Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3634203d3e20323731313032.roa
File:                     323830343a373634633a3a2f33322d3634203d3e20323731313032.roa (raw, json)
Hash identifier:          2uMGkkaH+7UhWWQOvC7icJCH9nviysUQhsdpWWePD98=
Subject key identifier:   4A:9A:72:E1:CD:B5:93:58:98:FA:4A:43:52:F7:79:A5:95:7C:AF:AE
Certificate issuer:       /CN=4CA2099C40507994E0D22468C36B2991BEB4BC9F
Certificate serial:       724CFACD4A3499204FA6805535ABDC4560F3E5DF
Authority key identifier: 4C:A2:09:9C:40:50:79:94:E0:D2:24:68:C3:6B:29:91:BE:B4:BC:9F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA2099C40507994E0D22468C36B2991BEB4BC9F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3634203d3e20323731313032.roa
Signing time:             Sat 22 Jun 2024 10:01:08 +0000
ROA not before:           Sat 22 Jun 2024 09:56:08 +0000
ROA not after:            Sat 21 Jun 2025 10:01:08 +0000
asID:                     271102
IP address blocks:        2804:764c::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:4c:fa:cd:4a:34:99:20:4f:a6:80:55:35:ab:dc:45:60:f3:e5:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CA2099C40507994E0D22468C36B2991BEB4BC9F
        Validity
            Not Before: Jun 22 09:56:08 2024 GMT
            Not After : Jun 21 10:01:08 2025 GMT
        Subject: CN=4A9A72E1CDB5935898FA4A4352F779A5957CAFAE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:a6:60:50:70:1c:3e:55:98:5f:b6:07:c4:b6:
                    35:c8:da:0e:c2:46:2e:62:fe:4b:a5:ae:ee:1a:8c:
                    0d:ad:5a:85:85:3a:23:5f:74:cd:25:ac:d3:37:83:
                    26:8d:a4:f2:11:a7:1b:5f:35:be:a9:10:84:15:f8:
                    44:ee:08:9f:70:72:a5:a1:4e:57:70:d6:20:d4:09:
                    d3:7e:91:57:d4:59:2f:f0:e6:f8:7e:4f:31:a7:1a:
                    22:65:e0:49:f2:77:dd:4e:d6:e3:8c:fe:77:32:5f:
                    0a:66:8c:d2:7e:89:7b:da:40:a8:b4:f2:15:89:b6:
                    6e:75:a1:82:52:21:68:ea:74:c3:91:14:40:47:f2:
                    ba:69:56:62:7a:97:04:c1:fc:ab:66:f2:ce:98:4b:
                    b5:21:a5:f7:8a:0f:08:8f:eb:e5:71:2e:91:e7:87:
                    1d:64:c6:bb:6c:b6:16:02:22:74:87:6f:e2:24:96:
                    4e:25:5c:46:5b:0f:f2:17:f6:bf:3f:b4:ce:8f:00:
                    b0:c1:96:89:fe:f8:6e:4c:a2:3a:65:8f:8a:87:33:
                    d5:b3:58:74:0c:d1:9c:c3:7a:8f:38:a2:c0:82:06:
                    67:0f:a2:bc:20:41:92:21:2b:99:d5:1f:ec:1b:a2:
                    a6:cb:80:1b:78:3f:91:5d:db:00:56:17:2c:fd:cb:
                    2a:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4A:9A:72:E1:CD:B5:93:58:98:FA:4A:43:52:F7:79:A5:95:7C:AF:AE
            X509v3 Authority Key Identifier:
                keyid:4C:A2:09:9C:40:50:79:94:E0:D2:24:68:C3:6B:29:91:BE:B4:BC:9F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/4CA2099C40507994E0D22468C36B2991BEB4BC9F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4CA2099C40507994E0D22468C36B2991BEB4BC9F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7BhVYTTyNGkQ3Gd9CZP4FxfSwh2PDDyEBSwRZigHyrug/0/323830343a373634633a3a2f33322d3634203d3e20323731313032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:764c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:cf:9e:fb:66:ac:d6:2e:65:42:b8:0d:d1:5d:fb:a2:26:f4:
         f2:c9:17:39:6f:23:4a:7a:56:13:87:4f:56:23:0c:1a:e3:7d:
         41:91:41:4f:bb:77:09:2d:7a:80:72:29:58:32:ff:b6:eb:44:
         a1:24:c8:fb:4c:5a:f3:61:92:21:49:b3:c2:dd:a7:c8:d9:c7:
         97:08:e3:de:21:21:b0:e1:32:10:9b:ae:56:22:21:d3:2d:1c:
         7e:c6:b8:c7:d8:ff:24:13:27:1b:fe:c2:a4:32:26:24:14:7f:
         c8:c3:b7:7a:d7:ce:30:da:a8:ae:0a:84:bf:97:b5:95:a0:5e:
         94:e6:c6:56:ed:0a:a4:bb:38:53:68:86:b9:70:f3:0c:25:12:
         4b:68:48:d3:57:30:23:c5:b3:6e:35:fc:6c:b8:20:f4:c6:a4:
         52:2b:0c:ad:3d:32:fe:52:a8:e3:04:4b:f2:72:24:c0:00:48:
         b8:31:ff:9f:8b:09:54:4b:b2:25:ac:ef:ec:1a:ab:ad:bd:e1:
         48:cf:60:6c:6b:3e:06:52:54:21:f7:67:0b:65:fa:a8:77:b4:
         12:d2:29:ae:2a:ec:d6:8b:38:60:c6:fe:e0:ce:2a:cc:eb:de:
         dc:b2:64:40:75:67:f1:ae:4e:9b:d1:e7:82:fe:9d:12:d0:e6:
         2f:42:ef:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Aug 25 04:33:11 2024 by rpki-client on console-fra.rpki-client.org