Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/1/323830343a383565383a3a2f33322d3438203d3e20323632373032.roa
File:                     323830343a383565383a3a2f33322d3438203d3e20323632373032.roa (raw, json)
Hash identifier:          CGhLkxpS0qJUAeYttd6AWDa7oxAcTGQa8slCQkac724=
Subject key identifier:   70:9B:6B:6C:B5:26:E1:C8:7F:B7:0A:A1:81:6F:83:7D:D1:72:FB:D4
Certificate issuer:       /CN=4259D9D84DEC2A165B84F2D8C96D8345FC946C95
Certificate serial:       0CFE0FF5532DE62E29807FB50DD314E8FC30D1C2
Authority key identifier: 42:59:D9:D8:4D:EC:2A:16:5B:84:F2:D8:C9:6D:83:45:FC:94:6C:95
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4259D9D84DEC2A165B84F2D8C96D8345FC946C95.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/1/323830343a383565383a3a2f33322d3438203d3e20323632373032.roa
Signing time:             Thu 04 Apr 2024 00:55:46 +0000
ROA not before:           Thu 04 Apr 2024 00:50:46 +0000
ROA not after:            Thu 03 Apr 2025 00:55:46 +0000
asID:                     262702
IP address blocks:        2804:85e8::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:fe:0f:f5:53:2d:e6:2e:29:80:7f:b5:0d:d3:14:e8:fc:30:d1:c2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4259D9D84DEC2A165B84F2D8C96D8345FC946C95
        Validity
            Not Before: Apr  4 00:50:46 2024 GMT
            Not After : Apr  3 00:55:46 2025 GMT
        Subject: CN=709B6B6CB526E1C87FB70AA1816F837DD172FBD4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:57:c2:d6:ac:f7:61:7f:32:5a:47:ad:15:d1:
                    94:44:0a:ee:9c:6b:86:8e:c6:29:43:ce:ca:42:eb:
                    d8:bd:2a:db:73:46:44:f1:6a:91:22:ca:df:74:6f:
                    a9:8b:65:ac:16:e6:80:e3:96:6f:32:70:8d:dc:68:
                    ab:46:db:e0:e9:1f:3f:19:b3:62:4b:0b:18:ec:7f:
                    ee:df:96:e3:77:ad:88:07:35:e2:e8:64:81:6f:e2:
                    5f:ba:9c:db:a4:c7:80:f5:2f:44:ee:f7:de:c7:ad:
                    dd:05:ba:03:37:b3:aa:c7:cd:9c:60:f8:f4:14:aa:
                    03:00:77:24:7b:0e:3b:06:0b:bc:04:8a:e6:4c:8b:
                    fd:a3:0e:d9:a1:65:5a:6f:ae:f6:74:62:45:79:aa:
                    dc:b2:71:2a:12:73:61:a5:7c:c4:14:5f:33:e2:cc:
                    d2:ac:4e:be:a3:77:82:29:47:e1:a1:e2:b5:4f:31:
                    f2:39:d1:2c:6b:bb:31:5b:dc:57:96:83:21:82:d4:
                    34:07:0d:6c:34:2b:8d:ba:99:b9:d5:c4:82:19:ab:
                    80:4e:37:9e:7f:c8:43:81:5a:6e:44:b3:28:4e:38:
                    03:9d:fb:cc:8f:dc:11:18:39:13:44:f3:f6:51:88:
                    b7:ce:ac:4b:68:58:45:fd:bc:a1:ab:07:e1:9f:2b:
                    6b:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                70:9B:6B:6C:B5:26:E1:C8:7F:B7:0A:A1:81:6F:83:7D:D1:72:FB:D4
            X509v3 Authority Key Identifier:
                keyid:42:59:D9:D8:4D:EC:2A:16:5B:84:F2:D8:C9:6D:83:45:FC:94:6C:95

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/1/4259D9D84DEC2A165B84F2D8C96D8345FC946C95.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4259D9D84DEC2A165B84F2D8C96D8345FC946C95.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9bnKAzzDfhZELHMx3uTajdoiNZUnSBhRmMqjzKqkavCb/1/323830343a383565383a3a2f33322d3438203d3e20323632373032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:85e8::/32

    Signature Algorithm: sha256WithRSAEncryption
         9a:79:35:d0:bf:2b:0e:67:95:f8:a3:d0:4f:55:0c:02:42:7b:
         e0:47:24:e0:5b:4a:79:36:1f:aa:26:5f:0b:6d:d5:be:0a:5f:
         dd:12:08:54:d9:08:b8:21:86:27:ff:90:46:6a:f2:5d:ac:4a:
         73:55:a6:37:92:5e:30:b3:67:bd:f8:11:3f:94:6f:9d:9a:36:
         81:45:d4:ad:54:66:a9:f6:bd:94:55:a9:a8:f3:37:7f:3f:bb:
         c8:21:df:32:aa:92:8d:80:3a:b3:45:25:97:0a:a3:24:db:a3:
         d3:4f:a6:99:42:b2:7f:64:f3:a2:45:9b:c4:77:4d:c4:ff:96:
         3c:4d:bc:3b:fa:05:7a:61:87:40:bf:68:c5:53:6d:e6:6c:e9:
         fe:c5:29:20:fc:01:96:a8:58:d1:9b:6c:b6:9b:17:a5:ee:de:
         78:4d:6f:df:bb:89:05:a8:d0:67:2b:09:94:40:aa:ff:b4:7a:
         bd:f1:d6:d0:3f:78:87:1e:71:cd:ac:ea:5c:b8:cc:08:68:12:
         8d:08:67:d5:76:35:5a:fb:53:6b:3e:f5:39:d6:d4:bc:68:51:
         bb:38:f9:63:b7:2b:8a:64:60:48:68:82:a8:f0:b7:e5:08:bb:
         2c:be:8a:37:e4:26:70:7c:d5:5b:6d:34:5d:b2:7f:8b:30:e6:
         bb:05:0f:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org