Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/323830343a373265343a3a2f33322d3332203d3e20323730383832.roa
File:                     323830343a373265343a3a2f33322d3332203d3e20323730383832.roa (raw, json)
Hash identifier:          PDdda+DjP+qMizx0a8czoyvnSGEZCQNzYjkppC3LBFE=
Subject key identifier:   06:0F:42:6D:E6:DC:A2:A5:E5:11:28:41:39:38:57:DA:B5:4B:5B:C6
Certificate issuer:       /CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
Certificate serial:       1FB3EF4DCFA9C4AFE8A8E21705F7E42F16438043
Authority key identifier: E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/323830343a373265343a3a2f33322d3332203d3e20323730383832.roa
Signing time:             Mon 15 Apr 2024 11:56:32 +0000
ROA not before:           Mon 15 Apr 2024 11:51:32 +0000
ROA not after:            Mon 14 Apr 2025 11:56:32 +0000
asID:                     270882
IP address blocks:        2804:72e4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1f:b3:ef:4d:cf:a9:c4:af:e8:a8:e2:17:05:f7:e4:2f:16:43:80:43
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E3A3DABAD8DB57D603296A5C29D3D0FE0F517336
        Validity
            Not Before: Apr 15 11:51:32 2024 GMT
            Not After : Apr 14 11:56:32 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d5:96:ce:c5:d2:24:6f:a9:27:dc:2e:47:27:87:
                    2e:51:4e:58:13:3e:97:09:aa:34:80:c6:eb:ac:15:
                    91:5d:36:fd:26:22:f4:68:a8:d8:e0:df:47:f3:86:
                    58:01:c1:66:71:f9:17:f5:60:2d:c8:6b:03:15:ed:
                    2f:ee:01:c6:6c:f9:f7:75:21:8d:ee:f8:33:50:a1:
                    cb:e6:51:49:5c:54:08:25:79:59:48:d6:b7:52:58:
                    41:4b:25:f6:ae:0d:66:ff:4f:92:bd:df:8b:58:e9:
                    c9:78:a5:1a:e5:61:ed:e8:6f:31:5d:10:a7:4a:42:
                    54:79:df:f3:fe:0c:0a:6a:dd:75:11:dd:ae:a2:43:
                    b6:c7:56:39:d9:b5:fd:d6:0b:b2:8b:68:59:a6:81:
                    67:da:a3:89:88:78:f8:6e:de:6f:30:50:6f:f5:40:
                    64:0e:80:ac:e6:40:1c:2b:69:3f:ef:10:85:d8:43:
                    69:0e:dc:4e:ea:b7:60:a3:df:23:83:78:82:84:a5:
                    9a:78:79:26:1d:0e:96:7a:e9:36:a8:71:69:c4:ca:
                    03:e0:42:c5:53:52:07:52:67:17:54:c5:70:13:d9:
                    91:40:33:6f:6d:a3:f7:13:cb:5a:8d:db:6b:52:1a:
                    43:d7:2d:7c:6d:30:d0:b5:eb:fc:16:83:95:b4:90:
                    8e:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:0F:42:6D:E6:DC:A2:A5:E5:11:28:41:39:38:57:DA:B5:4B:5B:C6
            X509v3 Authority Key Identifier:
                keyid:E3:A3:DA:BA:D8:DB:57:D6:03:29:6A:5C:29:D3:D0:FE:0F:51:73:36

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E3A3DABAD8DB57D603296A5C29D3D0FE0F517336.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5njX5ZywSUYtRVTQyrkAPaCGkjkxTAa7jjPKQbU5GbfP/1/323830343a373265343a3a2f33322d3332203d3e20323730383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:72e4::/32

    Signature Algorithm: sha256WithRSAEncryption
         ad:fe:f9:09:c6:e8:0f:4e:54:24:a9:71:c9:0c:7c:d8:0a:1a:
         35:38:58:23:a9:0a:23:10:9a:1a:35:5c:0a:d3:3a:dd:d9:d3:
         96:46:7a:ed:32:fb:b3:1d:05:ce:16:0d:cb:75:b4:c4:a9:ca:
         62:64:5f:04:5b:51:d2:d9:90:53:72:ea:a4:32:41:3d:4d:36:
         c0:ab:35:fd:8a:c4:ae:d8:5b:dc:a1:88:f5:4d:c2:77:05:3c:
         3e:26:af:17:3f:59:a5:fb:83:74:a0:7b:a0:b7:ad:77:d6:1a:
         fb:78:74:dd:fc:57:5b:21:29:d0:f4:4a:2c:93:e2:86:60:2a:
         f5:c8:f7:0d:4d:80:73:32:b9:e2:10:32:2a:02:14:1c:6a:03:
         cd:03:16:c3:94:c3:6a:27:91:88:01:5e:c9:08:ee:f8:7d:c4:
         4b:f8:ed:b2:77:7d:18:20:cb:14:14:27:42:e4:43:83:c0:cb:
         c0:1f:d0:51:37:8a:c8:11:92:f7:ab:79:e9:0d:45:75:89:57:
         e8:84:af:7b:0e:cc:8c:b4:6e:3d:c4:d0:a5:f5:f9:68:cf:2c:
         f6:b0:fa:03:fa:26:5b:a1:2e:d5:5d:bb:3b:75:6d:83:ca:57:
         e6:e8:2d:ff:90:58:a2:2c:5e:e7:8e:a9:94:3b:c2:61:3e:35:
         85:db:ab:23
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:43 2024 by rpki-client on console-fra.rpki-client.org