Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a3a2f33322d3634203d3e20323632393737.roa
File:                     323830343a313661343a3a2f33322d3634203d3e20323632393737.roa (raw, json)
Hash identifier:          KxOA/E/O6lh8aol80Yg3C769ju4NLRPchmvXe55h5Hc=
Subject key identifier:   38:81:95:50:0D:19:18:B9:73:20:8C:EC:66:0E:46:59:85:1C:21:8C
Certificate issuer:       /CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
Certificate serial:       2720ABE0543CD0D13A0CEB30CB9B1C37FE6B66A1
Authority key identifier: 11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a3a2f33322d3634203d3e20323632393737.roa
Signing time:             Thu 28 Dec 2023 13:16:46 +0000
ROA not before:           Thu 28 Dec 2023 13:11:46 +0000
ROA not after:            Thu 26 Dec 2024 13:16:46 +0000
asID:                     262977
IP address blocks:        2804:16a4::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            27:20:ab:e0:54:3c:d0:d1:3a:0c:eb:30:cb:9b:1c:37:fe:6b:66:a1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11BEC0E8B28B59B9D451F141C4499D9FB3EC2251
        Validity
            Not Before: Dec 28 13:11:46 2023 GMT
            Not After : Dec 26 13:16:46 2024 GMT
        Subject: CN=388195500D1918B973208CEC660E4659851C218C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d7:0e:47:77:2f:44:bd:e7:79:12:a1:cf:54:18:
                    22:66:da:7d:3f:44:ce:69:ce:62:ab:e1:6b:92:58:
                    a7:56:12:1e:aa:40:c6:94:84:aa:ff:49:9d:45:2c:
                    72:ca:29:a1:fe:2a:62:ce:d5:51:66:ce:07:da:f5:
                    ab:e6:b5:66:76:f1:5c:54:3e:8a:6e:20:d6:57:59:
                    c0:4f:37:e1:37:68:32:85:0f:e7:08:86:c2:d4:e4:
                    39:20:ed:98:f6:79:f4:87:c5:5d:61:20:6c:e2:b7:
                    f1:82:c1:d2:dc:1e:47:bf:a8:be:58:4c:0f:06:32:
                    67:23:a4:33:88:b0:d0:f8:80:a7:59:df:e3:85:f8:
                    28:c8:92:82:25:e2:b1:44:29:57:2f:88:74:f3:0d:
                    98:c2:72:92:97:f9:f3:f9:0c:44:a3:4a:26:86:8b:
                    e2:30:1b:e1:46:7e:bf:7e:01:2a:bf:df:d2:51:f9:
                    71:49:b6:20:cb:d6:7e:3e:52:c8:ed:38:c7:e5:8b:
                    6b:c6:85:be:57:52:55:24:d6:b6:b1:d3:6f:67:e1:
                    e4:98:1f:b9:59:85:53:62:e5:4f:21:9f:50:d1:0d:
                    20:d8:4c:ae:de:67:34:60:be:16:70:2f:98:0a:fb:
                    94:fe:df:20:24:27:26:87:77:81:1f:f8:16:12:42:
                    af:2b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                38:81:95:50:0D:19:18:B9:73:20:8C:EC:66:0E:46:59:85:1C:21:8C
            X509v3 Authority Key Identifier:
                keyid:11:BE:C0:E8:B2:8B:59:B9:D4:51:F1:41:C4:49:9D:9F:B3:EC:22:51

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11BEC0E8B28B59B9D451F141C4499D9FB3EC2251.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A8kzdyptWzwZoyZeCdW62EoxQ47PCGNBNo9PzgXAQ2j/0/323830343a313661343a3a2f33322d3634203d3e20323632393737.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:16a4::/32

    Signature Algorithm: sha256WithRSAEncryption
         5a:52:24:b2:a6:0f:3c:ee:e3:4c:b4:ff:41:00:8d:10:3d:ec:
         2e:81:fe:13:00:c9:38:d2:7c:da:5e:e9:31:66:6a:90:c6:70:
         ff:fb:23:f5:85:6b:10:79:33:9d:e7:d5:68:76:3a:37:29:dd:
         3f:d7:a2:92:73:da:46:07:b2:45:1d:23:90:b5:b2:42:c8:dd:
         7a:0c:6c:0c:ae:6a:3b:2f:35:29:6d:db:71:d3:ba:43:c9:e8:
         4a:86:63:9b:6f:ec:2d:a9:c5:c8:69:e9:11:0a:58:6b:ab:0d:
         9f:d5:82:09:fd:59:f0:94:49:ef:bb:29:53:82:d2:fb:73:a9:
         d3:db:cc:c7:81:7a:08:66:4a:cc:f7:be:43:55:47:1b:b5:2e:
         33:b1:30:71:84:6e:fd:e4:d0:03:fc:20:74:83:c5:3f:df:ef:
         42:0b:a9:5b:97:20:fb:81:bb:c3:bf:5c:33:ab:fe:a0:e1:d8:
         b4:bf:c0:2c:81:b5:18:81:93:68:a1:16:18:52:09:54:47:4b:
         5e:0a:ad:2b:87:83:04:3d:6b:30:cd:7c:aa:23:51:d7:51:35:
         8f:b4:92:4a:58:8c:2c:3b:7c:08:60:f3:d2:5e:dc:52:c1:d8:
         89:d5:66:9a:6f:6e:e7:1a:1f:b0:28:27:73:bd:10:ec:cf:cf:
         fa:e2:8c:d9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:10 2024 by rpki-client on console-fra.rpki-client.org