Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/323830343a346435633a3a2f33342d3334203d3e20323638313932.roa
File:                     323830343a346435633a3a2f33342d3334203d3e20323638313932.roa (raw, json)
Hash identifier:          pPBJlku/NvUlBV6wg8gkmOB/QdIAkhOFaBG5BQJpf+o=
Subject key identifier:   2E:DE:C7:66:C7:DA:82:8B:92:DE:F4:8E:A6:C7:9C:EA:91:40:41:02
Certificate issuer:       /CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
Certificate serial:       473121A73E9855B43140FB4151908777EA70BF1C
Authority key identifier: DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/323830343a346435633a3a2f33342d3334203d3e20323638313932.roa
Signing time:             Mon 14 Aug 2023 15:58:37 +0000
ROA not before:           Mon 14 Aug 2023 15:53:37 +0000
ROA not after:            Mon 12 Aug 2024 15:58:37 +0000
asID:                     268192
IP address blocks:        2804:4d5c::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            47:31:21:a7:3e:98:55:b4:31:40:fb:41:51:90:87:77:ea:70:bf:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DCA8042978431D2B4D15E54233868E8EBA0D1446
        Validity
            Not Before: Aug 14 15:53:37 2023 GMT
            Not After : Aug 12 15:58:37 2024 GMT
        Subject: CN=2EDEC766C7DA828B92DEF48EA6C79CEA91404102
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c8:c7:06:b8:77:e4:1c:1b:7b:91:ca:28:bb:3a:
                    c1:fb:e5:8e:67:dd:1c:c1:bb:be:15:bd:64:de:58:
                    7e:c5:60:c6:0b:01:68:58:b4:08:3f:66:51:66:48:
                    f9:6a:b2:c9:c1:36:21:57:88:ed:ef:9a:92:7e:30:
                    d1:09:d1:ba:ea:72:18:ae:92:6e:f2:d5:dd:c1:9f:
                    1f:91:95:40:39:60:6b:2f:32:7d:fb:f6:a2:6a:27:
                    ae:c6:56:a8:59:7d:44:82:17:00:e8:a0:8e:58:bc:
                    f5:af:a6:a5:88:e9:3a:01:e0:00:7b:87:31:2c:a6:
                    b7:41:22:93:48:a9:7d:86:06:0b:f0:de:0e:78:36:
                    f6:9f:45:0f:8f:6d:db:57:61:4b:de:74:0b:fb:20:
                    cf:e7:10:16:ab:45:fd:bc:93:a7:28:c3:9c:ba:ef:
                    19:57:cb:1b:4b:b8:0d:48:9a:51:fa:33:93:c6:f9:
                    00:68:b4:00:6d:63:33:88:05:d9:56:96:e7:20:e4:
                    04:bb:22:84:b6:66:5d:86:79:ac:9d:3c:7c:50:a9:
                    ea:cb:6e:e7:8a:24:f0:7a:c0:0b:b2:4a:2f:9e:65:
                    d7:70:01:19:fc:e7:f7:34:49:3f:ba:35:6b:7e:81:
                    37:82:49:e9:44:ad:87:c2:9a:bb:8d:92:9b:4a:f2:
                    46:37
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2E:DE:C7:66:C7:DA:82:8B:92:DE:F4:8E:A6:C7:9C:EA:91:40:41:02
            X509v3 Authority Key Identifier:
                keyid:DC:A8:04:29:78:43:1D:2B:4D:15:E5:42:33:86:8E:8E:BA:0D:14:46

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/DCA8042978431D2B4D15E54233868E8EBA0D1446.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DCA8042978431D2B4D15E54233868E8EBA0D1446.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9XG6N9hSdXPFxb3jQUWYAwA97G22NFACc8wRM7GwpAJd/2/323830343a346435633a3a2f33342d3334203d3e20323638313932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d5c::/34

    Signature Algorithm: sha256WithRSAEncryption
         71:78:80:1b:09:27:61:b5:0c:a0:10:5c:6c:08:b2:82:08:db:
         40:b5:39:ff:6a:d0:82:41:e2:d3:ad:76:95:dc:4c:e5:72:48:
         fc:62:20:ea:7b:ba:1c:a6:09:93:15:59:0c:ee:e3:9d:9b:85:
         11:36:9a:2b:a4:d2:79:af:b6:5b:53:a2:8e:2b:08:df:97:76:
         ef:e3:4d:8b:8b:14:07:2b:8d:4b:df:da:68:8a:0f:94:b3:ea:
         a6:95:38:45:d2:48:88:9a:39:02:4f:d0:65:7a:6b:d7:ab:21:
         81:01:4e:0b:4b:b2:27:d3:44:7b:b5:dd:3e:4e:e9:69:89:8e:
         16:9b:87:b2:b9:b4:16:c9:a0:ed:2b:a0:50:bd:ef:27:a5:0e:
         c1:bc:64:d8:2b:64:ce:35:f3:fc:48:ee:29:b0:54:59:0c:67:
         08:53:04:eb:9d:04:36:db:ae:38:f4:f4:d2:2c:f1:a5:43:54:
         32:22:6a:5a:52:40:b1:1d:f3:9b:07:90:0f:23:04:93:90:44:
         3f:c9:9e:97:2a:6e:34:f8:50:0f:7d:4d:6d:16:f1:b9:f6:e6:
         65:14:d2:1b:14:ab:1a:da:da:83:a9:2f:0e:2e:a7:c3:42:94:
         cf:fd:59:3d:b7:b1:bf:ec:ca:0b:12:79:08:34:0d:5d:5d:23:
         a7:04:a7:8c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org