Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7qPqkycp2uvwHjACzZZQDXGAGByQ6gV8L3EfHVmM1sYn/1/323830343a323834633a3a2f33322d3336203d3e20323633393534.roa
File:                     323830343a323834633a3a2f33322d3336203d3e20323633393534.roa (raw, json)
Hash identifier:          Vsu5KxCCJa2Ka5if4OozkRoAhqOcbrswMOePg8u+RMU=
Subject key identifier:   63:89:BE:21:33:36:42:A1:D4:B7:71:06:6E:2B:C8:4C:20:56:81:01
Certificate issuer:       /CN=5A11A55CC203138D0E7EC83760D65DAA1AFAD9A7
Certificate serial:       1CFA995D7E962ACB48FFF99F4C5E819BCB2945D3
Authority key identifier: 5A:11:A5:5C:C2:03:13:8D:0E:7E:C8:37:60:D6:5D:AA:1A:FA:D9:A7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A11A55CC203138D0E7EC83760D65DAA1AFAD9A7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7qPqkycp2uvwHjACzZZQDXGAGByQ6gV8L3EfHVmM1sYn/1/323830343a323834633a3a2f33322d3336203d3e20323633393534.roa
Signing time:             Tue 21 Mar 2023 02:00:02 +0000
ROA not before:           Tue 21 Mar 2023 01:55:02 +0000
ROA not after:            Tue 19 Mar 2024 02:00:02 +0000
asID:                     263954
IP address blocks:        2804:284c::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1c:fa:99:5d:7e:96:2a:cb:48:ff:f9:9f:4c:5e:81:9b:cb:29:45:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=5A11A55CC203138D0E7EC83760D65DAA1AFAD9A7
        Validity
            Not Before: Mar 21 01:55:02 2023 GMT
            Not After : Mar 19 02:00:02 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:b5:db:57:a7:8c:be:d4:6f:c0:2c:46:3a:61:
                    e1:64:16:5d:1e:c1:71:7a:98:7d:3e:95:17:18:3c:
                    bd:c0:fd:68:81:e7:a1:8e:39:ca:53:15:de:9b:6d:
                    d3:5f:d4:e5:cf:28:09:bc:c7:09:cc:5a:11:0c:4e:
                    fd:ba:07:04:0b:99:b8:02:5e:8f:69:f7:3e:56:72:
                    c4:28:13:a6:61:ba:f7:9a:56:6b:03:ba:65:39:dc:
                    17:d8:1d:f0:7d:b9:97:ad:34:9f:82:c9:ac:cf:94:
                    ad:01:ff:83:cc:82:9a:74:35:2c:fd:8b:eb:48:de:
                    1c:8e:cb:3f:bc:e0:85:5f:0f:c8:9e:74:1b:46:20:
                    ff:c5:6e:c6:d0:89:72:7b:40:9d:c8:33:7c:55:e5:
                    86:b5:c6:2f:2e:23:8a:41:fc:a7:c7:6a:84:49:06:
                    25:d6:d5:4d:ca:11:8d:e5:13:eb:d4:54:54:4e:27:
                    75:f9:08:19:c7:cb:0c:8f:41:d6:8f:3d:c5:de:63:
                    7b:ea:61:6b:05:61:cc:1e:f4:a5:51:43:41:81:46:
                    56:ca:03:5c:a8:9d:0b:6f:f2:21:ea:f3:d6:12:ad:
                    49:d8:02:9f:71:65:59:8b:5d:52:ef:6a:07:7b:28:
                    98:63:ba:29:bf:b8:ae:4e:aa:d0:43:4e:7f:0b:d7:
                    1e:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:89:BE:21:33:36:42:A1:D4:B7:71:06:6E:2B:C8:4C:20:56:81:01
            X509v3 Authority Key Identifier:
                keyid:5A:11:A5:5C:C2:03:13:8D:0E:7E:C8:37:60:D6:5D:AA:1A:FA:D9:A7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7qPqkycp2uvwHjACzZZQDXGAGByQ6gV8L3EfHVmM1sYn/1/5A11A55CC203138D0E7EC83760D65DAA1AFAD9A7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/5A11A55CC203138D0E7EC83760D65DAA1AFAD9A7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7qPqkycp2uvwHjACzZZQDXGAGByQ6gV8L3EfHVmM1sYn/1/323830343a323834633a3a2f33322d3336203d3e20323633393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:284c::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:09:1a:10:f0:87:01:d6:05:80:55:a7:7a:ea:9d:20:0f:bd:
         e7:f8:67:ab:86:52:5c:89:c2:5b:cb:65:92:df:2c:18:ed:87:
         58:d3:9b:75:c6:f7:2e:ab:e0:c6:25:7d:62:ce:2a:c3:3a:ef:
         dc:e1:70:ee:b1:f4:33:ab:89:40:a1:de:f7:00:78:ea:95:2b:
         49:49:c2:88:ce:e5:b5:06:4b:a1:5e:ec:9c:5b:bb:cb:87:01:
         5c:3a:55:81:ad:45:92:f0:b0:d6:95:87:1a:58:44:0e:2d:42:
         17:64:a7:de:de:9d:45:c3:d1:71:e2:0b:f5:97:6e:bc:fc:5a:
         2e:43:e2:12:38:a3:e2:6c:8e:82:74:46:68:a5:70:45:22:01:
         07:a7:9a:d4:16:06:07:53:c5:62:e5:9b:c1:72:b7:43:f9:a4:
         da:44:71:cb:26:04:f1:74:f3:0e:ec:3f:49:39:bb:0c:38:28:
         4f:9c:94:72:c5:f3:ab:d4:f4:78:c1:f6:43:3e:46:bf:b9:5f:
         4c:3e:62:8b:7b:ca:de:4d:7b:a8:d5:03:fe:e2:81:ed:02:cc:
         49:7d:dc:2a:ad:7b:74:db:74:88:52:a8:7d:7b:06:ac:67:29:
         d7:b9:0e:19:42:81:dd:29:7d:2b:ee:66:44:b7:13:5f:b6:f7:
         3a:71:1a:fe
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:43 2024 by rpki-client on console-ams.rpki-client.org