Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a383030303a3a2f33342d3334203d3e20323633363034.roa
File:                     323830343a6663633a383030303a3a2f33342d3334203d3e20323633363034.roa (raw, json)
Hash identifier:          fE5k3VEIN7H1MH65nywwZ2oZpZs2Q9TqvdGQzyIsdEA=
Subject key identifier:   BC:CF:97:72:5E:5D:DC:AA:18:61:54:BC:2F:98:A7:AB:6D:14:AE:B7
Certificate issuer:       /CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
Certificate serial:       42C428597065BB0ED9BFF023635250361592B684
Authority key identifier: 11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a383030303a3a2f33342d3334203d3e20323633363034.roa
Signing time:             Thu 21 Sep 2023 13:36:54 +0000
ROA not before:           Thu 21 Sep 2023 13:31:54 +0000
ROA not after:            Thu 19 Sep 2024 13:36:54 +0000
asID:                     263604
IP address blocks:        2804:fcc:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:c4:28:59:70:65:bb:0e:d9:bf:f0:23:63:52:50:36:15:92:b6:84
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11C498AC8321997BA4C8E8FDE6C86AB8C07045BB
        Validity
            Not Before: Sep 21 13:31:54 2023 GMT
            Not After : Sep 19 13:36:54 2024 GMT
        Subject: CN=BCCF97725E5DDCAA186154BC2F98A7AB6D14AEB7
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:2d:34:30:ea:ad:59:3f:86:2c:09:20:b2:c8:
                    95:ff:8c:c6:1f:4c:42:1c:35:78:a8:e3:dd:7a:23:
                    02:f5:fa:5a:14:53:5a:1e:f6:32:71:2d:ea:d1:6b:
                    3b:a4:ea:9e:c5:61:4d:ee:28:a5:24:fe:38:7f:b0:
                    cc:25:fa:fc:cf:e5:8c:7b:26:63:72:ec:3f:e5:41:
                    ec:39:c8:bc:84:ac:f8:5f:ea:1d:77:4e:11:ee:92:
                    d6:87:39:57:71:0a:0b:9d:2b:c8:b2:0d:3f:bf:c6:
                    11:5d:07:a4:b8:5d:3c:a7:8b:a8:d8:79:f7:0d:ec:
                    49:39:9e:91:4e:d3:0e:ba:92:d1:a9:e9:25:9c:b5:
                    35:fa:d3:9c:3d:d0:ef:78:d0:1e:56:69:fd:41:65:
                    8d:49:8e:c8:18:ca:51:a4:91:0b:f9:16:89:aa:44:
                    83:20:d3:84:98:e1:06:91:bc:f7:cf:fe:0d:09:44:
                    95:6d:04:27:14:a5:ee:a8:fe:d3:87:a3:c3:56:5c:
                    ba:c4:09:0f:ff:0b:e5:ec:6b:70:3c:15:c9:db:13:
                    89:ff:a0:87:fe:93:27:84:0d:3c:1f:3c:a4:8e:27:
                    4e:ef:a4:51:ea:0c:3f:36:ce:ad:46:7f:99:f1:35:
                    83:5c:8f:38:f0:db:58:c1:af:66:1b:fb:62:44:1c:
                    82:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BC:CF:97:72:5E:5D:DC:AA:18:61:54:BC:2F:98:A7:AB:6D:14:AE:B7
            X509v3 Authority Key Identifier:
                keyid:11:C4:98:AC:83:21:99:7B:A4:C8:E8:FD:E6:C8:6A:B8:C0:70:45:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11C498AC8321997BA4C8E8FDE6C86AB8C07045BB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5LrejS5jBuavbF5rEWzo2RaMFua58XSiVueernNU8qgo/0/323830343a6663633a383030303a3a2f33342d3334203d3e20323633363034.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fcc:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         5f:1c:d5:70:87:79:36:48:3a:4a:93:8d:c6:c4:1f:d2:22:87:
         37:0b:40:17:6e:52:9d:01:69:f1:e2:a7:a7:90:06:34:38:ba:
         73:a5:d5:f4:4e:22:93:91:d1:3a:34:4a:85:58:5e:63:63:06:
         46:1b:ef:d3:f2:c5:cc:a6:de:ad:ff:80:18:7d:26:53:ec:f7:
         0a:7b:b6:a7:19:3b:8e:40:c1:bc:a3:db:3d:45:d6:05:bf:6a:
         0a:d4:12:33:52:52:3e:a9:7a:94:66:76:4f:58:95:e5:f4:39:
         d6:d5:2c:66:da:95:7b:e6:35:e4:b5:c1:9d:a9:07:d5:e3:ce:
         5d:36:57:34:b6:bc:f9:b4:3d:65:c3:d3:da:c5:11:55:d4:35:
         0c:fb:82:98:30:d7:b1:dc:56:72:98:9a:ef:4a:76:f1:05:d0:
         ea:2d:77:4a:27:82:86:31:54:3d:34:41:3c:6a:fb:02:05:ad:
         4b:d4:40:2d:a2:c4:bf:17:6e:13:66:2a:ee:f1:d7:1b:65:a3:
         1f:6d:81:f9:6b:ac:70:1c:0f:e2:c0:46:18:53:be:c7:0f:c5:
         97:66:55:0d:37:98:11:3c:a2:9d:45:90:6b:c6:cd:6f:2e:2c:
         d3:e5:fd:19:59:81:0d:2b:bd:74:e1:1a:1e:89:54:97:0c:c2:
         ad:7a:80:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:39 2024 by rpki-client on console-fra.rpki-client.org