Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/323830343a383739303a3a2f33322d3438203d3e20323732373137.roa
File:                     323830343a383739303a3a2f33322d3438203d3e20323732373137.roa (raw, json)
Hash identifier:          /CuP8kq2F9ZzgNMnKMS9E6AkxU4SR0yqdzgzlTLS/CM=
Subject key identifier:   0A:9E:F1:E1:3A:96:69:D9:3B:A1:E6:D8:39:C2:30:10:95:01:02:36
Certificate issuer:       /CN=EC49574725049721FFA5AC0390E08D942C56EE07
Certificate serial:       3224D68D723FE46BF978A4589CAF06DBBEC09314
Authority key identifier: EC:49:57:47:25:04:97:21:FF:A5:AC:03:90:E0:8D:94:2C:56:EE:07
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC49574725049721FFA5AC0390E08D942C56EE07.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/323830343a383739303a3a2f33322d3438203d3e20323732373137.roa
Signing time:             Thu 14 Sep 2023 15:26:11 +0000
ROA not before:           Thu 14 Sep 2023 15:21:11 +0000
ROA not after:            Thu 12 Sep 2024 15:26:11 +0000
asID:                     272717
IP address blocks:        2804:8790::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:24:d6:8d:72:3f:e4:6b:f9:78:a4:58:9c:af:06:db:be:c0:93:14
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC49574725049721FFA5AC0390E08D942C56EE07
        Validity
            Not Before: Sep 14 15:21:11 2023 GMT
            Not After : Sep 12 15:26:11 2024 GMT
        Subject: CN=0A9EF1E13A9669D93BA1E6D839C2301095010236
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:55:fb:ba:20:c4:31:73:03:a7:ee:f7:1e:49:
                    09:db:3d:58:28:1f:e8:e8:8d:bf:f3:2f:25:46:d0:
                    d3:f8:37:d4:95:8e:b2:af:cd:03:77:cb:e4:2e:69:
                    b4:65:e1:fd:aa:2d:e9:a2:31:53:3d:56:2a:71:a1:
                    5f:d1:d8:01:05:42:9d:c4:80:b8:dd:be:c7:67:26:
                    a1:5c:06:0e:0f:38:a8:0e:42:a2:a3:af:4b:cc:56:
                    de:7d:6e:ae:78:c2:82:ec:d4:8f:73:e4:03:f7:9e:
                    bb:74:cc:fb:aa:da:50:bc:d1:e1:ac:85:6f:51:55:
                    d1:60:43:df:58:00:b6:51:1e:ed:d6:c0:cb:78:e2:
                    ed:df:4c:28:50:9c:2a:b2:2c:52:93:26:9c:41:54:
                    8d:f7:9b:30:79:92:a9:b0:9d:45:54:ed:03:b5:7f:
                    dd:07:36:d3:d0:af:ec:70:94:39:f5:77:17:1e:11:
                    5b:f3:f5:ff:07:61:71:4d:3e:1b:93:29:10:b5:8b:
                    f6:49:66:b8:cc:db:66:49:48:e5:41:26:76:b4:00:
                    cb:57:df:30:25:b8:1f:56:55:55:54:c4:ed:bb:5f:
                    0d:16:7e:5c:ce:1b:2b:e8:af:a4:c4:38:03:a2:88:
                    d8:ff:c1:7f:c9:db:68:28:ae:f7:32:cd:fb:92:61:
                    0a:99
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:9E:F1:E1:3A:96:69:D9:3B:A1:E6:D8:39:C2:30:10:95:01:02:36
            X509v3 Authority Key Identifier:
                keyid:EC:49:57:47:25:04:97:21:FF:A5:AC:03:90:E0:8D:94:2C:56:EE:07

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/EC49574725049721FFA5AC0390E08D942C56EE07.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC49574725049721FFA5AC0390E08D942C56EE07.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9duHetHjGLjJesqkbgUMryVMSLKxCzNz3rphqb8PmUKA/1/323830343a383739303a3a2f33322d3438203d3e20323732373137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8790::/32

    Signature Algorithm: sha256WithRSAEncryption
         65:ad:dc:82:72:aa:af:96:a5:e1:e5:e8:39:33:7d:c8:a3:fd:
         a4:fe:7c:67:f7:54:49:00:dd:cb:bc:99:3f:71:c4:6e:d1:76:
         e9:50:c8:2c:d0:c9:38:24:f8:23:9b:12:0f:8c:b1:ac:1e:16:
         80:85:77:b9:ed:fe:02:60:b9:a8:f0:aa:41:59:13:36:2b:e7:
         61:a3:d2:83:99:56:94:eb:c5:b2:64:9d:17:57:50:cd:8b:0b:
         07:09:e1:c8:ed:2c:85:ad:cd:95:a0:77:82:50:f5:e9:fd:75:
         6e:8d:34:74:ee:33:c0:fc:c5:84:a1:23:af:0c:9f:92:8a:98:
         5c:30:9c:af:fb:4e:b9:81:85:8e:d1:1c:71:76:59:83:a0:cf:
         15:af:89:e7:19:6d:bd:8f:b4:21:b4:bf:ed:3d:bb:9d:a1:15:
         b6:3d:8d:27:69:37:32:37:e3:c0:57:f0:b0:d1:a4:e2:31:87:
         47:90:5f:2e:38:f7:54:61:0f:f8:fb:1b:7e:60:04:0b:64:98:
         53:d5:19:3d:44:fa:1b:3d:dd:1d:38:3a:25:c2:da:8f:7d:e3:
         6c:12:6d:c0:a6:8f:21:d0:e8:88:df:0b:93:e1:b4:a3:67:9a:
         bc:98:cf:a0:c7:bc:2a:8c:92:17:25:e1:e5:9c:d2:61:da:06:
         1c:0d:f9:dd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:05 2024 by rpki-client on console-fra.rpki-client.org