Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a633030303a3a2f33342d3334203d3e20323633313436.roa
File:                     323830343a313737383a633030303a3a2f33342d3334203d3e20323633313436.roa (raw, json)
Hash identifier:          loVBjSy2TsAIk8QNgtw7BYoLxQj+PdAX5lDEVU/BAZE=
Subject key identifier:   9C:31:C6:30:90:6B:E6:C5:54:C4:E3:70:13:DD:37:F3:68:85:34:DB
Certificate issuer:       /CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
Certificate serial:       3921A2473C87AADEE3016398B20054AD717FBD8F
Authority key identifier: 42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a633030303a3a2f33342d3334203d3e20323633313436.roa
Signing time:             Tue 27 Feb 2024 17:30:41 +0000
ROA not before:           Tue 27 Feb 2024 17:25:41 +0000
ROA not after:            Tue 25 Feb 2025 17:30:41 +0000
asID:                     263146
IP address blocks:        2804:1778:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            39:21:a2:47:3c:87:aa:de:e3:01:63:98:b2:00:54:ad:71:7f:bd:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=42173031F4D425DF09DB731E4F7AC1011DE66F19
        Validity
            Not Before: Feb 27 17:25:41 2024 GMT
            Not After : Feb 25 17:30:41 2025 GMT
        Subject: CN=9C31C630906BE6C554C4E37013DD37F3688534DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b3:da:b5:b3:0d:3c:f6:35:57:ed:66:a2:27:99:
                    9a:f6:05:c2:a6:af:6c:df:e3:28:48:b7:f0:7a:34:
                    02:58:f7:a9:69:93:20:77:ae:16:9b:23:f6:f7:e2:
                    cd:43:b4:89:72:75:6a:96:cc:b5:5a:7d:7d:7f:e8:
                    5e:5f:12:17:03:31:ff:ba:17:8a:72:b6:e5:7d:91:
                    d7:0a:0b:b0:3b:38:b0:7b:09:2e:61:70:49:43:da:
                    ed:45:67:48:08:c6:88:f8:0b:c3:e2:74:06:ca:9c:
                    a0:98:cc:37:0f:40:71:37:3d:f3:fe:5f:9b:32:fe:
                    88:dd:ba:a6:41:31:19:a5:75:cd:55:09:aa:14:09:
                    c6:64:e7:a5:e6:8d:be:16:da:e5:6d:10:17:19:12:
                    84:59:2d:69:7a:ad:da:d7:fa:ee:74:c1:cf:71:46:
                    54:35:f2:40:5b:ca:49:89:18:e1:f1:36:fe:c3:d8:
                    73:8e:6f:b9:35:ac:06:47:f3:7c:db:a5:28:86:a4:
                    5f:e6:44:f5:05:df:67:c0:d2:f7:63:55:9f:d9:4a:
                    15:73:a8:46:5c:37:df:48:a6:5f:4f:56:17:08:1e:
                    8a:05:13:79:03:be:3b:02:17:9d:a3:8c:e0:2c:0b:
                    04:72:90:01:f0:a5:99:21:7b:e4:64:94:ea:44:6e:
                    d7:e7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9C:31:C6:30:90:6B:E6:C5:54:C4:E3:70:13:DD:37:F3:68:85:34:DB
            X509v3 Authority Key Identifier:
                keyid:42:17:30:31:F4:D4:25:DF:09:DB:73:1E:4F:7A:C1:01:1D:E6:6F:19

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/42173031F4D425DF09DB731E4F7AC1011DE66F19.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7NRdQNaDUbT7D1tgoSxRnhL91ZyK6ESWGKVGShnHxWgP/0/323830343a313737383a633030303a3a2f33342d3334203d3e20323633313436.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1778:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         33:74:31:17:44:92:5d:39:80:ee:5d:b3:b4:8f:d1:45:10:3c:
         24:01:a3:89:c0:d0:35:ee:23:70:93:75:03:5b:ae:0b:40:6c:
         1f:e0:96:f6:ec:64:48:5b:f6:2f:f5:cf:28:af:de:c5:d0:37:
         5b:4c:52:2d:a0:e6:a4:7c:af:95:e0:64:8f:f3:19:fe:75:b6:
         2c:c8:0b:24:ea:e8:db:52:18:f5:06:02:a1:b0:07:f4:9e:db:
         d2:a6:ef:ae:fb:7d:5a:e5:6b:0c:cd:00:4e:09:51:26:8b:70:
         8e:b0:50:1c:32:82:fe:ed:57:e1:92:96:33:19:35:97:5b:5c:
         f5:e5:a1:9c:e3:ec:80:9a:d6:b0:96:d8:53:6a:17:ac:95:79:
         13:82:bc:4c:70:fd:a3:2e:4c:9a:1a:14:5a:6c:1f:69:d8:20:
         a6:31:9d:73:ce:03:9c:b0:ce:30:bc:50:f4:70:36:2c:f4:9c:
         db:8a:6d:a6:74:bf:27:f0:6b:4f:f7:14:7b:73:9f:88:9a:64:
         ec:cd:3f:b9:b0:20:22:a3:70:e3:20:70:68:94:4f:65:f0:79:
         0c:8e:4a:da:d8:c1:da:bb:d1:f1:39:8b:6b:c6:58:c0:6c:05:
         9a:bb:c3:22:d1:c1:5d:5b:07:0e:75:0b:8c:a1:47:c3:3d:a7:
         3a:58:5e:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org