Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/323830343a326563343a3a2f33332d3333203d3e20323635333635.roa
File:                     323830343a326563343a3a2f33332d3333203d3e20323635333635.roa (raw, json)
Hash identifier:          QTfgZ711DDh4DFQ06cgyDg0Cd50nq/5oJQrDUPBZrhI=
Subject key identifier:   97:EF:92:26:E6:29:15:1D:05:AD:6A:81:DA:EF:49:70:26:B0:19:C9
Certificate issuer:       /CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
Certificate serial:       251FAE1FE219D5CD428764F4C51E2BDD60A15898
Authority key identifier: 47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/323830343a326563343a3a2f33332d3333203d3e20323635333635.roa
Signing time:             Sun 14 Jan 2024 12:00:00 +0000
ROA not before:           Sun 14 Jan 2024 11:55:00 +0000
ROA not after:            Sun 12 Jan 2025 12:00:00 +0000
asID:                     265365
IP address blocks:        2804:2ec4::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            25:1f:ae:1f:e2:19:d5:cd:42:87:64:f4:c5:1e:2b:dd:60:a1:58:98
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4727970500C3714E7E9C8B4C19EAB96E9507EBC9
        Validity
            Not Before: Jan 14 11:55:00 2024 GMT
            Not After : Jan 12 12:00:00 2025 GMT
        Subject: CN=97EF9226E629151D05AD6A81DAEF497026B019C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:61:91:9a:d9:9a:88:81:bf:21:65:7b:89:7d:
                    a3:dd:22:8f:c1:1a:ad:17:f2:23:db:5a:bf:52:07:
                    df:4f:ec:b7:1e:dd:dd:17:88:34:df:97:15:61:92:
                    dc:f8:d1:fe:72:68:df:86:5e:55:1c:4f:55:ce:ac:
                    6f:4e:cd:0b:fd:20:31:83:2e:7d:db:77:80:68:ad:
                    ee:7a:ea:b3:ae:05:58:66:61:9a:57:f6:18:f8:a8:
                    ba:3d:8d:1c:39:83:13:01:87:68:c2:bf:85:d3:14:
                    4b:1b:e7:8e:d9:06:29:bd:1f:0a:37:fe:19:d0:54:
                    41:68:0b:cc:12:23:25:bc:80:08:ee:5d:32:e5:d1:
                    c8:10:09:e7:83:49:5e:8f:78:e7:5d:dc:0a:6f:a4:
                    fd:cf:ca:a8:15:70:93:37:05:ff:8b:e1:23:f4:91:
                    6d:a8:7f:8d:e1:ee:80:1b:15:1e:49:7f:ad:d0:0a:
                    9f:d6:97:db:01:56:40:c5:b2:34:51:cd:5c:73:e9:
                    79:61:42:e0:ab:cd:7f:25:d1:94:e8:c3:d7:0e:0c:
                    46:7c:22:fc:4d:b3:53:ee:0e:19:94:7c:1d:d6:a6:
                    67:80:58:c4:48:56:ab:f3:cc:da:64:06:b6:fd:92:
                    e4:0c:40:09:0b:de:f3:98:81:c6:a8:a8:ef:10:9f:
                    5e:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:EF:92:26:E6:29:15:1D:05:AD:6A:81:DA:EF:49:70:26:B0:19:C9
            X509v3 Authority Key Identifier:
                keyid:47:27:97:05:00:C3:71:4E:7E:9C:8B:4C:19:EA:B9:6E:95:07:EB:C9

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4727970500C3714E7E9C8B4C19EAB96E9507EBC9.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9dtNNg6boVL5pkXGh3Ms9Ko9LDPP6sALCQFVaiazn6kb/0/323830343a326563343a3a2f33332d3333203d3e20323635333635.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2ec4::/33

    Signature Algorithm: sha256WithRSAEncryption
         a1:6f:0c:3f:0d:ad:23:1f:05:ad:8e:f9:3f:ac:f8:05:15:50:
         fd:20:da:f3:2f:26:11:67:70:01:85:ed:cc:b9:fc:d3:cb:72:
         4f:bf:6d:6c:47:c0:e0:a5:08:cb:c8:da:d4:8c:0c:58:6c:6f:
         e8:4a:c8:33:28:71:d4:b3:a1:e3:f9:7d:97:a6:20:ef:91:ac:
         7e:15:42:55:6c:d0:e5:85:3d:0a:e5:c4:43:48:e1:9d:f1:f3:
         65:f6:89:c4:4a:50:78:a9:53:de:41:47:4c:e0:16:c4:44:40:
         46:45:23:74:7d:c6:41:f0:72:cf:26:6b:81:bf:39:8e:91:ee:
         ad:e1:43:bb:bb:07:d5:6f:a0:08:e4:50:f2:cd:3f:27:50:54:
         72:10:8a:5c:2b:ac:81:23:cf:19:d7:5d:9e:1b:e6:d4:4f:15:
         87:36:8b:b7:d0:07:c8:ae:78:f9:de:6a:fb:fe:42:dc:96:9a:
         29:d7:48:72:d2:1a:b6:14:51:d6:e5:3c:41:42:a2:57:1a:12:
         0e:1f:74:77:ad:b7:64:d4:cc:70:43:09:db:fe:24:8e:66:70:
         8d:60:a1:39:35:86:4f:76:fc:f1:d6:6f:9b:3c:0e:de:a0:8b:
         6c:4f:3d:57:60:73:18:4c:98:ce:cb:ef:9e:5a:e2:98:8d:40:
         1e:70:50:5b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:10 2024 by rpki-client on console-ams.rpki-client.org