Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/323830343a333438303a3a2f33322d3332203d3e20323635343632.roa
File:                     323830343a333438303a3a2f33322d3332203d3e20323635343632.roa (raw, json)
Hash identifier:          868AVyNBXFbHY3hP2xObvFDicgGBGMoIpKJjexPoy8M=
Subject key identifier:   1A:C5:5C:EB:5B:D3:1C:61:93:A9:6E:D1:89:62:D8:A7:B9:3B:C2:7B
Certificate issuer:       /CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
Certificate serial:       43EDFBBDA0D10478EBC82FDF71EE8917B0AAA79D
Authority key identifier: 1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/323830343a333438303a3a2f33322d3332203d3e20323635343632.roa
Signing time:             Mon 26 Jun 2023 13:08:06 +0000
ROA not before:           Mon 26 Jun 2023 13:03:06 +0000
ROA not after:            Mon 24 Jun 2024 13:08:06 +0000
asID:                     265462
IP address blocks:        2804:3480::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:ed:fb:bd:a0:d1:04:78:eb:c8:2f:df:71:ee:89:17:b0:aa:a7:9d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD78CF68D71E5E540716C9B42A8969E9BE28F22
        Validity
            Not Before: Jun 26 13:03:06 2023 GMT
            Not After : Jun 24 13:08:06 2024 GMT
        Subject: CN=1AC55CEB5BD31C6193A96ED18962D8A7B93BC27B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:85:a8:4a:43:25:11:a1:3d:24:72:1d:98:71:
                    c0:1b:06:cf:d8:65:14:b8:35:a6:f7:d7:34:be:eb:
                    af:52:50:97:7b:98:02:f4:0e:24:f9:fd:55:d5:f9:
                    c9:87:28:aa:4d:6a:32:02:e4:18:d2:41:39:ef:2f:
                    3d:98:52:5b:f3:bc:fd:72:a0:af:e1:4f:a3:8f:27:
                    61:30:bd:3c:9d:b9:d0:16:2c:31:a6:d7:c6:35:49:
                    09:72:4e:bd:5b:68:47:99:6f:44:eb:b9:fd:b1:9e:
                    fe:68:c9:62:49:54:72:b7:28:1f:9d:0d:a4:90:a6:
                    83:c6:ff:a6:09:3f:5b:5f:87:02:dd:34:a0:7d:85:
                    0a:2f:fe:dd:e8:03:29:12:f3:23:1f:1a:2b:03:ea:
                    03:48:d6:cd:45:db:e4:87:b7:70:08:69:32:1a:2c:
                    5b:4a:04:1a:29:c0:af:51:04:ef:b9:98:b2:d7:47:
                    e0:78:47:e0:c6:23:d2:03:d2:13:56:de:d9:d4:ec:
                    09:bf:54:6a:22:62:21:60:20:4c:75:f8:ed:62:58:
                    32:45:c4:e7:5c:ab:32:c3:a0:b7:21:14:c3:93:23:
                    da:88:0e:52:ce:6a:4e:87:ff:ab:92:13:a2:a4:55:
                    47:46:4b:15:c4:dc:7b:0b:8f:7c:49:04:67:71:1a:
                    15:fd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1A:C5:5C:EB:5B:D3:1C:61:93:A9:6E:D1:89:62:D8:A7:B9:3B:C2:7B
            X509v3 Authority Key Identifier:
                keyid:1B:D7:8C:F6:8D:71:E5:E5:40:71:6C:9B:42:A8:96:9E:9B:E2:8F:22

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BD78CF68D71E5E540716C9B42A8969E9BE28F22.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7XRnwhyWhQEXayRnmj846Aij2LYfJLhQaZUrc53rMDgb/0/323830343a333438303a3a2f33322d3332203d3e20323635343632.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3480::/32

    Signature Algorithm: sha256WithRSAEncryption
         3c:da:67:4f:8b:45:d3:99:a9:0e:d3:c2:bf:a2:2b:f3:27:14:
         df:60:1a:d1:6b:6c:bc:5f:45:95:2e:50:0f:2c:02:07:7c:01:
         ee:e7:52:5f:46:76:9c:d5:54:27:c4:13:8e:1c:79:17:6b:48:
         b4:56:85:f8:6d:c9:c8:c5:ae:75:6a:b2:0d:63:64:c2:f9:c1:
         43:49:6c:96:10:5e:51:39:97:e3:77:be:ab:36:f0:8a:32:d8:
         d6:b7:7f:51:29:a2:ce:4b:17:31:78:1e:30:b1:ea:ed:44:da:
         cc:99:20:41:17:61:34:9e:6e:48:c2:35:7f:7a:bb:88:b3:ba:
         3f:3d:e2:97:ce:e5:4f:3d:91:7b:3e:77:7b:d8:a7:7a:80:73:
         72:a1:42:e6:c3:bc:b7:9d:b2:87:43:bb:f9:21:d4:ac:01:02:
         0a:e7:62:9f:a6:fd:f5:40:ff:b5:ab:93:d6:a6:09:00:6d:ba:
         70:ad:95:42:d0:95:97:82:4e:e3:cb:77:22:15:cc:22:da:81:
         a7:80:1c:df:37:67:2b:a5:58:01:6b:44:d0:d7:78:7e:54:bd:
         cd:35:de:13:4f:30:31:e1:21:45:9d:eb:1b:57:ba:29:6c:e3:
         14:f2:4c:33:ab:1a:19:9e:dd:51:d7:58:e9:65:f4:6c:84:7e:
         63:ec:18:9b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org