Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/0/323830343a376138633a3a2f33322d3438203d3e20323731333738.roa
File:                     323830343a376138633a3a2f33322d3438203d3e20323731333738.roa (raw, json)
Hash identifier:          O4LFzc7/cY6+lMAf4mMwmY4RMs2YtI17QlKrAHhU658=
Subject key identifier:   80:1B:E0:3F:C5:D2:77:03:19:B7:B8:B8:55:91:B5:61:38:27:8F:AD
Certificate issuer:       /CN=71DB76DAA410C9A9278099C1C43E45CBFC34BB8E
Certificate serial:       05B9CA2EC7F87C2F9A08422BC5EDE24B3D2A162B
Authority key identifier: 71:DB:76:DA:A4:10:C9:A9:27:80:99:C1:C4:3E:45:CB:FC:34:BB:8E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/0/323830343a376138633a3a2f33322d3438203d3e20323731333738.roa
Signing time:             Fri 15 Sep 2023 17:36:29 +0000
ROA not before:           Fri 15 Sep 2023 17:31:29 +0000
ROA not after:            Fri 13 Sep 2024 17:36:29 +0000
asID:                     271378
IP address blocks:        2804:7a8c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:b9:ca:2e:c7:f8:7c:2f:9a:08:42:2b:c5:ed:e2:4b:3d:2a:16:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=71DB76DAA410C9A9278099C1C43E45CBFC34BB8E
        Validity
            Not Before: Sep 15 17:31:29 2023 GMT
            Not After : Sep 13 17:36:29 2024 GMT
        Subject: CN=801BE03FC5D2770319B7B8B85591B56138278FAD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:8e:14:3d:b8:47:96:1e:e8:c5:60:bf:48:18:
                    f4:01:72:01:5c:44:b7:93:80:94:cd:21:98:01:2b:
                    b5:9d:65:44:94:6e:a3:d7:4a:59:34:7d:83:66:c8:
                    36:e5:48:33:1d:9a:51:1f:ee:77:69:b1:6e:24:d2:
                    ba:27:df:fa:58:5c:18:32:4e:db:fe:71:6e:64:e0:
                    81:93:df:24:9b:f2:91:63:1c:9e:6e:a4:f9:a3:dd:
                    dc:f1:25:88:c8:f0:87:94:72:da:cf:92:66:7c:87:
                    7b:84:90:39:a1:3e:5c:12:56:6a:88:e2:d8:3a:ae:
                    5a:64:ad:30:39:51:be:9a:56:8c:5b:0c:19:6b:1e:
                    7e:55:d1:5c:f7:bf:e2:a2:4d:a9:44:0c:78:31:05:
                    ae:f6:36:d7:57:4a:48:5c:d7:eb:0c:97:bf:6d:56:
                    3e:cb:96:6d:10:f9:ff:0f:b0:16:b1:dc:ad:72:95:
                    d6:43:77:3b:79:3c:50:7e:3f:2d:2d:a3:37:05:a8:
                    bd:cf:51:ab:73:91:49:e6:8d:4b:41:2b:5d:28:cc:
                    d4:3c:f5:82:bc:39:f9:d2:43:e9:17:b1:2c:8c:47:
                    30:7b:6b:ac:71:79:7d:1c:3b:ad:c4:35:dc:25:76:
                    f2:1b:5b:bc:5e:11:9f:9f:09:bb:8d:fb:05:a1:e2:
                    ab:3f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                80:1B:E0:3F:C5:D2:77:03:19:B7:B8:B8:55:91:B5:61:38:27:8F:AD
            X509v3 Authority Key Identifier:
                keyid:71:DB:76:DA:A4:10:C9:A9:27:80:99:C1:C4:3E:45:CB:FC:34:BB:8E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/0/71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/71DB76DAA410C9A9278099C1C43E45CBFC34BB8E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9HLxc1ZV39B6nfqw2VpXPFMe7QHULxNMGs6aQ5dpqM5i/0/323830343a376138633a3a2f33322d3438203d3e20323731333738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         32:1b:0a:19:73:4e:84:87:b8:8a:61:8e:1a:53:c2:a3:49:ea:
         84:b0:db:4e:be:85:66:eb:ed:fe:97:aa:84:c5:8d:e8:d3:d7:
         3d:6e:72:99:a7:2a:05:f6:42:34:25:d9:83:4f:99:13:5a:68:
         2f:69:ce:43:30:66:13:5c:41:8f:9e:1d:75:d6:7f:37:3d:a7:
         52:6c:d6:95:ba:b0:fd:9d:c7:75:11:f0:78:4f:cf:dd:a7:2b:
         69:52:3d:3f:20:be:94:64:f5:c0:71:eb:c4:db:7d:7b:f1:a8:
         35:d4:68:99:bb:c3:6c:55:8b:93:e1:ec:de:92:2f:bf:18:26:
         e9:23:0b:7f:55:00:e5:b8:2d:9c:50:58:b1:66:a1:d8:93:8f:
         6a:79:2d:3d:f9:b3:ea:06:3c:bd:73:3e:f1:56:76:1d:26:b7:
         27:da:f9:db:eb:ea:80:dc:54:e2:d3:31:e2:8e:a7:43:7d:d2:
         95:c4:47:77:46:97:75:9d:01:f0:3f:01:56:9c:9e:06:96:8e:
         df:33:65:55:18:e9:f9:52:dc:e9:0d:0f:ce:3b:cb:cd:ba:f7:
         4d:6d:67:0a:ba:66:5b:78:e5:2a:59:a3:0c:b9:ff:cc:ff:78:
         17:c5:d3:1b:79:93:cc:1d:d6:fe:04:ff:e4:93:d4:19:9d:ae:
         3b:ca:69:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org