Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/323830343a333031343a3a2f33322d3332203d3e20323634393239.roa
File:                     323830343a333031343a3a2f33322d3332203d3e20323634393239.roa (raw, json)
Hash identifier:          CSJpCZgsIuIj/LFN1bps8wrIzQEjRf/uoTw6LDYRH2o=
Subject key identifier:   84:5B:F0:05:78:8C:1D:1D:8A:20:BE:A9:B6:2A:A9:66:10:94:94:51
Certificate issuer:       /CN=CB3B7616863B2F05AD85E6493F4FEA0906E4A07A
Certificate serial:       1A0B73F4E5C0173E0948966276982C9E4AD67BEC
Authority key identifier: CB:3B:76:16:86:3B:2F:05:AD:85:E6:49:3F:4F:EA:09:06:E4:A0:7A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/323830343a333031343a3a2f33322d3332203d3e20323634393239.roa
Signing time:             Fri 13 Oct 2023 04:05:15 +0000
ROA not before:           Fri 13 Oct 2023 04:00:15 +0000
ROA not after:            Fri 11 Oct 2024 04:05:15 +0000
asID:                     264929
IP address blocks:        2804:3014::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:0b:73:f4:e5:c0:17:3e:09:48:96:62:76:98:2c:9e:4a:d6:7b:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=CB3B7616863B2F05AD85E6493F4FEA0906E4A07A
        Validity
            Not Before: Oct 13 04:00:15 2023 GMT
            Not After : Oct 11 04:05:15 2024 GMT
        Subject: CN=845BF005788C1D1D8A20BEA9B62AA96610949451
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:65:44:0d:d3:02:70:c4:92:56:f3:8b:23:ed:
                    3f:02:1b:c4:85:c3:ef:b9:02:0f:f4:8d:28:b1:7d:
                    f3:3a:c1:cf:57:27:39:63:da:d9:64:fb:ff:84:7d:
                    67:2a:6a:d1:ee:a8:0e:a9:51:6e:f7:ae:80:2b:0d:
                    67:fd:e1:d0:f4:82:67:a0:ff:5c:7f:62:cb:e2:e8:
                    bf:bd:a3:14:89:a9:23:4d:b9:51:f5:15:34:87:40:
                    24:51:5e:d7:51:18:66:d2:8d:81:59:09:84:36:12:
                    46:b2:3e:49:a6:ab:f9:12:05:4a:4d:b0:e9:fa:d9:
                    48:e6:7c:95:12:53:de:47:6c:27:24:8c:5e:1e:0f:
                    ab:32:67:f7:63:2d:4c:ce:fb:9a:5f:22:af:64:c1:
                    c3:1b:0b:1b:78:72:a8:30:0f:57:37:16:eb:65:cf:
                    50:38:c1:9c:47:e3:0f:b2:b9:2b:d8:cf:6f:f4:2f:
                    05:6e:b7:68:25:ca:d8:59:1d:da:5d:d0:04:38:95:
                    fc:c8:0f:2e:ac:6f:2a:46:28:21:04:e4:64:90:8b:
                    fd:51:8d:19:49:7f:d5:14:fe:12:98:d7:93:10:fe:
                    df:66:76:9a:f7:00:3e:38:a2:67:17:ed:76:cb:64:
                    f8:4c:9b:2a:ee:05:e4:1e:60:ba:78:15:de:99:b9:
                    8c:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:5B:F0:05:78:8C:1D:1D:8A:20:BE:A9:B6:2A:A9:66:10:94:94:51
            X509v3 Authority Key Identifier:
                keyid:CB:3B:76:16:86:3B:2F:05:AD:85:E6:49:3F:4F:EA:09:06:E4:A0:7A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/CB3B7616863B2F05AD85E6493F4FEA0906E4A07A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/79N9KPPgS43ARULBCja3ZF6roFAze7ESt5u4kxgtP2mi/0/323830343a333031343a3a2f33322d3332203d3e20323634393239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3014::/32

    Signature Algorithm: sha256WithRSAEncryption
         43:4b:71:8f:85:8a:20:3c:54:8c:2b:fa:cf:eb:e5:1e:99:9d:
         f9:63:70:98:28:49:d7:15:9e:fe:c9:c0:40:58:88:5a:5f:41:
         70:08:2e:d2:4d:24:92:69:ec:3b:56:bb:80:9a:cd:78:6b:01:
         4a:10:4e:9a:8e:09:44:e5:8b:ca:da:dc:eb:2a:01:e9:eb:83:
         f8:22:67:51:55:31:69:da:74:13:03:3f:82:d5:a9:63:03:71:
         6e:ac:e6:e4:99:b5:4e:f2:8b:1f:77:5b:12:fa:34:b4:d1:e5:
         bf:71:e2:c3:f8:fd:63:af:c3:a6:14:de:dd:46:8f:c2:87:0e:
         42:41:f2:ba:1b:cc:97:31:3a:56:af:3b:e1:b0:69:6a:ae:34:
         9b:5f:04:ee:c2:a7:9d:13:7e:da:96:35:2a:dc:47:f5:ab:fd:
         b1:04:fd:1b:85:43:ba:ff:22:15:f9:eb:57:ab:a9:9a:50:e5:
         a2:1d:67:d8:51:3b:eb:f6:8f:a7:2a:6d:24:fa:cc:ff:de:8e:
         59:98:86:06:96:0b:89:c1:cc:de:e5:db:38:bc:cb:f9:2f:cd:
         c0:a1:37:41:da:be:6d:46:be:2d:5a:78:33:49:d2:8f:56:f4:
         da:7e:76:b4:1a:58:f7:82:5e:4c:20:89:b4:16:38:b9:4a:72:
         a1:70:14:22
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:52 2024 by rpki-client on console-fra.rpki-client.org