Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/0/323830343a6162303a3a2f33322d313238203d3e203532393037.roa
File:                     323830343a6162303a3a2f33322d313238203d3e203532393037.roa (raw, json)
Hash identifier:          O9iXdMP4sqn4ueiPTIA1DR0boxzRhvRsGjbqGc/QWMo=
Subject key identifier:   96:00:36:9D:DD:75:95:E7:04:2B:9C:BB:50:8F:D9:59:B5:30:91:AB
Certificate issuer:       /CN=EAE540AC049A415FD7667C071C89E2D7422438A3
Certificate serial:       22B222451BC7048ADD18B70623EE03C6DC55118F
Authority key identifier: EA:E5:40:AC:04:9A:41:5F:D7:66:7C:07:1C:89:E2:D7:42:24:38:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAE540AC049A415FD7667C071C89E2D7422438A3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/0/323830343a6162303a3a2f33322d313238203d3e203532393037.roa
Signing time:             Thu 17 Aug 2023 22:21:46 +0000
ROA not before:           Thu 17 Aug 2023 22:16:46 +0000
ROA not after:            Thu 15 Aug 2024 22:21:46 +0000
asID:                     52907
IP address blocks:        2804:ab0::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:b2:22:45:1b:c7:04:8a:dd:18:b7:06:23:ee:03:c6:dc:55:11:8f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EAE540AC049A415FD7667C071C89E2D7422438A3
        Validity
            Not Before: Aug 17 22:16:46 2023 GMT
            Not After : Aug 15 22:21:46 2024 GMT
        Subject: CN=9600369DDD7595E7042B9CBB508FD959B53091AB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:b8:9f:bc:d7:8b:48:de:e0:5f:4d:9c:d6:4f:
                    e6:2e:bd:5c:be:30:99:cc:08:91:df:7c:29:3d:b3:
                    2d:bb:f0:b2:cd:8b:3b:d7:9e:14:41:18:64:f2:66:
                    f7:05:1d:45:b0:ba:81:7a:cd:9b:ad:e2:01:cf:09:
                    73:fb:d3:a2:53:ff:37:fe:b6:0c:cb:50:74:5b:18:
                    4a:82:16:ce:2e:d1:df:5e:30:6d:1c:cd:3d:fd:3c:
                    3c:87:62:8f:62:83:b5:41:93:cb:7c:bb:5f:fa:68:
                    e4:19:b6:70:2d:d0:e6:a0:6e:b0:bd:35:eb:89:7f:
                    44:b0:e8:f3:43:7c:25:4a:98:fd:bb:d0:31:30:be:
                    40:1c:82:f8:93:a1:02:90:84:fa:9b:29:fb:5e:1d:
                    7a:2e:23:e5:10:30:7f:c5:88:30:50:0b:c9:02:50:
                    e1:ec:a5:46:53:a4:a6:a6:0e:fa:53:66:bc:ba:91:
                    9c:27:71:4d:f7:a7:45:a1:38:50:ca:74:d5:27:c8:
                    ce:5d:11:d7:e4:55:39:27:e4:51:02:03:6a:35:19:
                    5b:eb:fd:3b:dd:ba:24:69:f9:e7:43:2a:85:03:5c:
                    42:72:eb:11:ad:92:eb:58:96:03:d9:26:50:72:40:
                    33:2f:46:76:92:95:ef:3d:02:47:e9:0c:ef:40:94:
                    b0:a3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                96:00:36:9D:DD:75:95:E7:04:2B:9C:BB:50:8F:D9:59:B5:30:91:AB
            X509v3 Authority Key Identifier:
                keyid:EA:E5:40:AC:04:9A:41:5F:D7:66:7C:07:1C:89:E2:D7:42:24:38:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/0/EAE540AC049A415FD7667C071C89E2D7422438A3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EAE540AC049A415FD7667C071C89E2D7422438A3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9LncRCrcSPsLyQpXN2m8fCivBwJzTJCnUAEbFZofwXNo/0/323830343a6162303a3a2f33322d313238203d3e203532393037.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:ab0::/32

    Signature Algorithm: sha256WithRSAEncryption
         b2:94:25:4c:43:66:9b:d3:30:f3:b6:69:0f:b3:45:c7:60:94:
         eb:ec:d7:cf:1a:c2:89:da:d5:b0:af:5c:57:fd:34:e4:83:a1:
         6d:21:27:27:9e:b2:3d:40:c0:dc:52:a5:fd:d0:31:8c:a5:51:
         ac:d3:a2:80:11:48:7f:ab:3e:6e:76:16:fd:50:37:72:ff:3a:
         62:0b:d0:74:a4:f0:18:eb:fc:57:b4:7c:54:a0:b4:19:7d:3c:
         da:0f:63:47:88:c4:d4:79:af:e0:08:c9:d1:c9:19:cc:ea:29:
         98:47:65:9c:85:92:44:e4:af:36:04:a4:6e:ed:35:12:e5:30:
         83:22:05:7d:31:d0:b2:ca:92:73:64:01:2f:d7:ad:76:ea:ca:
         10:39:bf:5a:a1:d7:fd:c2:f3:07:bc:25:f3:32:a3:a2:06:ac:
         a9:2c:16:a4:23:e7:8a:a9:02:09:05:80:d2:62:dc:eb:04:20:
         8d:3a:d7:82:37:f6:1c:ed:40:1b:e3:bc:47:70:db:92:e0:ae:
         75:e7:7b:75:9c:e5:f2:33:18:d7:5e:3d:ee:a1:d2:d2:17:7a:
         8e:3e:97:fd:fd:9c:09:3b:fd:b2:93:55:ce:86:ec:e7:49:d7:
         70:06:e4:88:24:2d:be:68:47:10:1d:4e:94:c1:22:bd:ce:d9:
         68:d6:dd:45
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org