Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a3a2f33322d3332203d3e203532393332.roa
File:                     323830343a323862303a3a2f33322d3332203d3e203532393332.roa (raw, json)
Hash identifier:          +p88T5AJLHZQJ297msOkuGeSP079k1xqm4Gabu9Liy4=
Subject key identifier:   37:09:48:E0:94:E7:1C:7D:51:E3:15:DF:0D:41:59:8B:FA:48:4F:09
Certificate issuer:       /CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
Certificate serial:       21C665C13A09B3766526AC6E7DC5BD7E20869585
Authority key identifier: 9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a3a2f33322d3332203d3e203532393332.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     52932
IP address blocks:        2804:28b0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            21:c6:65:c1:3a:09:b3:76:65:26:ac:6e:7d:c5:bd:7e:20:86:95:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject: CN=370948E094E71C7D51E315DF0D41598BFA484F09
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:bf:3e:fd:f7:3d:f7:f8:67:ca:a1:f8:8d:47:
                    c2:54:d6:c4:40:73:b5:b3:c6:85:07:3c:33:3f:80:
                    49:30:67:ab:35:8e:ee:d8:5d:ec:36:57:aa:49:3e:
                    c5:b5:dc:ef:4c:ef:ab:af:aa:27:11:1c:31:d8:9e:
                    84:e5:e4:cf:9d:ae:71:e9:dd:b1:2c:9c:8d:97:93:
                    71:26:c0:3e:44:5d:be:67:86:a4:85:05:b6:ba:a8:
                    67:cc:bf:aa:48:b9:88:d9:9f:a8:e6:82:0e:e0:be:
                    d1:4a:11:3a:3e:b1:3c:a3:34:ca:97:eb:e6:01:be:
                    90:e1:a5:cf:bf:1e:4f:1f:ca:c6:7d:69:6c:81:4e:
                    74:6e:70:84:73:a8:82:92:58:f1:9e:13:9c:43:1e:
                    d6:5f:a8:d0:b8:cb:ab:b2:16:ab:dd:21:4d:c5:cf:
                    69:13:82:73:3a:11:4f:e3:c7:de:a8:e1:5e:10:2f:
                    be:89:b3:51:19:51:e5:cd:8b:e6:42:e1:63:d6:53:
                    37:93:f7:77:38:76:82:81:47:c2:ae:be:aa:73:a7:
                    03:cb:6e:78:ce:33:79:d2:5f:58:43:7b:33:8d:15:
                    45:8f:77:6a:67:86:ee:bb:ba:6a:e4:bd:dc:69:f5:
                    4a:e9:f0:c2:c2:07:4a:40:9e:58:7b:18:60:a0:2f:
                    85:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:09:48:E0:94:E7:1C:7D:51:E3:15:DF:0D:41:59:8B:FA:48:4F:09
            X509v3 Authority Key Identifier:
                keyid:9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a3a2f33322d3332203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:64:a9:1c:91:90:84:d2:17:29:37:14:b9:d5:95:41:c7:ff:
         75:90:9a:25:6e:aa:63:78:bd:b1:23:85:c2:da:e9:1c:93:ea:
         4b:23:15:7b:7c:4a:48:eb:44:2a:4c:35:61:64:0c:85:e4:56:
         18:5f:c2:4c:07:fa:e0:71:65:3c:01:2f:f4:1a:e6:bb:8f:72:
         a7:31:10:fd:b7:d5:de:0b:a7:fa:f5:e1:cf:12:12:dc:f0:ce:
         de:6d:51:e8:b1:51:aa:c0:4d:59:70:2e:22:67:a5:9c:85:e6:
         e3:bd:3b:72:76:1a:00:c5:cd:87:a3:71:a7:73:b0:e6:d6:8c:
         44:3d:8e:da:ed:a6:0e:c6:48:c6:dd:8c:86:6c:0f:0e:a4:68:
         ae:0c:cf:74:b6:9f:c9:d9:1a:e7:64:a8:6c:73:4e:d4:19:5d:
         d8:3f:90:33:b9:61:ae:5a:9d:86:cd:94:0e:15:7d:36:57:5e:
         9d:49:5d:65:0c:15:c9:92:3c:5c:14:d6:9d:27:b5:c0:1b:83:
         a9:12:5f:e9:ad:c4:e2:f7:a4:6c:b3:1d:50:74:3d:84:b3:05:
         e8:7b:a4:bf:42:1e:21:85:8a:13:fd:42:ab:1c:1a:ef:6c:d8:
         af:06:9e:dd:1b:b5:c0:a7:e3:0d:04:3e:15:a0:4e:d2:8e:8e:
         c1:eb:3f:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org