Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33322d3438203d3e20323634303235.roa
File:                     323830343a323939633a3a2f33322d3438203d3e20323634303235.roa (raw, json)
Hash identifier:          Wlwo+gLtZ9/ZsfWbcPj96MTysdZCBof/Jgp4KyRhlOI=
Subject key identifier:   F5:C5:EC:9D:12:68:2B:AE:9A:C1:1A:1A:D5:71:CA:EE:65:BD:9B:21
Certificate issuer:       /CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
Certificate serial:       106C01D9A0CEBE7E05EF71661C9E62A4B7B97F62
Authority key identifier: 12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33322d3438203d3e20323634303235.roa
Signing time:             Tue 12 Mar 2024 16:30:20 +0000
ROA not before:           Tue 12 Mar 2024 16:25:20 +0000
ROA not after:            Tue 11 Mar 2025 16:30:20 +0000
asID:                     264025
IP address blocks:        2804:299c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:6c:01:d9:a0:ce:be:7e:05:ef:71:66:1c:9e:62:a4:b7:b9:7f:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=127CA2EA4F738F0137E50B22BAD957C5E6F5AA04
        Validity
            Not Before: Mar 12 16:25:20 2024 GMT
            Not After : Mar 11 16:30:20 2025 GMT
        Subject: CN=F5C5EC9D12682BAE9AC11A1AD571CAEE65BD9B21
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:01:1e:0b:c1:b5:2a:3d:de:76:6c:3d:81:c5:
                    c2:bc:f1:a3:c5:10:7d:2d:f5:dd:f2:51:ca:9f:50:
                    3b:96:dc:11:e9:9e:86:4e:90:12:d3:76:63:8e:75:
                    63:55:c0:c6:1c:e6:9d:f1:dc:9c:ae:eb:d2:89:3a:
                    5b:f6:d0:b6:67:f9:91:43:bb:e2:0b:23:98:eb:da:
                    dd:7f:d2:d9:63:23:d4:46:28:8b:5c:b8:ae:1f:72:
                    89:62:8e:97:72:f4:ee:ab:d4:8d:73:6c:dd:6d:e0:
                    33:c0:4d:63:db:5e:83:70:4a:e5:01:b4:21:70:2d:
                    ce:13:6b:a4:f0:11:23:84:30:3b:24:78:ca:c7:0e:
                    72:f6:66:1b:f4:60:55:41:3c:74:ae:a7:f5:c6:df:
                    88:82:dd:23:59:7c:a1:c3:59:14:88:a8:eb:c0:f6:
                    89:f3:92:f7:0d:3f:e1:b0:46:23:e9:08:ee:13:e2:
                    49:d9:a7:8c:c8:c3:71:2b:c9:e9:c2:15:31:89:a8:
                    e3:53:1c:6d:e0:ba:fa:84:eb:eb:a3:73:45:e3:6c:
                    06:09:a4:fa:31:85:72:55:19:db:35:39:7d:6c:d7:
                    6d:55:ba:07:87:cd:10:2c:1c:66:66:cc:25:bc:4d:
                    2a:40:a4:57:f0:c6:2c:fa:66:62:50:e2:ca:a0:39:
                    27:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F5:C5:EC:9D:12:68:2B:AE:9A:C1:1A:1A:D5:71:CA:EE:65:BD:9B:21
            X509v3 Authority Key Identifier:
                keyid:12:7C:A2:EA:4F:73:8F:01:37:E5:0B:22:BA:D9:57:C5:E6:F5:AA:04

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/127CA2EA4F738F0137E50B22BAD957C5E6F5AA04.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8kKmpLr1dYB2dag54xkUMr3nxvCgzR5RDNCCUjwAWVox/0/323830343a323939633a3a2f33322d3438203d3e20323634303235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:299c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6f:10:4a:7e:9a:75:d6:dc:d4:34:6a:1e:ea:40:b4:8b:34:2a:
         72:ee:7d:4d:79:e1:5d:ee:a7:44:eb:c8:19:33:ae:11:80:61:
         12:7e:f8:7a:ef:b7:75:e9:4d:98:de:50:42:4b:bc:ab:a6:91:
         2d:a3:05:fd:d6:1f:68:51:5a:3d:4e:a5:3e:f6:69:99:f8:30:
         05:eb:24:dd:11:d7:b4:69:00:3b:c2:6c:0f:ea:90:2f:f5:7f:
         1e:9f:0d:9f:ab:7e:99:ce:6f:38:3a:cb:16:22:45:aa:93:39:
         ae:4b:6e:23:84:41:70:5c:12:c0:7e:c0:ba:bd:8e:73:14:5b:
         f2:9c:e7:bb:ba:87:40:7d:ba:73:58:e2:69:2e:84:ce:72:b9:
         b2:a3:94:c2:ed:05:74:3a:eb:47:24:b8:3b:00:1d:7c:27:89:
         0c:a3:f1:04:fe:4a:f8:2d:87:2f:a7:6f:40:62:bc:fe:37:aa:
         34:01:d1:ac:f6:40:39:70:83:f7:f1:0f:fe:c3:ba:8e:fa:2f:
         f4:ef:1b:e6:4c:7c:27:1e:8b:cd:a4:c8:ce:1d:95:20:8e:0b:
         47:16:26:9c:62:c5:d5:2b:c4:3b:f3:51:5e:1f:7f:c9:27:2c:
         08:81:15:38:4c:f6:f3:bb:5a:2a:0a:2b:17:6e:a5:30:1b:66:
         f5:b5:23:89
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:02 2024 by rpki-client on console-fra.rpki-client.org