Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a3a2f33342d3334203d3e203532393332.roa
File:                     323830343a323862303a3a2f33342d3334203d3e203532393332.roa (raw, json)
Hash identifier:          6wgWKVlgLDZV6C7GZoakSQzbMbbOexf6QXgaPjRYnkM=
Subject key identifier:   80:EC:D9:25:D4:08:C8:CB:C0:85:F5:33:91:38:F1:AE:2D:DE:80:D5
Certificate issuer:       /CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
Certificate serial:       047F7C7F11C6F59603BC35E0F470450974F451EC
Authority key identifier: 9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a3a2f33342d3334203d3e203532393332.roa
Signing time:             Wed 03 Apr 2024 18:31:11 +0000
ROA not before:           Wed 03 Apr 2024 18:26:11 +0000
ROA not after:            Wed 02 Apr 2025 18:31:11 +0000
asID:                     52932
IP address blocks:        2804:28b0::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:7f:7c:7f:11:c6:f5:96:03:bc:35:e0:f4:70:45:09:74:f4:51:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72
        Validity
            Not Before: Apr  3 18:26:11 2024 GMT
            Not After : Apr  2 18:31:11 2025 GMT
        Subject: CN=80ECD925D408C8CBC085F5339138F1AE2DDE80D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:75:e4:6c:af:6b:10:c2:1a:85:e7:9e:00:1c:
                    ea:85:d0:b9:69:81:61:90:87:ea:79:35:26:32:c2:
                    a1:91:2c:eb:ae:d2:d5:b8:a8:56:fe:f7:fc:e7:4e:
                    c0:c3:94:84:e8:a4:58:b8:c5:99:19:fc:6b:bc:35:
                    4b:86:d5:70:51:de:5e:38:1e:74:af:d5:28:7a:7d:
                    ac:63:f7:fc:0c:3d:ee:62:69:b9:b2:c5:ea:23:ec:
                    28:4e:ce:51:fa:a4:bd:aa:05:f3:6e:7c:13:bf:90:
                    55:31:3f:d3:aa:a5:1f:9d:d1:a7:9d:12:51:5d:76:
                    a8:48:1f:26:38:fc:f5:5d:5c:bc:7d:b2:e7:40:cd:
                    6b:17:23:74:71:51:c6:11:5c:e4:83:ee:4e:14:35:
                    4c:95:6d:5c:70:23:cb:56:ce:ec:32:af:6e:f1:c6:
                    69:7a:8b:ad:b4:86:36:10:29:2b:30:83:41:60:80:
                    87:28:76:16:60:4f:17:83:be:d1:4b:74:e5:d8:9f:
                    39:44:28:d8:11:c0:05:47:56:ec:56:e5:fc:d5:a2:
                    96:c6:54:b4:ad:f8:19:70:22:90:42:b1:2e:40:74:
                    ed:6e:e1:23:a8:4a:08:9a:dd:e6:12:79:7d:44:bb:
                    6b:04:f2:de:de:66:f2:53:5c:8f:66:06:ab:0d:29:
                    fb:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:EC:D9:25:D4:08:C8:CB:C0:85:F5:33:91:38:F1:AE:2D:DE:80:D5
            X509v3 Authority Key Identifier:
                keyid:9D:34:8A:0A:66:A2:F5:5A:35:EE:3F:E7:6C:50:D4:DE:EE:98:4B:72

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9D348A0A66A2F55A35EE3FE76C50D4DEEE984B72.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4xWck6Bo4mQ1BuxBFbGbAmQUY2xUn2ahdum5M2zdzPGd/1/323830343a323862303a3a2f33342d3334203d3e203532393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28b0::/34

    Signature Algorithm: sha256WithRSAEncryption
         47:1b:1c:8f:84:a2:56:ca:f0:8d:ee:b4:51:3a:78:e4:df:ee:
         77:30:c1:7c:a9:b4:57:23:3f:91:9f:ec:90:80:f4:ef:ce:a0:
         15:7e:fa:c9:e9:de:9b:b6:cb:4a:8a:4c:c0:19:38:a8:c0:b5:
         eb:a2:0a:41:15:30:e3:23:5b:9e:9e:58:da:52:da:50:f9:5a:
         05:f7:a7:08:50:92:e3:53:7c:cc:53:6e:ae:7d:a9:c2:f6:3a:
         54:a6:f3:28:99:a8:52:27:1b:83:84:84:0b:cb:ba:de:60:0e:
         99:78:0a:af:d7:d4:f2:7d:4f:92:26:22:cd:86:d2:de:12:5f:
         84:70:c8:4a:05:15:f6:a8:e7:6d:cb:c5:1f:30:7b:14:d5:2c:
         16:f9:51:fe:5b:05:36:8b:56:3c:14:42:02:11:02:03:a4:bc:
         0f:02:f1:40:e0:28:d9:7d:01:40:79:c7:43:1b:d8:70:9d:df:
         0b:7a:58:d7:22:e9:d6:5f:78:c8:b3:e6:5e:e2:f9:85:f2:e0:
         c1:75:44:29:c9:1f:e9:4f:ef:41:51:91:40:37:de:34:1b:f0:
         67:a9:36:d8:aa:92:63:56:4c:8c:56:dd:6a:fc:fa:d1:cb:be:
         56:51:17:64:7d:f2:86:f7:04:70:f0:1a:c8:15:d5:ac:ed:fd:
         4e:7a:b7:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org