:32:85:22:F3:28:93:9E:61:A9:45:7D:A0:36:1A:F1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/9AB232D2E2328522F328939E61A9457DA0361AF1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9AB232D2E2328522F328939E61A9457DA0361AF1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4j9RGLtErTxQMN1V1Qi8P3pTverWFvQpXYVah6M1mZdt/0/323830343a323231303a3a2f34382d3438203d3e20323634353839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2210::/48

    Signature Algorithm: sha256WithRSAEncryption
         60:ea:02:0d:4d:40:43:bf:f2:e7:ac:73:9f:26:a6:5f:5c:ca:
         03:72:4d:90:88:02:65:14:31:30:82:e9:21:84:58:66:8a:20:
         bd:ec:b3:07:a3:b0:c8:33:d8:1b:50:cd:75:b1:9a:b5:72:95:
         44:92:67:5f:4c:2e:c7:d1:06:64:5d:8d:17:e8:7e:7a:3e:fb:
         d8:9a:42:ab:d8:a7:ed:41:4a:54:72:fa:35:dd:70:a3:13:db:
         23:1b:32:37:f9:0b:c1:86:e8:d3:de:a6:7f:a2:f1:38:80:da:
         b8:e8:a8:67:a5:f9:61:66:f9:ec:41:63:67:76:db:fe:17:f7:
         71:96:d6:9f:d2:71:78:3b:ce:16:e1:67:fb:ce:56:6b:de:c6:
         46:e9:9f:a8:c2:83:71:f7:dc:79:68:a0:0a:6c:01:cd:7a:b4:
         97:cb:b6:1e:cb:06:cb:52:e0:f6:cc:76:41:5a:ff:4d:2a:3a:
         1e:af:ee:f0:bb:b2:ba:37:03:40:e2:c9:9b:db:6a:0d:31:0e:
         7d:38:9f:28:f8:ac:d3:e6:f5:98:c2:4b:e4:fd:37:c8:6d:ca:
         03:cc:a1:12:4e:1e:78:7b:cc:0c:d3:9d:55:05:b1:47:7d:d0:
         30:e9:0c:9e:f4:a5:04:ca:9e:65:ef:83:ca:5d:0f:ca:57:fb:
         34:24:bf:03
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org