Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/323830343a336238633a3a2f33322d3634203d3e20323636313536.roa
File:                     323830343a336238633a3a2f33322d3634203d3e20323636313536.roa (raw, json)
Hash identifier:          1PX81RUtbh6B7Px9PoEdqTY29xJkVcIzMdBuolxrRfU=
Subject key identifier:   53:D1:37:4A:30:F1:23:D2:55:A7:4C:EA:A7:4D:68:CB:D2:84:DA:1F
Certificate issuer:       /CN=1BC4B50D3DF383BD64D2A0792151CD35014457CA
Certificate serial:       3CE4595AE7AB03F45101B2621CC5E9F283DDD428
Authority key identifier: 1B:C4:B5:0D:3D:F3:83:BD:64:D2:A0:79:21:51:CD:35:01:44:57:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/323830343a336238633a3a2f33322d3634203d3e20323636313536.roa
Signing time:             Fri 06 Oct 2023 22:16:51 +0000
ROA not before:           Fri 06 Oct 2023 22:11:51 +0000
ROA not after:            Fri 04 Oct 2024 22:16:51 +0000
asID:                     266156
IP address blocks:        2804:3b8c::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:e4:59:5a:e7:ab:03:f4:51:01:b2:62:1c:c5:e9:f2:83:dd:d4:28
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BC4B50D3DF383BD64D2A0792151CD35014457CA
        Validity
            Not Before: Oct  6 22:11:51 2023 GMT
            Not After : Oct  4 22:16:51 2024 GMT
        Subject: CN=53D1374A30F123D255A74CEAA74D68CBD284DA1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:be:6b:fc:f5:9c:fb:5b:34:84:1b:9b:88:8f:
                    8c:8e:41:b9:25:85:f4:b4:eb:12:a8:02:71:b7:08:
                    f5:06:7d:e3:35:ba:9b:a6:e6:01:cd:bd:ea:f8:5e:
                    22:16:66:7d:5c:ac:cf:ff:4a:16:7f:3a:b2:4e:35:
                    ab:da:48:dc:c9:0a:34:0d:7b:6b:00:40:36:e0:f2:
                    a5:bc:ae:fe:9e:e3:61:7a:8e:e0:9f:c4:2d:f6:52:
                    e4:60:52:fa:fa:08:d5:e4:44:8e:ff:d3:67:1d:98:
                    4f:ef:da:fa:e3:a8:ee:dd:d2:b2:c5:5a:14:39:22:
                    a8:a2:b7:26:92:35:5f:34:1b:1f:bf:5c:f7:e1:be:
                    fe:8c:3f:0a:b9:87:10:c1:82:b0:f9:fc:e7:de:a8:
                    04:c9:c1:7d:7e:7f:5a:35:b8:5c:bf:50:be:a5:f6:
                    95:aa:78:3e:d9:07:16:87:f4:6c:45:2b:bd:a1:0a:
                    d8:1e:71:fc:7e:87:b4:7d:0a:4a:7a:a7:62:c4:69:
                    f9:34:7d:b4:ce:5d:bd:74:b1:3e:02:6e:61:a4:51:
                    bf:ff:29:fc:b6:06:1d:c8:d7:ce:3e:50:89:ca:10:
                    d1:31:d2:79:c5:6c:bd:b9:7a:8a:20:0b:a0:93:9b:
                    eb:6f:73:eb:0e:21:a4:86:cb:7e:71:d4:ee:3c:8e:
                    9b:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                53:D1:37:4A:30:F1:23:D2:55:A7:4C:EA:A7:4D:68:CB:D2:84:DA:1F
            X509v3 Authority Key Identifier:
                keyid:1B:C4:B5:0D:3D:F3:83:BD:64:D2:A0:79:21:51:CD:35:01:44:57:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BC4B50D3DF383BD64D2A0792151CD35014457CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A4JCSsRQtVzxKtKwE9zfEFeggccVV8NDRCVJad8wwdvm/0/323830343a336238633a3a2f33322d3634203d3e20323636313536.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3b8c::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:f4:bc:ee:f8:e0:27:63:e0:3e:fa:58:c4:d6:09:f9:a2:51:
         c8:9c:13:34:be:d9:dc:69:5a:4e:13:e6:97:e8:be:f1:e7:71:
         de:5c:70:25:e7:5b:e8:8a:87:69:9c:6e:dd:15:49:f0:c9:35:
         cb:a6:21:72:d8:0c:04:ee:35:2f:46:dc:63:f2:75:3c:31:e8:
         f3:40:57:e2:8f:d3:fb:69:88:13:d7:b6:ce:4b:98:f9:97:16:
         d9:dc:07:2a:0a:72:19:69:de:f5:65:d7:ff:38:2e:84:05:ee:
         b5:1d:22:5a:3e:71:2a:c3:d8:ec:89:ec:e9:ad:ce:7e:fe:00:
         8e:9f:d1:a4:53:e2:6f:25:c6:d1:b2:a5:02:be:f4:fa:b5:28:
         75:9b:a6:bf:a9:06:95:11:cd:f2:52:b2:a1:ca:2b:65:7f:27:
         e2:cd:3c:57:0e:12:16:f2:33:cb:3a:cb:0b:5f:6a:e6:c0:85:
         b6:9c:98:c0:7e:b4:29:5a:40:09:4b:81:90:be:9f:94:d5:13:
         83:12:0a:c2:1c:93:8f:7f:88:5a:42:fd:76:85:49:87:ee:14:
         e8:00:6d:04:6b:50:60:6e:c4:47:d0:75:4d:9a:ba:cf:aa:84:
         8e:0f:b4:a6:86:73:79:6f:b9:93:67:b6:be:c6:c7:b5:a0:b7:
         36:96:a4:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org