Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/2/323830343a346131633a3a2f33372d3337203d3e20323637323139.roa
File:                     323830343a346131633a3a2f33372d3337203d3e20323637323139.roa (raw, json)
Hash identifier:          MBjzTIzoYxQPr86fHhOpxlJ/3tfTBfujUyAyG7pa88c=
Subject key identifier:   43:9B:BD:47:78:E4:BF:22:EB:8F:86:81:7D:CE:68:F4:44:E1:89:19
Certificate issuer:       /CN=63820E72BB2FEC3F1330D9F4624FC89CA82480CA
Certificate serial:       638068E5ED31CD06183CE31408F9ADC80D3D2268
Authority key identifier: 63:82:0E:72:BB:2F:EC:3F:13:30:D9:F4:62:4F:C8:9C:A8:24:80:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63820E72BB2FEC3F1330D9F4624FC89CA82480CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/2/323830343a346131633a3a2f33372d3337203d3e20323637323139.roa
Signing time:             Thu 09 Mar 2023 19:09:28 +0000
ROA not before:           Thu 09 Mar 2023 19:04:28 +0000
ROA not after:            Thu 07 Mar 2024 19:09:28 +0000
asID:                     267219
IP address blocks:        2804:4a1c::/37 maxlen: 37

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:80:68:e5:ed:31:cd:06:18:3c:e3:14:08:f9:ad:c8:0d:3d:22:68
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=63820E72BB2FEC3F1330D9F4624FC89CA82480CA
        Validity
            Not Before: Mar  9 19:04:28 2023 GMT
            Not After : Mar  7 19:09:28 2024 GMT
        Subject: CN=439BBD4778E4BF22EB8F86817DCE68F444E18919
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:3b:e0:11:4f:40:dd:ec:c9:48:ea:7c:51:64:
                    1c:66:87:cd:87:d6:a0:d7:39:87:b8:7f:0e:fc:8e:
                    90:9f:73:40:59:43:e2:3e:bc:72:94:21:43:2d:5d:
                    dc:fb:48:84:9a:e8:5e:8c:44:2e:23:16:b3:0f:36:
                    58:7b:e2:61:10:e2:88:68:c9:24:92:66:6f:b6:5c:
                    0d:fe:6a:60:f1:0b:91:d0:dc:bc:7d:ad:43:df:27:
                    98:d9:44:21:23:a7:99:77:b4:f7:94:72:91:cb:8c:
                    08:f4:1a:fd:bb:dd:72:2e:17:87:2d:df:77:9a:6f:
                    b0:a5:78:09:bb:80:c2:16:32:39:a5:91:f2:41:e4:
                    40:ce:91:68:4a:42:23:02:95:37:a9:4f:d4:9c:95:
                    ac:21:26:ff:55:3e:25:63:e7:9d:72:6d:73:c7:2e:
                    77:7d:c0:59:3d:8e:a9:e4:6a:17:dd:b9:36:fb:65:
                    80:e8:fa:43:c0:8a:fd:31:3a:73:9a:06:67:ad:f7:
                    a1:f2:93:fc:5f:ca:d6:0c:51:86:8d:42:5c:1f:1c:
                    e5:4c:a7:9e:33:7b:37:86:f0:da:1e:77:b9:ea:e2:
                    41:42:6d:fd:3e:ce:e9:4f:02:d7:b6:2b:4d:fe:6a:
                    f0:b5:d9:5d:d0:4b:fa:b9:56:f7:77:00:58:3b:6b:
                    33:75
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:9B:BD:47:78:E4:BF:22:EB:8F:86:81:7D:CE:68:F4:44:E1:89:19
            X509v3 Authority Key Identifier:
                keyid:63:82:0E:72:BB:2F:EC:3F:13:30:D9:F4:62:4F:C8:9C:A8:24:80:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/2/63820E72BB2FEC3F1330D9F4624FC89CA82480CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/63820E72BB2FEC3F1330D9F4624FC89CA82480CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4y2hhXYEeK3uJYt2TKp3PPF59MqWxgE3nW3XaG88k6L4/2/323830343a346131633a3a2f33372d3337203d3e20323637323139.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4a1c::/37

    Signature Algorithm: sha256WithRSAEncryption
         1b:01:9e:9c:82:f0:f2:9d:d0:26:5e:0e:85:ac:54:9a:0f:ca:
         be:68:0c:88:d7:15:b1:f8:5f:d1:87:24:17:7b:08:2e:8e:39:
         c3:89:7e:69:ec:aa:4f:2d:c0:d1:a9:d1:a8:0b:fb:4d:5e:c4:
         69:5d:4e:7a:6b:2b:a6:19:77:2d:74:16:95:c9:fb:14:3c:31:
         e3:e4:2c:bd:27:be:ad:21:43:be:c2:50:73:9e:b7:ff:96:70:
         45:7c:52:b0:e4:20:42:60:86:f9:3c:32:6e:7a:21:47:3b:83:
         4c:e8:01:12:14:6c:82:a9:c1:8e:95:95:3e:7c:cc:72:79:2f:
         e1:5f:bc:7b:bd:9e:f5:53:25:08:9a:8d:b5:07:35:79:61:b2:
         92:37:0a:07:d7:1f:51:f7:64:5b:96:28:b6:06:da:b6:f6:82:
         a3:e0:f2:9e:5b:00:67:ec:09:28:a7:4f:aa:39:a9:ba:b9:cf:
         8e:47:44:05:b3:ab:f6:10:bc:82:2b:2c:c8:9f:5d:ae:7c:60:
         5c:44:80:3e:bb:64:b0:78:d7:42:7b:1d:fc:d0:a6:2c:2f:67:
         22:f8:5e:21:9c:07:d6:4a:89:aa:d1:37:f9:65:e0:4e:21:d5:
         48:49:8e:15:9e:e5:28:8f:2e:b8:6a:10:37:16:74:9b:32:d9:
         f0:e7:5e:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org