Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/0/323830343a353931343a3a2f33322d313238203d3e20323638313638.roa
File:                     323830343a353931343a3a2f33322d313238203d3e20323638313638.roa (raw, json)
Hash identifier:          EsfS+uGx+16Nd1q6562NTODhaqxhqUQhWKrWBVt0JZM=
Subject key identifier:   24:87:58:1E:63:DA:8F:F6:45:ED:09:2C:52:D9:C1:86:73:C1:09:2E
Certificate issuer:       /CN=71207E5607DB6402520A3C56A289E2F2B63BEF0A
Certificate serial:       31B210E3A08621A6424AA9E9948CD9E813579D1A
Authority key identifier: 71:20:7E:56:07:DB:64:02:52:0A:3C:56:A2:89:E2:F2:B6:3B:EF:0A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71207E5607DB6402520A3C56A289E2F2B63BEF0A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/0/323830343a353931343a3a2f33322d313238203d3e20323638313638.roa
Signing time:             Mon 26 Feb 2024 19:01:41 +0000
ROA not before:           Mon 26 Feb 2024 18:56:41 +0000
ROA not after:            Mon 24 Feb 2025 19:01:41 +0000
asID:                     268168
IP address blocks:        2804:5914::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            31:b2:10:e3:a0:86:21:a6:42:4a:a9:e9:94:8c:d9:e8:13:57:9d:1a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71207E5607DB6402520A3C56A289E2F2B63BEF0A
        Validity
            Not Before: Feb 26 18:56:41 2024 GMT
            Not After : Feb 24 19:01:41 2025 GMT
        Subject: CN=2487581E63DA8FF645ED092C52D9C18673C1092E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:cb:b0:12:eb:48:f0:2f:f1:dc:62:fd:c4:38:
                    9e:01:00:a1:38:79:ee:5b:fd:b7:9c:90:53:88:29:
                    8e:1d:39:72:a2:de:fd:d4:4f:a5:9b:d0:77:eb:a6:
                    b4:60:d8:6e:4b:bb:cc:7f:06:3e:16:cd:c6:7c:5d:
                    0f:35:04:8b:ec:01:3c:47:74:31:7f:4a:d5:26:ac:
                    ec:b9:8f:33:6b:bb:f9:67:90:c3:77:4a:2e:42:af:
                    fe:d6:47:ea:eb:b7:3a:cd:27:f8:d4:0d:5b:7d:1f:
                    69:03:e2:a0:0a:33:7d:f5:fe:48:0b:d0:20:9c:08:
                    d2:bb:58:53:2b:f2:6d:e6:5a:91:8f:03:e3:e6:56:
                    56:30:d1:0a:06:75:e5:a3:4f:69:b1:37:1b:4b:73:
                    a0:45:88:31:cf:b7:81:4d:16:7b:ab:5a:73:52:f7:
                    8e:11:f7:f6:11:fc:71:f3:1f:2a:e5:85:c0:67:15:
                    54:00:c6:3c:8b:54:ad:44:77:bf:0d:7e:3f:96:15:
                    da:b4:f4:02:67:ed:ef:99:d4:6c:b6:69:b7:82:dd:
                    2e:b6:bc:c9:e7:84:41:0e:2e:48:b3:cd:a5:3b:cf:
                    58:ab:8f:85:e2:fe:d4:3a:ef:e4:16:66:ad:02:4e:
                    41:02:ed:33:fb:4c:1d:87:60:8b:41:6b:92:48:74:
                    8a:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                24:87:58:1E:63:DA:8F:F6:45:ED:09:2C:52:D9:C1:86:73:C1:09:2E
            X509v3 Authority Key Identifier:
                keyid:71:20:7E:56:07:DB:64:02:52:0A:3C:56:A2:89:E2:F2:B6:3B:EF:0A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/0/71207E5607DB6402520A3C56A289E2F2B63BEF0A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71207E5607DB6402520A3C56A289E2F2B63BEF0A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4w3UfBFVP6hKnowJViDv8iZXWYbcFkLXWb3NqjKuy3HJ/0/323830343a353931343a3a2f33322d313238203d3e20323638313638.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5914::/32

    Signature Algorithm: sha256WithRSAEncryption
         47:49:35:f2:b7:9a:b0:b7:3c:72:36:46:84:bb:60:8a:4f:ab:
         f0:ef:fa:d3:7c:ec:49:82:72:a8:c1:f9:21:a7:93:57:c8:97:
         2b:cf:38:fe:85:bf:cf:a5:0e:ff:16:d1:15:9b:bd:a4:43:72:
         70:36:9a:40:e3:d2:c8:76:f3:45:e8:21:21:f8:0b:98:86:75:
         97:89:2d:e4:3f:54:27:26:60:9f:48:79:d6:2d:e8:31:23:0d:
         3c:7e:5e:f9:22:5f:57:90:8e:25:29:0a:90:4d:90:b7:cb:d5:
         94:e6:6f:93:bc:d8:77:2a:cd:9b:01:20:d6:17:74:3a:8b:d0:
         93:d2:ae:9e:31:08:fa:4a:58:94:c3:d8:05:8d:87:55:b3:e8:
         24:16:aa:49:78:a4:3e:95:e6:b9:4e:d8:fd:b1:5d:cc:6a:77:
         d8:f3:49:ee:fa:6b:39:49:1a:68:ea:b2:8d:85:72:4e:18:ce:
         6b:27:07:f5:b0:5f:5a:1a:54:0c:17:f0:48:a3:30:09:20:8b:
         d5:75:f1:45:e1:0c:56:85:88:3a:2b:a9:04:93:e8:dd:09:a0:
         42:4c:df:dc:39:42:fa:3c:f5:1c:0d:58:3b:df:e2:9b:e2:2e:
         6f:2c:c3:54:b0:a5:fa:33:09:29:86:1d:b7:0f:d4:52:b8:08:
         cb:37:c2:78
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org