Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a3a2f33322d3634203d3e203238323130.roa
File:                     323830343a3536633a3a2f33322d3634203d3e203238323130.roa (raw, json)
Hash identifier:          RFYB3ldXtQB9QJVv+D44D7Shbksko7DjX7+4cHt/Y2s=
Subject key identifier:   8B:49:94:F0:B4:91:AC:6D:E1:2A:37:7B:D7:ED:E7:CC:38:9D:93:A1
Certificate issuer:       /CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
Certificate serial:       13969245D4FD7FF5F11201DA722B65F83590430B
Authority key identifier: 14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a3a2f33322d3634203d3e203238323130.roa
Signing time:             Sat 04 Mar 2023 16:06:47 +0000
ROA not before:           Sat 04 Mar 2023 16:01:47 +0000
ROA not after:            Sat 02 Mar 2024 16:06:47 +0000
asID:                     28210
IP address blocks:        2804:56c::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:96:92:45:d4:fd:7f:f5:f1:12:01:da:72:2b:65:f8:35:90:43:0b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1426AA9786E3CD0F8DA663306F89AB25A8E80767
        Validity
            Not Before: Mar  4 16:01:47 2023 GMT
            Not After : Mar  2 16:06:47 2024 GMT
        Subject: CN=8B4994F0B491AC6DE12A377BD7EDE7CC389D93A1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:4d:f7:cc:5c:0a:9a:72:6b:9e:ef:fe:3d:3b:
                    53:96:13:d0:a8:3b:cc:fc:1f:26:4f:62:85:e4:98:
                    86:b3:2b:5d:3b:09:4e:91:b0:7d:20:b3:c4:78:c6:
                    94:3a:f7:e2:cf:9a:22:cd:96:6e:e7:15:f8:8b:95:
                    a3:09:db:ea:0b:73:0f:30:09:97:6a:e1:a8:f6:5c:
                    66:91:b7:fb:af:79:47:a9:77:7c:97:6e:16:4e:cf:
                    ce:38:0a:57:b2:78:bf:5f:5d:ed:fe:7c:a2:94:15:
                    d1:df:4a:dc:d2:f6:35:70:2e:50:a1:ac:a4:ba:ba:
                    e3:07:e3:ea:c2:e1:d6:37:b0:54:74:23:52:df:db:
                    bc:1b:84:9a:12:08:9e:e6:87:db:1d:d7:0d:b9:13:
                    cf:e5:bf:7c:08:85:cd:4d:7d:95:61:26:53:ac:c3:
                    7e:36:a0:24:23:fe:f9:1e:ad:89:1f:9f:41:d9:25:
                    5d:f4:f3:e9:d5:1a:e7:76:0d:12:f0:4a:92:65:d4:
                    61:b4:1f:af:4b:48:22:be:18:59:e5:06:36:af:38:
                    82:79:15:4b:a7:bd:b9:01:a2:d2:5c:d1:22:59:5e:
                    b2:d2:99:29:0a:bc:03:28:2b:4f:85:f0:1b:c7:85:
                    dc:87:09:75:16:65:96:04:3f:18:6e:a2:51:59:84:
                    f7:df
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:49:94:F0:B4:91:AC:6D:E1:2A:37:7B:D7:ED:E7:CC:38:9D:93:A1
            X509v3 Authority Key Identifier:
                keyid:14:26:AA:97:86:E3:CD:0F:8D:A6:63:30:6F:89:AB:25:A8:E8:07:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1426AA9786E3CD0F8DA663306F89AB25A8E80767.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9QfxRrthEWwm1w7YSfYE9Wd641V1naXdkuKkAtC8qgaV/0/323830343a3536633a3a2f33322d3634203d3e203238323130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56c::/32

    Signature Algorithm: sha256WithRSAEncryption
         1a:24:d6:c4:97:5b:b1:86:00:41:32:6e:5b:d7:5c:30:95:a7:
         ed:98:75:47:3d:e8:01:79:a6:22:8e:cd:37:a8:f4:3c:db:10:
         d2:55:85:a9:9b:c0:dd:8c:8a:2b:a2:da:49:94:b8:34:6e:d0:
         6a:dc:98:5c:67:7a:af:c7:35:97:77:9e:74:37:98:da:3b:77:
         8d:bc:5c:cc:aa:d5:18:34:7d:7d:d4:98:5a:55:db:a2:cb:c1:
         26:47:c0:cf:29:33:d5:90:a2:f8:d7:0e:ed:2c:4f:b9:a9:4b:
         7e:04:76:04:70:b1:aa:22:9f:d5:d9:e9:21:75:9f:0a:85:ca:
         09:1c:77:9c:ba:7d:68:58:bb:cf:e4:80:7a:91:59:34:a6:ce:
         51:a5:57:1a:fc:27:3f:aa:c9:ae:bd:77:1e:65:dd:37:ae:b5:
         b2:e7:c0:56:89:39:95:24:24:3c:53:0b:8f:28:f2:5f:1b:2a:
         e0:60:2e:5c:ca:0d:20:df:fb:33:9e:91:55:d4:be:ba:8c:fa:
         ea:3d:35:02:62:c1:21:99:e4:df:db:46:5a:16:0f:96:3d:23:
         43:f2:a4:9b:fc:26:c7:77:38:99:f2:78:ca:b2:7a:68:27:64:
         5e:ef:71:e3:c3:47:15:0d:25:9c:ce:7d:6e:c2:46:38:b8:0d:
         8d:e3:d0:84
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:04 2024 by rpki-client on console-fra.rpki-client.org