Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/323830343a376333383a3a2f33322d3334203d3e20323731343832.roa
File:                     323830343a376333383a3a2f33322d3334203d3e20323731343832.roa (raw, json)
Hash identifier:          kQ29vG7Qm8TneIw9ua9TVEk6Qp4VhsCkDCUEtFPAG4c=
Subject key identifier:   F3:1D:8C:0A:99:8F:8E:B3:0B:13:A6:41:6C:16:4F:69:9A:84:4C:38
Certificate issuer:       /CN=1CD8CB0C2BEA729394E1C5AEC876CBD18364B898
Certificate serial:       5C6765FBD5ABD6642B08A0BBB71C7AE600D3A3CD
Authority key identifier: 1C:D8:CB:0C:2B:EA:72:93:94:E1:C5:AE:C8:76:CB:D1:83:64:B8:98
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CD8CB0C2BEA729394E1C5AEC876CBD18364B898.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/323830343a376333383a3a2f33322d3334203d3e20323731343832.roa
Signing time:             Fri 29 Mar 2024 19:39:48 +0000
ROA not before:           Fri 29 Mar 2024 19:34:48 +0000
ROA not after:            Fri 28 Mar 2025 19:39:48 +0000
asID:                     271482
IP address blocks:        2804:7c38::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:67:65:fb:d5:ab:d6:64:2b:08:a0:bb:b7:1c:7a:e6:00:d3:a3:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1CD8CB0C2BEA729394E1C5AEC876CBD18364B898
        Validity
            Not Before: Mar 29 19:34:48 2024 GMT
            Not After : Mar 28 19:39:48 2025 GMT
        Subject: CN=F31D8C0A998F8EB30B13A6416C164F699A844C38
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:84:cf:f5:24:d4:02:0d:1b:36:b3:62:3d:61:
                    95:bb:9a:8a:44:d2:d8:14:6f:d3:00:af:ea:7a:12:
                    6c:13:b0:cf:87:0a:ec:d3:55:05:87:c0:25:c5:8e:
                    7d:16:0a:8f:23:ce:22:13:d5:8e:62:1f:dc:b2:30:
                    99:af:61:76:ac:fb:b7:c5:8b:cd:49:7f:54:b7:3d:
                    4a:71:ec:e6:ce:71:61:ad:8b:3b:fb:3f:bf:bd:6c:
                    0a:87:65:c9:68:d7:57:dd:88:16:db:30:cc:64:df:
                    af:f2:b7:12:bb:be:80:18:7a:31:41:1f:ac:71:10:
                    a7:17:5d:bb:8c:f7:d2:87:92:33:31:da:a1:fb:50:
                    f1:ce:44:a1:62:da:50:26:58:41:31:fb:5d:77:60:
                    2a:ae:40:61:16:bd:75:dd:5c:11:8f:fc:aa:91:21:
                    02:28:be:94:01:b2:82:81:a2:37:6e:c5:b3:a0:01:
                    4a:f3:5a:be:dd:12:57:c9:85:49:03:7a:c2:b4:64:
                    fa:02:2b:52:a7:af:39:68:b9:8f:2e:01:a1:b8:90:
                    cf:5a:bf:bc:09:50:da:7e:16:33:0a:e7:a3:3c:31:
                    61:99:b5:3a:52:6a:66:bb:8e:4c:7e:ed:8b:26:52:
                    31:8e:3c:6d:34:32:f2:15:90:e5:bd:d6:56:9c:c3:
                    b0:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:1D:8C:0A:99:8F:8E:B3:0B:13:A6:41:6C:16:4F:69:9A:84:4C:38
            X509v3 Authority Key Identifier:
                keyid:1C:D8:CB:0C:2B:EA:72:93:94:E1:C5:AE:C8:76:CB:D1:83:64:B8:98

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/1CD8CB0C2BEA729394E1C5AEC876CBD18364B898.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1CD8CB0C2BEA729394E1C5AEC876CBD18364B898.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8UjXThheEFAzxj81QqrweWeEXuVRrBcG4BmiCUygNeEj/0/323830343a376333383a3a2f33322d3334203d3e20323731343832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7c38::/32

    Signature Algorithm: sha256WithRSAEncryption
         b8:50:be:49:a8:9f:7f:e0:ff:e1:e9:dc:94:48:fb:e6:b1:d9:
         9d:d0:db:bf:e2:df:b4:0f:d5:0a:a1:48:db:7c:2e:44:dd:99:
         06:e6:57:80:7a:88:34:c5:86:95:d3:41:ab:e3:b2:4c:00:e7:
         3f:1f:19:af:0c:43:82:fc:19:60:a2:b9:a9:33:1e:01:07:92:
         ac:67:bf:30:c0:a5:78:31:f8:30:63:c1:7e:e0:dd:64:0c:f0:
         c2:ee:34:99:01:fd:f7:be:1a:9c:b3:34:ba:22:2e:57:8d:d7:
         f0:7e:65:27:c7:6f:d9:7a:a4:c2:d1:c4:37:56:c5:76:0d:05:
         6a:b9:af:04:a7:e9:b6:cc:67:15:84:55:b9:c7:9c:08:3e:0f:
         f7:5e:01:f9:3a:5c:ed:f7:2d:8d:61:ba:49:9f:e2:30:5d:95:
         db:ac:da:87:80:28:ae:c9:02:9c:3b:e9:63:72:32:e8:60:2b:
         9a:d3:fb:79:0d:a6:71:3e:91:81:4e:d0:d6:62:87:c6:4a:af:
         fc:a9:86:51:d2:59:4f:1c:51:4e:db:65:eb:5b:a0:be:26:d9:
         69:73:de:b3:9e:e8:4a:7a:55:e5:5d:ce:ea:e3:1e:ef:e3:cd:
         e5:f3:68:8d:61:88:46:d8:4e:dd:fc:6d:34:12:10:01:ff:66:
         9f:4b:5b:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org