Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/323830343a326661343a3a2f33322d3438203d3e203532373731.roa
File:                     323830343a326661343a3a2f33322d3438203d3e203532373731.roa (raw, json)
Hash identifier:          2Wvmnzi/uNM8razU56aRtpOmlWf6BDDfjoBSgF19BNk=
Subject key identifier:   24:A8:3E:FF:81:A1:BD:E9:E2:28:2E:B8:4E:B0:44:BA:CA:CA:00:14
Certificate issuer:       /CN=6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21
Certificate serial:       6A942825C1A852DD058B233C6EBD2FF9BEC4C9DC
Authority key identifier: 66:94:01:4E:FD:E7:26:CA:8D:24:0B:B1:A4:BB:23:DB:7F:0F:3F:21
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/323830343a326661343a3a2f33322d3438203d3e203532373731.roa
Signing time:             Tue 30 Jan 2024 20:35:48 +0000
ROA not before:           Tue 30 Jan 2024 20:30:48 +0000
ROA not after:            Tue 28 Jan 2025 20:35:48 +0000
asID:                     52771
IP address blocks:        2804:2fa4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6a:94:28:25:c1:a8:52:dd:05:8b:23:3c:6e:bd:2f:f9:be:c4:c9:dc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21
        Validity
            Not Before: Jan 30 20:30:48 2024 GMT
            Not After : Jan 28 20:35:48 2025 GMT
        Subject: CN=24A83EFF81A1BDE9E2282EB84EB044BACACA0014
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:f0:b1:94:fa:d3:3c:41:1c:cd:4a:8c:15:03:
                    c1:99:be:0d:16:87:ae:2f:eb:0a:71:83:a0:cc:4e:
                    21:28:07:38:3f:09:65:1f:7b:e1:9b:95:d2:65:d9:
                    39:57:59:d0:34:b2:87:ad:5f:07:21:7c:91:47:2f:
                    d2:5a:6d:f7:69:16:e9:d2:ec:07:64:40:1e:19:30:
                    29:df:a6:17:11:a8:c2:c5:da:d3:74:fc:9d:99:19:
                    94:92:9f:73:49:27:c5:fc:94:71:d9:a9:b2:b0:c2:
                    ca:03:ed:e3:08:03:40:6d:08:b1:b9:db:ae:f5:42:
                    fe:fd:65:3e:49:51:0e:2d:bd:63:8d:13:66:ee:42:
                    54:3a:65:cd:c5:09:64:e0:e8:4b:13:2f:94:fb:ec:
                    f8:7c:2b:9f:51:ef:c3:eb:af:f0:37:e7:60:3c:e2:
                    63:db:cd:c0:c6:5d:37:42:2c:68:39:03:47:20:88:
                    12:73:24:d3:fd:81:51:1a:48:b2:73:75:93:74:d3:
                    f1:46:86:7a:70:57:38:d4:71:c3:e3:25:32:53:99:
                    ef:31:2a:64:50:ed:fc:93:84:ef:13:aa:d3:3d:ef:
                    9d:0f:6f:e0:db:06:f1:e0:d5:b5:e1:ec:1d:33:25:
                    c2:9b:92:2a:1f:ab:4b:c2:80:a3:04:ec:e3:75:f0:
                    da:4d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:A8:3E:FF:81:A1:BD:E9:E2:28:2E:B8:4E:B0:44:BA:CA:CA:00:14
            X509v3 Authority Key Identifier:
                keyid:66:94:01:4E:FD:E7:26:CA:8D:24:0B:B1:A4:BB:23:DB:7F:0F:3F:21

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6694014EFDE726CA8D240BB1A4BB23DB7F0F3F21.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4mFf3EtPJjwqYYYDz2o6DHTwUKX1tFv9SD81r27wZr4i/0/323830343a326661343a3a2f33322d3438203d3e203532373731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2fa4::/32

    Signature Algorithm: sha256WithRSAEncryption
         2d:47:b3:72:fc:e6:1f:7d:49:b0:a2:c4:e1:30:12:c2:0a:09:
         22:f6:cf:16:54:a9:5b:5c:07:5f:18:d2:31:e1:8b:3b:1f:cc:
         63:54:03:8a:4e:83:dd:07:55:6a:b2:15:c3:f5:a1:7e:df:78:
         a4:52:ab:3b:2f:c6:eb:3b:2b:44:fe:d4:2c:26:47:b6:90:fd:
         9c:54:ee:ad:43:5a:a2:89:9e:1e:54:f4:bd:10:96:30:d7:6c:
         b0:c3:41:1c:8f:d8:35:5c:66:23:f8:67:e0:67:aa:30:35:f5:
         5d:9a:c9:d3:1d:ac:35:88:d8:c8:7d:21:bb:c6:ad:5b:59:d3:
         9d:70:e3:08:09:4c:82:e3:fa:00:f2:3e:3a:bb:e2:12:74:5d:
         6a:df:d6:c9:ff:ad:8c:85:59:e8:ae:45:aa:be:0a:d4:24:23:
         a0:50:d6:f0:b9:9f:e0:b9:92:c4:52:5f:13:9d:9d:bd:7d:44:
         b8:24:8e:5f:ec:51:d1:15:41:d8:01:7a:5b:4c:9f:33:fe:9c:
         e0:6b:2d:0a:4e:90:79:37:9e:9f:60:9c:74:ce:b7:60:f6:60:
         ef:03:4b:2c:b1:51:3b:6d:98:7e:de:06:22:e1:97:03:b0:9e:
         c3:83:10:23:73:e3:97:74:11:8f:c4:fc:a9:6f:76:5d:88:e0:
         4c:f9:3f:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org