Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3438203d3e20323636303836.roa
File:                     323830343a336136343a3a2f33322d3438203d3e20323636303836.roa (raw, json)
Hash identifier:          UtnkWMyOpTASoRVgevG/V2DqwAId8EehIMrGHfkIuMg=
Subject key identifier:   D9:E1:BA:38:7F:F3:01:53:87:A4:41:9E:E0:4E:79:99:34:4B:3C:2B
Certificate issuer:       /CN=49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3
Certificate serial:       40DD2567A6DB203B0064D3D83E92DE3837854DCC
Authority key identifier: 49:BD:49:68:7B:0A:FF:9D:AA:A0:1E:28:75:F9:DA:31:5A:BF:7E:A3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3438203d3e20323636303836.roa
Signing time:             Mon 12 Sep 2022 23:13:31 +0000
ROA not before:           Mon 12 Sep 2022 23:08:31 +0000
ROA not after:            Mon 11 Sep 2023 23:13:31 +0000
asID:                     266086
IP address blocks:        2804:3a64::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:dd:25:67:a6:db:20:3b:00:64:d3:d8:3e:92:de:38:37:85:4d:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3
        Validity
            Not Before: Sep 12 23:08:31 2022 GMT
            Not After : Sep 11 23:13:31 2023 GMT
        Subject: CN=D9E1BA387FF3015387A4419EE04E7999344B3C2B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:59:62:a7:75:2f:7b:6d:6b:bb:b8:aa:79:79:
                    e8:44:ef:56:10:70:f8:49:1f:68:48:eb:97:c7:90:
                    2e:bb:65:6c:10:15:a1:89:8c:59:db:a6:de:4c:ac:
                    87:58:3e:2f:d9:cd:87:59:55:8c:b3:03:21:95:08:
                    14:f9:5d:d3:9f:c8:25:71:d2:0f:c3:fa:5c:4a:8c:
                    f7:a2:cc:be:7b:a9:dc:ef:42:a7:e7:85:c0:31:09:
                    bd:47:b2:b1:c6:df:f7:1a:24:b6:dd:2e:22:41:c0:
                    b8:08:31:83:78:fd:f6:cf:98:71:7e:60:93:19:c4:
                    c4:f6:93:d1:ae:fd:5d:bd:b3:65:b9:e4:cf:f1:3b:
                    22:64:8f:5f:44:dc:28:59:4d:b0:56:7b:7d:92:88:
                    92:b7:c0:15:1f:ca:62:dc:bb:21:9a:ff:63:db:a4:
                    b7:93:df:6b:bd:24:30:44:cd:31:32:1d:88:db:61:
                    5b:e9:2c:f8:b1:c6:68:51:3d:e0:19:26:c4:fa:c2:
                    bf:ae:99:17:35:0b:9b:92:fd:ac:16:26:5b:7c:4d:
                    c0:1e:c3:ee:bb:04:0a:34:53:1d:11:74:cb:a9:ca:
                    3c:f8:db:3a:06:bc:e7:72:a3:6e:28:85:92:a7:54:
                    94:d0:7a:74:0c:47:96:d5:30:17:91:5a:8a:72:ed:
                    be:53
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D9:E1:BA:38:7F:F3:01:53:87:A4:41:9E:E0:4E:79:99:34:4B:3C:2B
            X509v3 Authority Key Identifier:
                keyid:49:BD:49:68:7B:0A:FF:9D:AA:A0:1E:28:75:F9:DA:31:5A:BF:7E:A3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/49BD49687B0AFF9DAAA01E2875F9DA315ABF7EA3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/9xvLcRDGUD2PCTAtKR2vmSx8fhmKuPMS1eF21EAsfyDH/0/323830343a336136343a3a2f33322d3438203d3e20323636303836.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a64::/32

    Signature Algorithm: sha256WithRSAEncryption
         85:ca:45:b5:f8:1f:4f:f7:c3:97:94:b7:7b:1a:fc:b9:52:dd:
         de:b7:c4:0a:f0:c5:11:d4:9a:5b:fa:c6:26:d9:8b:f8:18:21:
         3b:7a:71:14:85:30:96:d4:8b:37:68:73:09:a4:a1:18:dc:7e:
         3a:f9:b0:46:c8:73:76:b3:3e:74:5b:3b:ea:83:aa:12:83:95:
         e4:af:41:96:b3:8a:a7:47:5d:a9:b3:24:66:1f:70:70:6c:80:
         4a:d1:24:48:3d:6d:2b:d0:78:fe:e4:7d:d6:e6:67:48:e1:4d:
         5a:d7:40:97:b0:d3:c2:14:af:0a:4a:83:44:14:2a:2c:46:05:
         14:08:e4:e6:d7:67:02:3e:66:08:d5:3a:38:6a:45:fe:4f:b2:
         d1:ba:ab:42:82:9c:83:13:53:6e:24:29:9a:8d:e7:48:88:6c:
         0a:2f:e3:06:83:2c:af:79:b8:c9:1e:be:82:e9:d6:c2:e8:68:
         8e:dd:5a:b2:c7:75:16:87:4f:5e:e5:62:9b:c7:1d:48:a8:79:
         72:d6:e5:b1:2b:f9:f1:48:c8:41:fc:fc:f4:0b:7f:a0:05:22:
         ab:ff:92:f4:e2:0c:da:aa:b6:1c:d9:7c:aa:38:01:02:1c:0a:
         20:fc:9e:2e:84:40:bb:6d:54:0c:75:13:84:da:53:d0:c9:b5:
         64:a1:92:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org