Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a6665343a3a2f33322d3438203d3e203238333433.roa
File:                     323830343a6665343a3a2f33322d3438203d3e203238333433.roa (raw, json)
Hash identifier:          ulubotKk7epkw9gYQbvfeNq1oh+H6A0Gwdi0CpHPx9U=
Subject key identifier:   61:FB:A1:9B:46:25:B3:6F:FF:4D:F5:71:1B:DE:A0:39:F6:65:27:9B
Certificate issuer:       /CN=177D4EA4EE1B5E37126713304729EF44AB000434
Certificate serial:       7AF25B4D805778F470AC1A115A3C258A7A78C6FF
Authority key identifier: 17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a6665343a3a2f33322d3438203d3e203238333433.roa
Signing time:             Thu 30 Dec 2021 18:22:13 +0000
ROA not before:           Thu 30 Dec 2021 18:17:13 +0000
ROA not after:            Thu 29 Dec 2022 18:22:13 +0000
asID:                     28343
IP address blocks:        2804:fe4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:f2:5b:4d:80:57:78:f4:70:ac:1a:11:5a:3c:25:8a:7a:78:c6:ff
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=177D4EA4EE1B5E37126713304729EF44AB000434
        Validity
            Not Before: Dec 30 18:17:13 2021 GMT
            Not After : Dec 29 18:22:13 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:59:1a:8a:73:23:3b:01:c8:f5:01:39:6a:d2:
                    9c:84:12:47:70:a7:11:c3:20:ba:b8:fb:ef:6a:ae:
                    df:90:57:4e:82:29:82:5a:b4:6f:22:36:26:6e:be:
                    1a:78:ac:ea:6d:7e:87:95:ad:d6:6a:83:f0:f7:28:
                    6e:e2:d8:96:e9:f6:4d:a8:3c:5b:fe:47:8d:68:43:
                    7c:d8:fa:c4:8b:b7:0b:4a:75:e9:5b:05:71:d0:92:
                    49:b9:cb:38:cc:5e:43:50:86:72:5d:77:bb:a2:cf:
                    8b:88:ce:2e:90:43:78:7d:ff:86:4b:07:da:f8:41:
                    94:3a:69:ee:ad:8c:65:8c:92:69:cf:1e:bf:0e:c7:
                    e3:52:d0:30:8b:74:16:10:ce:6d:4a:d3:5a:aa:11:
                    97:65:e1:44:9f:37:50:99:d5:36:bb:99:90:ec:96:
                    70:29:c4:bf:00:27:ef:59:c3:9c:8c:f8:ed:b5:2c:
                    19:cf:a3:c6:83:71:4e:c8:2d:af:5e:12:6a:ff:e1:
                    34:c8:10:31:a7:0d:c6:d6:71:8e:3b:e7:73:ab:28:
                    62:b8:b1:6e:de:21:8a:a0:90:e7:fa:1c:03:c4:d2:
                    47:5d:7c:d6:b1:04:65:99:31:2d:aa:3f:c1:e8:76:
                    9d:34:3c:4d:73:76:8a:8f:d1:e4:d8:df:1e:4e:f9:
                    58:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                61:FB:A1:9B:46:25:B3:6F:FF:4D:F5:71:1B:DE:A0:39:F6:65:27:9B
            X509v3 Authority Key Identifier:
                keyid:17:7D:4E:A4:EE:1B:5E:37:12:67:13:30:47:29:EF:44:AB:00:04:34

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/177D4EA4EE1B5E37126713304729EF44AB000434.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/177D4EA4EE1B5E37126713304729EF44AB000434.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9irdL38Rud9Fe43nrwCTh6LPgReraVszHS6v1JyH6YSw/1/323830343a6665343a3a2f33322d3438203d3e203238333433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:fe4::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:ff:a8:29:b2:68:80:50:07:cc:ef:6d:e0:4f:92:9e:4b:c6:
         11:4f:d4:5b:5d:7f:10:5d:d0:fd:b4:02:19:0f:fe:f5:e5:da:
         4d:4d:f4:fb:73:f4:3a:c3:e4:f7:34:41:f1:69:6a:a9:4d:39:
         64:9f:c6:93:b1:04:d2:fe:30:4d:43:26:2f:25:48:7d:95:d6:
         9b:c1:41:31:02:4f:f9:58:bd:23:1e:d5:d5:9a:c3:0e:ef:43:
         eb:f4:e0:6f:93:de:67:be:c2:ca:5e:32:dd:b6:8a:8e:62:ae:
         09:5c:58:ed:44:23:17:f0:6f:61:de:48:e5:14:1f:95:9b:d8:
         c5:8e:5c:3d:cd:a0:65:6d:78:c0:5b:0f:6f:3c:28:ed:1f:71:
         f8:04:d8:5d:4f:9b:43:36:65:d8:df:b8:c9:e0:75:fd:4b:fa:
         9c:f4:88:af:bc:21:79:87:6a:f4:23:ff:1f:c2:2d:89:66:0e:
         91:7a:54:26:ea:56:fb:db:46:15:a5:bb:14:0a:25:25:f3:51:
         28:f5:e7:b4:87:f1:21:ae:26:1b:b9:19:a1:1f:82:d2:76:44:
         56:01:fe:4f:20:9f:8f:70:46:99:d2:a7:d5:af:92:14:8c:ef:
         78:d3:fb:71:ab:43:84:44:4b:01:d8:29:fb:1d:5f:be:fa:54:
         99:6a:dc:49
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:06 2024 by rpki-client on console-fra.rpki-client.org