Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/323830343a353430303a3a2f33322d313238203d3e20323638363232.roa
File:                     323830343a353430303a3a2f33322d313238203d3e20323638363232.roa (raw, json)
Hash identifier:          +d2lIa5vUlb2hJrfIhgdPXCMGJiKCK+yeZpzk1dk41s=
Subject key identifier:   60:4D:A8:5D:68:A2:84:FA:07:0B:16:7A:89:6D:D1:BE:3B:51:18:8E
Certificate issuer:       /CN=4497D639152C45DECCF541D4FC925E73D6BCDFC1
Certificate serial:       52FA026173ECBC80FAF68618C5CCF3ABF99BCB86
Authority key identifier: 44:97:D6:39:15:2C:45:DE:CC:F5:41:D4:FC:92:5E:73:D6:BC:DF:C1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4497D639152C45DECCF541D4FC925E73D6BCDFC1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/323830343a353430303a3a2f33322d313238203d3e20323638363232.roa
Signing time:             Thu 01 Dec 2022 13:30:21 +0000
ROA not before:           Thu 01 Dec 2022 13:25:21 +0000
ROA not after:            Thu 30 Nov 2023 13:30:21 +0000
asID:                     268622
IP address blocks:        2804:5400::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            52:fa:02:61:73:ec:bc:80:fa:f6:86:18:c5:cc:f3:ab:f9:9b:cb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4497D639152C45DECCF541D4FC925E73D6BCDFC1
        Validity
            Not Before: Dec  1 13:25:21 2022 GMT
            Not After : Nov 30 13:30:21 2023 GMT
        Subject: CN=604DA85D68A284FA070B167A896DD1BE3B51188E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:df:97:be:c8:ae:fe:db:bb:7b:ba:10:8d:fe:
                    27:66:8e:9a:fd:26:9a:87:bf:97:97:59:d9:e9:1b:
                    d6:36:e8:9f:8b:c5:93:c0:6a:c7:7b:a2:8c:c7:44:
                    9d:56:c4:36:b9:ba:db:ba:3f:6e:be:04:ea:e7:73:
                    ab:55:a5:5e:76:71:96:ee:41:ef:57:cc:bf:74:35:
                    6b:2a:ca:d3:51:17:0b:16:e5:42:5b:e2:38:6a:f0:
                    bd:07:64:0f:e2:f3:23:57:5d:5a:58:9c:83:95:82:
                    4a:8c:d6:30:5f:26:4a:ef:d0:0b:2d:ca:40:e7:b7:
                    c9:c1:79:09:c6:36:29:ef:5b:a0:10:4f:dd:c0:a0:
                    5e:1d:cd:a8:23:c0:e6:00:b6:bf:9e:52:fa:0a:18:
                    d5:38:70:43:87:d9:ef:a1:af:b3:90:cb:67:d3:e5:
                    cf:e0:60:ca:ca:37:d9:67:0d:00:8c:7d:7b:7d:30:
                    bb:ff:2a:de:0f:e6:ed:ea:6d:ab:43:43:65:ad:b6:
                    07:b8:68:59:76:e8:5a:ea:cb:4f:c0:f3:53:38:5b:
                    01:a7:db:c3:9b:20:ea:fa:57:7a:51:f1:29:59:c7:
                    2c:17:ae:ac:0a:f0:23:45:36:e1:0a:11:87:63:f8:
                    c1:40:30:d6:e6:ce:4e:34:30:f3:04:ad:b3:a7:47:
                    6f:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:4D:A8:5D:68:A2:84:FA:07:0B:16:7A:89:6D:D1:BE:3B:51:18:8E
            X509v3 Authority Key Identifier:
                keyid:44:97:D6:39:15:2C:45:DE:CC:F5:41:D4:FC:92:5E:73:D6:BC:DF:C1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/4497D639152C45DECCF541D4FC925E73D6BCDFC1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4497D639152C45DECCF541D4FC925E73D6BCDFC1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7e4qENJf8C3EVrY5RPXcMcJLhf2UbfJahyWdJHCTfWkq/0/323830343a353430303a3a2f33322d313238203d3e20323638363232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5400::/32

    Signature Algorithm: sha256WithRSAEncryption
         38:ad:86:d4:8b:d7:10:f3:9a:9a:4f:91:7a:36:89:38:25:1e:
         a8:6a:68:b3:03:c3:9c:43:33:ef:a5:51:65:91:e8:7d:90:9a:
         e8:a0:5e:43:2f:92:5f:81:82:e0:bd:1d:44:a9:b8:5c:f9:24:
         db:01:5b:b3:55:aa:e4:fd:94:40:9b:f5:bd:15:8e:67:98:12:
         0e:cf:65:75:2d:d2:8c:a3:af:96:15:47:38:d5:84:e8:a3:76:
         5e:dc:41:9d:94:f1:a0:35:65:88:d8:da:d6:de:3a:af:a2:f9:
         f9:e4:e6:af:b3:f9:22:b2:a0:a3:92:9b:9f:85:49:3e:4e:bf:
         79:e2:b8:75:a0:c2:f1:e4:77:68:b1:a9:c3:cc:fe:7d:5c:cf:
         15:2f:3b:54:d1:df:22:5d:9e:d1:2e:08:fb:e8:b9:d3:02:d2:
         22:1c:8b:86:25:78:1a:2a:d4:f0:fb:d2:6a:d6:e3:15:c3:d0:
         43:69:92:33:c8:b7:df:09:9f:50:6b:58:8c:b0:69:d8:2f:90:
         bd:04:bc:e9:aa:70:b5:99:0d:2a:4f:85:f9:b1:e4:b6:6f:43:
         b6:10:58:a7:6c:8a:d2:42:b5:4b:7b:8d:61:c9:2d:95:b0:83:
         a1:2e:6f:86:44:b7:0f:19:4f:cd:31:e1:6b:1b:9e:b6:9b:a5:
         ea:43:5b:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org