Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a613030303a3a2f33352d3335203d3e20323633313436.roa
File:                     323830343a313737383a613030303a3a2f33352d3335203d3e20323633313436.roa (raw, json)
Hash identifier:          D8HsbZDVwIhM35bqInr+Dw/IWFsni+d2sMnSmeXxnx4=
Subject key identifier:   0F:3B:38:68:21:17:85:7F:1F:06:52:40:43:11:00:20:7C:E2:92:0A
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       28202F7255E29014D8EC4647EC573CF9FCAD0EB5
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a613030303a3a2f33352d3335203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:46 +0000
ROA not before:           Tue 27 Feb 2024 17:25:46 +0000
ROA not after:            Tue 25 Feb 2025 17:30:46 +0000
asID:                     263146
IP address blocks:        2804:1778:a000::/35 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            28:20:2f:72:55:e2:90:14:d8:ec:46:47:ec:57:3c:f9:fc:ad:0e:b5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:46 2024 GMT
            Not After : Feb 25 17:30:46 2025 GMT
        Subject: CN=0F3B38682117857F1F065240431100207CE2920A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:21:ec:8a:3a:be:bc:94:75:2a:cf:60:eb:33:
                    64:be:01:bb:3c:cc:f6:70:13:73:4c:2b:c7:f1:a9:
                    ec:2b:5d:f5:f1:50:b4:9e:5b:b3:de:0b:75:2a:8c:
                    d6:8e:50:45:8e:3c:ed:fa:8b:11:8e:13:c5:c1:4e:
                    51:2b:91:6c:6c:c3:93:2f:74:27:c8:9f:83:c9:95:
                    43:19:c7:e5:d2:37:29:86:44:ca:6b:d7:89:d0:60:
                    b2:61:a5:6d:40:9e:20:08:8a:e0:25:be:22:cb:db:
                    26:0b:f3:0f:96:56:39:50:43:8a:62:8f:7b:65:63:
                    97:f0:61:7e:db:2d:f1:eb:14:c7:37:c2:63:ca:a2:
                    68:d2:cc:6c:38:a6:22:c1:59:99:d5:b0:74:d0:40:
                    b3:36:56:34:35:5f:91:2c:3a:b8:6c:86:f3:1e:60:
                    88:48:63:bb:e8:d8:8a:b6:86:e0:24:4d:b1:3b:ae:
                    32:d0:9b:68:fa:52:c3:a3:29:f7:1f:b2:ec:bf:b1:
                    c3:b8:0b:73:1b:4b:b5:f3:b4:a3:4d:7f:c7:db:b6:
                    d3:21:d3:e9:6c:44:c8:be:b4:fc:09:91:9d:77:61:
                    5d:a8:da:37:66:d6:81:7b:69:b9:7d:39:30:a6:6c:
                    e7:77:80:c5:e7:13:3c:da:aa:9c:df:62:83:21:66:
                    f2:b7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:3B:38:68:21:17:85:7F:1F:06:52:40:43:11:00:20:7C:E2:92:0A
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a613030303a3a2f33352d3335203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:a000::/35

    Signature Algorithm: sha256WithRSAEncryption
         98:7f:1b:b4:41:9d:58:01:a9:9e:57:df:93:2d:69:7d:51:03:
         5d:7c:61:cd:e9:58:ca:44:bb:0c:03:a3:57:0f:59:dc:46:a4:
         a9:cc:9f:43:3b:ea:c0:97:cc:f5:ba:72:c5:e3:28:2e:66:10:
         bf:2b:ce:c4:fe:79:8a:da:e6:1d:21:8d:f2:e5:60:c0:0f:ac:
         34:44:99:f4:d3:86:2c:f4:cb:5b:1d:41:eb:5c:1b:83:c8:61:
         fe:2f:69:c8:d8:39:9a:a0:ed:39:24:ce:f6:aa:18:66:81:b3:
         70:35:cf:d9:03:aa:1b:cc:67:41:4c:14:9c:23:ef:92:75:b0:
         1d:53:1e:99:a4:03:f9:e1:86:ab:66:46:26:96:ea:ad:7f:a2:
         f9:7a:ea:d3:ba:1b:6c:7d:0f:73:1b:e2:6a:f7:fd:7c:90:33:
         29:ca:5e:0d:9d:6a:9e:8f:79:34:8c:6a:3f:b5:65:9a:f9:f6:
         8b:e3:dc:78:bd:7a:55:ab:09:9e:a6:98:0c:58:9d:bb:17:cf:
         22:8d:b0:81:7b:92:93:b3:49:86:0e:fc:26:e8:0e:7f:b7:2c:
         d6:ec:74:6d:21:ad:f2:ee:ce:41:cc:6a:f0:e4:1b:2a:92:32:
         8c:42:d2:da:79:e4:e4:f2:52:f5:28:e2:ba:93:82:5f:e0:3e:
         8a:7a:2d:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org