Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/323830343a326532383a3a2f33322d313238203d3e20323635333238.roa
File:                     323830343a326532383a3a2f33322d313238203d3e20323635333238.roa (raw, json)
Hash identifier:          DyLZ4QqmeNEdWbevJk98zazAToZIuxZnoGj1OWImIps=
Subject key identifier:   7C:4B:77:39:DE:5E:DF:5D:2B:A8:FF:AB:94:FC:95:F5:E5:E2:A0:0F
Certificate issuer:       /CN=7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12
Certificate serial:       4DDD5536D11D823B542D7F1354FE5B335D5169E5
Authority key identifier: 7F:4B:88:B5:BE:DB:CA:A5:FE:25:F0:48:1C:69:FC:C7:ED:70:1C:12
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/323830343a326532383a3a2f33322d313238203d3e20323635333238.roa
Signing time:             Wed 03 Apr 2024 19:16:05 +0000
ROA not before:           Wed 03 Apr 2024 19:11:05 +0000
ROA not after:            Wed 02 Apr 2025 19:16:05 +0000
asID:                     265328
IP address blocks:        2804:2e28::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:dd:55:36:d1:1d:82:3b:54:2d:7f:13:54:fe:5b:33:5d:51:69:e5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12
        Validity
            Not Before: Apr  3 19:11:05 2024 GMT
            Not After : Apr  2 19:16:05 2025 GMT
        Subject: CN=7C4B7739DE5EDF5D2BA8FFAB94FC95F5E5E2A00F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:95:14:1e:49:5c:07:46:44:6c:5c:c0:d2:f5:90:
                    4c:fe:63:81:df:37:84:74:5e:83:5f:f5:4a:b3:39:
                    e8:85:04:9e:53:df:33:cf:86:50:1d:42:e7:65:ec:
                    0a:1f:3e:04:fc:52:d2:30:df:47:dc:17:23:35:e8:
                    a9:2e:95:fa:d8:49:6c:12:1b:b7:10:4c:70:84:dc:
                    c8:89:72:0c:0c:e0:33:e0:d1:80:b7:52:6f:b1:3f:
                    2a:01:3e:60:04:5c:22:6a:e3:f1:b3:64:f0:e6:39:
                    a4:2e:c1:80:b0:dd:47:ae:e4:4c:8b:de:88:1b:98:
                    45:50:f5:00:3f:de:cc:cc:ef:c8:18:ab:d0:57:8c:
                    8b:f5:83:39:c3:f1:f3:22:c5:12:7b:9f:e6:38:37:
                    cf:0c:28:80:84:bc:7f:fa:5b:8d:e9:2c:76:99:77:
                    e0:9d:ec:3e:69:83:59:dc:16:f6:02:d5:e2:2a:1e:
                    06:73:5f:6b:2a:a6:83:66:44:6b:03:57:67:86:85:
                    0b:2a:cd:89:a3:69:19:82:1b:f2:8b:71:7e:6b:db:
                    d1:72:0c:92:26:14:18:64:60:9b:e6:12:4c:df:9f:
                    25:5d:26:75:6c:69:da:6b:66:50:11:d9:91:7b:a5:
                    41:30:a3:5e:92:8d:9f:92:be:07:85:7a:22:a9:0a:
                    47:69
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                7C:4B:77:39:DE:5E:DF:5D:2B:A8:FF:AB:94:FC:95:F5:E5:E2:A0:0F
            X509v3 Authority Key Identifier:
                keyid:7F:4B:88:B5:BE:DB:CA:A5:FE:25:F0:48:1C:69:FC:C7:ED:70:1C:12

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/7F4B88B5BEDBCAA5FE25F0481C69FCC7ED701C12.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9TY6G9kKSYVbqPsRkkbxndGev5CmAoetHe8h83KTQEzU/1/323830343a326532383a3a2f33322d313238203d3e20323635333238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2e28::/32

    Signature Algorithm: sha256WithRSAEncryption
         bd:82:7f:19:af:c8:b3:d0:48:80:74:16:fb:7c:91:7f:78:68:
         5e:50:3b:9d:a3:bd:e2:8e:2b:66:56:f3:fc:ca:93:a2:f9:37:
         2e:a9:f2:6f:09:21:06:6b:33:4e:af:df:9e:86:b4:bf:02:b7:
         0f:6b:ea:bf:e2:fb:c6:d8:74:38:b0:37:7f:79:1b:2a:71:36:
         38:0a:7d:ea:d5:20:9c:71:c9:e6:a5:84:c9:12:a2:86:98:77:
         74:d6:bb:33:3f:74:c6:85:4f:52:e0:73:a8:a1:7e:27:37:c3:
         cf:bf:86:ac:27:97:bc:0f:96:37:21:bc:a5:c4:64:6c:33:02:
         74:9e:5b:f5:0d:8f:f5:0f:87:61:a5:e4:28:36:59:ea:28:88:
         cf:74:25:9a:39:99:8f:73:4f:27:e2:8b:6b:95:c0:f5:9c:24:
         0c:55:d3:96:f2:42:31:41:17:1c:d6:a4:aa:28:3e:96:fe:54:
         b8:a8:47:4b:4a:b2:96:8f:b6:a3:ac:5d:46:cf:92:74:fc:26:
         d7:b1:74:39:a5:26:db:01:08:21:ff:65:3d:3c:0b:ae:b8:a8:
         d9:8b:06:07:ac:99:3e:a4:bf:b8:da:83:fc:80:95:3b:28:da:
         7b:32:08:7a:dc:43:17:e3:5e:3f:d2:90:bf:59:da:15:0e:c0:
         e7:31:e8:16
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:09 2024 by rpki-client on console-ams.rpki-client.org