Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/323830343a363538303a3a2f33332d3333203d3e20323639343935.roa
File:                     323830343a363538303a3a2f33332d3333203d3e20323639343935.roa (raw, json)
Hash identifier:          vvQuSl08r7K8V4QbHpoPwdyOrBPHXT3KduYjuSjjGNw=
Subject key identifier:   87:4A:15:E9:14:FB:27:F3:8E:A0:E9:94:FC:F7:7C:D8:F8:14:B0:9F
Certificate issuer:       /CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
Certificate serial:       1F7ABF092654466D25F79420FE6F86F0CC0A2CF3
Authority key identifier: 9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/323830343a363538303a3a2f33332d3333203d3e20323639343935.roa
Signing time:             Tue 09 Apr 2024 02:19:48 +0000
ROA not before:           Tue 09 Apr 2024 02:14:48 +0000
ROA not after:            Tue 08 Apr 2025 02:19:48 +0000
asID:                     269495
IP address blocks:        2804:6580::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:7a:bf:09:26:54:46:6d:25:f7:94:20:fe:6f:86:f0:cc:0a:2c:f3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB
        Validity
            Not Before: Apr  9 02:14:48 2024 GMT
            Not After : Apr  8 02:19:48 2025 GMT
        Subject: CN=874A15E914FB27F38EA0E994FCF77CD8F814B09F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:9d:45:92:ca:0b:96:65:b5:9c:89:f6:ac:14:
                    ec:92:b7:21:12:6c:1d:e5:cc:ab:c6:17:23:d5:26:
                    46:0f:c4:f2:b7:8e:4d:59:1f:85:fa:c3:5a:1f:5a:
                    3f:2a:58:36:9b:4b:fd:00:70:99:50:fd:25:e6:27:
                    ca:32:03:b2:dd:f6:49:38:05:6f:a4:17:2f:7c:ca:
                    58:65:f1:20:08:35:cb:23:88:4c:ab:70:28:65:a6:
                    dd:53:c6:a6:fd:e3:ab:92:f1:c4:8d:5d:01:59:81:
                    3a:45:dd:50:ae:75:d4:74:bc:ab:5b:1f:17:30:3f:
                    78:11:de:61:70:5c:3d:c7:d8:09:33:4e:03:8f:55:
                    3d:72:ec:95:18:f0:03:ad:00:63:70:ae:50:96:f7:
                    34:0e:bf:96:6d:97:9e:4f:3f:7e:07:4c:99:b6:c2:
                    3f:d1:b9:cc:31:e1:aa:1f:c7:79:52:9a:95:06:54:
                    51:61:3a:04:45:fd:02:6d:c7:23:34:7e:a9:27:1d:
                    6e:f6:8a:4c:15:95:c8:7b:f6:58:70:c2:00:79:07:
                    8a:9a:62:02:0d:5b:fe:30:7c:0c:e9:26:c8:04:43:
                    59:3f:dc:b3:05:b9:68:df:0e:62:a2:93:13:c8:73:
                    e8:66:80:eb:90:69:3c:a7:bc:7a:0b:27:ad:cc:11:
                    c9:33
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                87:4A:15:E9:14:FB:27:F3:8E:A0:E9:94:FC:F7:7C:D8:F8:14:B0:9F
            X509v3 Authority Key Identifier:
                keyid:9F:E3:B7:F3:F1:B2:F9:BC:01:D0:2D:F1:2E:5D:31:AA:14:E0:60:DB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/9FE3B7F3F1B2F9BC01D02DF12E5D31AA14E060DB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4nJQkn5APt2gK2ZKT1FXVMN2axjujqPrAg8qXs5tRjhr/0/323830343a363538303a3a2f33332d3333203d3e20323639343935.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6580::/33

    Signature Algorithm: sha256WithRSAEncryption
         b5:e7:0b:df:7d:4d:02:14:32:19:6a:b7:de:69:c9:3d:13:09:
         03:00:74:ba:3c:5a:3c:47:c3:88:2f:48:1a:59:6b:82:90:60:
         32:2a:e3:f5:90:8a:21:08:16:26:ba:b7:ae:ed:82:a8:9f:f8:
         01:be:d1:ee:3b:02:8e:8b:d6:a7:23:8b:d7:c1:d3:99:c1:e1:
         04:e0:c0:46:80:ce:f7:2a:eb:75:ea:9a:b5:52:3f:2a:83:d4:
         40:cf:0e:77:e3:41:82:b2:cf:4c:ad:a9:dc:54:46:cb:02:69:
         7e:34:fe:e4:85:d5:58:8e:3b:b2:ec:ac:18:c0:01:40:a8:a3:
         24:23:64:86:a3:9d:14:84:66:35:c7:b4:30:57:1d:ff:3a:98:
         80:bd:32:7c:3d:fd:dc:90:71:6e:30:29:b6:15:23:bf:90:bf:
         36:99:d6:ab:99:5f:18:59:2d:de:2d:6d:d2:ec:12:64:34:9b:
         60:c5:0d:43:06:67:c4:c2:a3:0b:35:1d:8b:07:a4:45:b8:41:
         00:41:cd:39:0d:af:da:53:b4:04:f5:4f:6c:f2:e5:df:62:96:
         ea:11:f0:b6:c9:b4:c9:9c:49:9f:51:65:76:7b:0f:73:08:5b:
         59:8f:74:0f:ae:08:9a:a2:9c:e2:b8:28:aa:e2:9a:cd:b2:29:
         ad:b8:f8:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org