Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37613a3a2f34382d3438203d3e20323632373133.roa
File:                     323830343a3634303a37613a3a2f34382d3438203d3e20323632373133.roa (raw, json)
Hash identifier:          qgsqlqc0QvxtRMquNTqz8AKvuPHN9FhC6YDXC/YClmI=
Subject key identifier:   C6:C9:DB:C1:39:3C:07:BB:39:E6:DA:FB:4C:6C:47:4F:9D:ED:61:ED
Certificate issuer:       /CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
Certificate serial:       45346585BBA361B9DD6A3C71AA15BB7E8340F7E8
Authority key identifier: 3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37613a3a2f34382d3438203d3e20323632373133.roa
Signing time:             Wed 03 Apr 2024 18:30:46 +0000
ROA not before:           Wed 03 Apr 2024 18:25:46 +0000
ROA not after:            Wed 02 Apr 2025 18:30:46 +0000
asID:                     262713
IP address blocks:        2804:640:7a::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            45:34:65:85:bb:a3:61:b9:dd:6a:3c:71:aa:15:bb:7e:83:40:f7:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3F30CA98091DA86B3E6D18FD207F1FB658852463
        Validity
            Not Before: Apr  3 18:25:46 2024 GMT
            Not After : Apr  2 18:30:46 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:18:a2:f6:41:d2:a2:a6:d5:f2:a9:62:bf:98:
                    6c:10:25:d6:6a:e7:ec:6f:dd:94:72:81:61:15:14:
                    d6:12:ce:2a:4f:d7:2a:36:c6:89:ae:94:9f:51:20:
                    1a:e5:e5:d6:81:48:46:48:f1:15:b9:67:5e:a1:ba:
                    39:f9:67:ea:1e:1e:ad:1a:48:90:09:06:58:96:be:
                    83:13:49:79:96:99:18:26:e9:89:92:dc:cc:51:72:
                    ef:50:92:4f:9a:de:21:57:fa:ca:ee:c9:5a:e3:c0:
                    07:ae:b7:a6:c7:1d:3e:76:8a:07:bc:cb:d5:eb:f7:
                    59:61:87:6e:ad:8c:66:08:0c:69:93:85:8e:74:0c:
                    bc:4e:ba:8c:8c:fa:e4:16:19:78:0b:02:e2:2d:81:
                    71:fd:07:9f:37:59:01:a4:4d:46:ce:2d:03:91:e4:
                    b2:9d:18:cf:21:29:dc:0c:b3:b6:65:76:60:de:7e:
                    80:1f:1a:1f:e6:6f:1f:3e:24:d0:cd:1b:df:a9:77:
                    0b:ce:1c:6b:ce:ca:11:30:0e:87:69:06:19:9c:9b:
                    f3:82:52:71:b1:ea:ec:9a:98:d1:c5:58:2a:3c:d5:
                    90:c8:5a:bd:0c:f5:1c:34:6f:f2:03:46:b6:f1:19:
                    2f:8a:0d:50:49:54:e5:8b:11:83:49:d7:b3:f1:f8:
                    da:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C6:C9:DB:C1:39:3C:07:BB:39:E6:DA:FB:4C:6C:47:4F:9D:ED:61:ED
            X509v3 Authority Key Identifier:
                keyid:3F:30:CA:98:09:1D:A8:6B:3E:6D:18:FD:20:7F:1F:B6:58:85:24:63

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/3F30CA98091DA86B3E6D18FD207F1FB658852463.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7N7iTT4qG54oraScte81ckVQY8qMawB2pF31X55E6X91/1/323830343a3634303a37613a3a2f34382d3438203d3e20323632373133.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:640:7a::/48

    Signature Algorithm: sha256WithRSAEncryption
         3d:97:21:1f:47:8f:8e:4d:3a:cc:c9:25:2b:33:c8:c5:7a:61:
         4d:11:95:d6:e5:4e:14:33:cb:1a:1f:0d:85:15:e9:1c:99:82:
         8c:6d:86:80:f5:34:5b:ba:04:6f:59:43:9d:49:02:de:c7:69:
         1a:b9:04:55:68:69:28:0a:c7:bd:db:3c:d3:22:35:77:43:92:
         39:f7:08:ef:62:88:53:5b:d7:e5:0c:b1:45:65:46:30:d0:54:
         42:08:66:62:f1:63:29:af:d3:b9:38:f1:bd:9f:98:b8:a8:38:
         53:70:07:86:d0:05:81:64:af:0b:5c:ad:92:d9:bf:7c:54:e6:
         69:90:68:a1:5d:18:4b:f5:67:d1:04:c5:5c:9b:9b:79:00:69:
         9a:d1:27:81:8b:47:4a:c5:02:c7:a1:9e:cd:c0:ea:1e:b4:3e:
         bf:22:0f:9c:c3:32:df:3b:56:7b:ab:30:40:e3:51:c0:54:50:
         f8:3a:4d:52:af:43:ec:93:08:41:47:f8:ce:f2:38:d0:59:8a:
         08:55:84:48:27:58:3c:23:d1:5d:af:f1:fa:f4:12:99:97:e5:
         4c:bb:7d:87:f7:3e:16:d6:69:75:39:4f:31:84:5e:13:38:61:
         7b:60:59:d2:1a:62:1c:48:85:0d:17:8a:71:74:28:90:27:0e:
         16:4a:79:30
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Aug 27 18:20:04 2024 by rpki-client on console-fra.rpki-client.org