Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/323830343a346631383a3a2f33362d3336203d3e20323638333033.roa
File:                     323830343a346631383a3a2f33362d3336203d3e20323638333033.roa (raw, json)
Hash identifier:          aifKi6M22q/hZK/8eMU+2/VGquU/jaZ5ps5+L2WPC3k=
Subject key identifier:   15:52:7F:AB:C5:86:7C:7E:2D:F9:93:8C:DF:B0:A6:91:AE:C8:49:51
Certificate issuer:       /CN=130888861C156DEDFFE5F171F7DBBCF43993D81C
Certificate serial:       42F9DED3E3E3C612D74E23F6B1259EFD523ABF8D
Authority key identifier: 13:08:88:86:1C:15:6D:ED:FF:E5:F1:71:F7:DB:BC:F4:39:93:D8:1C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/323830343a346631383a3a2f33362d3336203d3e20323638333033.roa
Signing time:             Wed 03 Apr 2024 18:30:51 +0000
ROA not before:           Wed 03 Apr 2024 18:25:51 +0000
ROA not after:            Wed 02 Apr 2025 18:30:51 +0000
asID:                     268303
IP address blocks:        2804:4f18::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            42:f9:de:d3:e3:e3:c6:12:d7:4e:23:f6:b1:25:9e:fd:52:3a:bf:8d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=130888861C156DEDFFE5F171F7DBBCF43993D81C
        Validity
            Not Before: Apr  3 18:25:51 2024 GMT
            Not After : Apr  2 18:30:51 2025 GMT
        Subject: CN=15527FABC5867C7E2DF9938CDFB0A691AEC84951
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:f4:8e:19:5b:d2:da:26:f6:8d:df:fa:67:fc:
                    ce:eb:06:7e:aa:9f:93:bc:46:d9:14:67:7f:1d:fb:
                    60:f7:fe:66:a4:80:e7:4a:cb:e7:f2:66:a1:14:da:
                    72:a3:4c:18:be:2c:06:3e:c2:e5:e9:40:04:ed:67:
                    7c:59:54:0c:94:f2:87:f7:fe:12:05:c3:08:55:ee:
                    10:68:5e:1d:b0:7c:9e:cc:4b:dc:72:90:75:e0:c5:
                    06:94:fb:d8:76:aa:c0:74:09:2f:0c:3e:4b:60:82:
                    5c:f6:78:eb:27:30:bb:cc:bb:4d:ad:fb:4c:db:de:
                    04:87:3c:00:09:3d:b1:7a:9a:e9:72:ab:d9:c3:92:
                    04:c3:45:16:7a:62:6f:2a:04:2b:82:a4:c0:04:bc:
                    9a:64:42:5a:72:de:1f:38:d4:18:6e:88:8e:43:ff:
                    fb:6e:7c:b9:c0:e9:f6:91:d5:77:b2:9f:83:5b:8f:
                    d4:1c:6f:ad:c9:d5:8d:92:13:e4:d4:e3:41:3d:c1:
                    3a:dc:13:2a:85:a8:3c:ec:55:6d:de:6e:bc:fd:41:
                    fe:20:c3:22:73:6a:92:d5:ff:92:48:40:48:ae:80:
                    b3:14:57:7e:72:83:07:7d:3e:2a:03:12:34:ba:ff:
                    52:97:c0:0c:2b:07:5f:32:d3:32:7d:2b:2c:06:72:
                    70:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:52:7F:AB:C5:86:7C:7E:2D:F9:93:8C:DF:B0:A6:91:AE:C8:49:51
            X509v3 Authority Key Identifier:
                keyid:13:08:88:86:1C:15:6D:ED:FF:E5:F1:71:F7:DB:BC:F4:39:93:D8:1C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/130888861C156DEDFFE5F171F7DBBCF43993D81C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HG5NehSAWQykSCsftLzjhGecn1mwk1BjkuEJrjZgPkb/1/323830343a346631383a3a2f33362d3336203d3e20323638333033.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4f18::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:a1:eb:5b:43:cf:18:07:74:fc:e5:ae:9d:43:5c:7d:c5:c3:
         0c:b6:40:3c:10:4c:4b:ad:56:e6:5d:6e:91:63:a0:62:ec:ff:
         47:d7:db:a4:24:74:dd:d0:2e:8a:35:75:45:28:1b:aa:d1:ef:
         77:4f:5f:c8:a2:b1:48:71:3f:df:69:b6:b9:b2:e2:72:a8:1a:
         34:72:4b:34:c7:d1:77:ef:1c:a6:cf:ee:13:1f:e7:a5:ae:35:
         76:43:1c:83:35:80:99:1e:97:cc:d8:7d:44:b2:86:2f:63:d4:
         b1:f7:0a:56:2a:40:cb:ed:08:f5:4e:e0:b0:02:fe:c3:db:c0:
         aa:0e:92:b0:38:0c:36:b7:d2:8b:ca:99:86:87:05:41:d2:a5:
         e9:fb:26:5c:cb:70:8e:8e:f4:64:da:85:23:f2:b4:db:38:9b:
         ce:45:61:f5:35:18:fc:7e:f4:2c:ce:d5:95:99:bd:01:17:94:
         1e:d1:50:26:47:10:d7:0e:da:ca:02:28:71:21:61:29:fe:71:
         19:aa:74:02:a1:b3:5e:80:51:6e:03:39:2d:74:6d:96:2e:02:
         e0:4f:ad:ec:e7:e6:ce:cf:a9:ac:91:29:b0:52:89:a2:f1:f2:
         3c:f8:1d:3d:29:f4:b0:c6:c6:f0:42:9e:b5:45:dd:f3:37:b4:
         ca:88:a1:66
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org