Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/323830343a333833633a3a2f33322d313236203d3e203532363031.roa
File:                     323830343a333833633a3a2f33322d313236203d3e203532363031.roa (raw, json)
Hash identifier:          tO8czevXxD1HxXTFUD9puFLG0g7YugZEFuHKL1nP/mQ=
Subject key identifier:   F0:2D:D4:2A:74:46:A5:34:DF:A7:12:29:14:88:33:5E:6A:44:29:BA
Certificate issuer:       /CN=0B58E3D8ABC34BBB499F1606407B06623B69F3C9
Certificate serial:       62074856E7ECCB291A903DFFD96A158BD9C7EF1C
Authority key identifier: 0B:58:E3:D8:AB:C3:4B:BB:49:9F:16:06:40:7B:06:62:3B:69:F3:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E3D8ABC34BBB499F1606407B06623B69F3C9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/323830343a333833633a3a2f33322d313236203d3e203532363031.roa
Signing time:             Thu 04 Apr 2024 22:55:26 +0000
ROA not before:           Thu 04 Apr 2024 22:50:26 +0000
ROA not after:            Thu 03 Apr 2025 22:55:26 +0000
asID:                     52601
IP address blocks:        2804:383c::/32 maxlen: 126

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:07:48:56:e7:ec:cb:29:1a:90:3d:ff:d9:6a:15:8b:d9:c7:ef:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B58E3D8ABC34BBB499F1606407B06623B69F3C9
        Validity
            Not Before: Apr  4 22:50:26 2024 GMT
            Not After : Apr  3 22:55:26 2025 GMT
        Subject: CN=F02DD42A7446A534DFA712291488335E6A4429BA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:da:f8:a2:b4:7a:7a:1d:f8:b3:24:9e:f5:47:
                    94:87:67:68:c3:fa:f1:89:fc:ac:a5:f4:db:39:66:
                    87:c9:cc:08:37:04:bc:eb:92:b4:1a:e9:c5:64:b3:
                    8c:92:8c:fa:f1:e0:c9:5e:18:e1:99:91:1e:cc:85:
                    73:6a:b8:fe:fe:bb:9f:ea:ca:ca:61:2f:1a:e1:f6:
                    fe:cd:c1:86:2c:dd:0d:65:32:b3:3c:5d:8a:f9:d5:
                    76:af:7a:27:cc:44:0d:36:4d:48:08:8d:0c:8a:cd:
                    1e:07:37:96:09:a5:6b:e3:9c:4f:41:be:d7:d0:c3:
                    e6:09:77:32:f8:1d:4a:de:ca:37:71:02:98:4e:c1:
                    e5:99:2a:0f:60:e7:0e:40:ac:72:cb:1d:fc:8b:87:
                    29:0f:d5:e5:90:a4:4a:7b:38:09:f6:a5:d3:55:57:
                    e3:d8:62:b8:ca:75:ae:df:96:26:13:d7:66:33:4c:
                    53:30:99:24:6b:7b:9a:ca:d9:c2:55:22:c7:8d:df:
                    85:85:70:97:e0:8a:40:43:a9:7c:df:5c:db:4e:b8:
                    82:cd:0e:74:7c:de:00:d3:84:ba:aa:3b:48:4a:9b:
                    18:a0:60:bf:ab:15:96:50:d1:0e:fc:1f:fe:23:ea:
                    bb:fc:7e:1b:ad:d4:6f:b7:87:d6:d3:51:92:a6:a5:
                    bc:a5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F0:2D:D4:2A:74:46:A5:34:DF:A7:12:29:14:88:33:5E:6A:44:29:BA
            X509v3 Authority Key Identifier:
                keyid:0B:58:E3:D8:AB:C3:4B:BB:49:9F:16:06:40:7B:06:62:3B:69:F3:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/0B58E3D8ABC34BBB499F1606407B06623B69F3C9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/0B58E3D8ABC34BBB499F1606407B06623B69F3C9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/75rfH9oQLQzzsZQP2Qra5NxJNhkNycfC1NQgrZMSXBVh/2/323830343a333833633a3a2f33322d313236203d3e203532363031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:383c::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:2e:63:61:3f:19:94:57:37:e1:2d:0f:63:d2:ae:61:31:95:
         70:19:3a:46:81:ed:8e:d2:65:62:49:8b:3a:ef:93:cf:75:00:
         b9:2c:03:8d:a7:3f:28:bf:f0:2d:33:25:41:06:cc:ef:ee:50:
         f0:34:59:9a:e1:29:2a:8c:4e:07:11:99:57:d3:9f:75:3f:67:
         38:8b:eb:4a:2e:14:bd:08:45:d5:99:27:c4:b1:3f:3f:0c:a3:
         59:c1:d6:10:80:1a:75:7e:c0:97:15:ac:47:0e:53:20:58:24:
         66:b0:d8:9a:ae:d5:79:44:20:f3:1c:b5:b0:e4:5a:18:3b:90:
         f8:0a:1d:09:02:6a:24:69:0c:59:18:5a:17:8f:5a:4e:02:12:
         eb:11:27:e1:c0:db:d9:fd:62:23:44:1f:25:65:f3:47:08:d1:
         25:00:fd:40:c9:18:28:0a:8d:1d:34:54:2f:fa:7a:20:7e:52:
         dc:ea:43:cf:75:05:71:98:37:3c:64:c0:f8:45:21:d7:50:e1:
         57:6a:e9:f3:6f:c6:b9:7d:c5:ac:7e:e6:37:a7:b6:19:11:0a:
         dd:a5:c3:a4:d8:98:d5:09:50:01:bb:84:11:de:6d:5a:4c:8a:
         bb:2c:80:51:9b:a6:0a:2d:7a:8a:c5:8a:cb:43:d6:6c:92:73:
         b0:b4:61:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org