Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/323830343a323464343a3a2f33322d3438203d3e203532373831.roa
File:                     323830343a323464343a3a2f33322d3438203d3e203532373831.roa (raw, json)
Hash identifier:          XNCSA75qUCvG8YJEhnUBf0+fEEJrVTguMZtcTbGHmlg=
Subject key identifier:   F7:BE:9C:7C:6F:C1:90:B2:9B:0C:47:19:80:04:1E:06:53:D2:43:D5
Certificate issuer:       /CN=B0D7C20179C737D051AA2FFD67482F3882CAF00F
Certificate serial:       32910FA7B92508E7FDDBB34A957181CDE52A1381
Authority key identifier: B0:D7:C2:01:79:C7:37:D0:51:AA:2F:FD:67:48:2F:38:82:CA:F0:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0D7C20179C737D051AA2FFD67482F3882CAF00F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/323830343a323464343a3a2f33322d3438203d3e203532373831.roa
Signing time:             Tue 06 Jun 2023 16:34:00 +0000
ROA not before:           Tue 06 Jun 2023 16:29:00 +0000
ROA not after:            Tue 04 Jun 2024 16:34:00 +0000
asID:                     52781
IP address blocks:        2804:24d4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            32:91:0f:a7:b9:25:08:e7:fd:db:b3:4a:95:71:81:cd:e5:2a:13:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=B0D7C20179C737D051AA2FFD67482F3882CAF00F
        Validity
            Not Before: Jun  6 16:29:00 2023 GMT
            Not After : Jun  4 16:34:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c2:72:f0:a1:e9:2e:d6:6f:77:53:5c:79:19:63:
                    cd:9f:6d:44:e2:aa:27:62:63:ea:51:5b:8b:34:37:
                    72:62:94:9a:39:a3:b9:34:f7:4f:43:3e:e2:eb:66:
                    da:84:29:a4:f0:7d:fb:03:c1:75:4c:25:2b:65:c1:
                    75:25:ec:5e:a3:79:ae:b4:8e:ee:63:c7:c2:93:f7:
                    95:76:52:59:9e:93:0c:df:cf:af:c2:ff:79:c8:e5:
                    31:a9:99:bd:0d:0f:d4:63:0a:d9:9f:b4:77:08:f0:
                    99:bb:5d:be:f8:1f:4c:77:e3:8a:a1:0a:fe:2a:0e:
                    b9:27:a1:74:31:bc:d7:09:b2:ea:70:3f:9d:0f:39:
                    10:47:7b:6f:fb:a7:de:06:f5:28:93:2b:45:a2:f5:
                    05:51:74:68:8e:33:6e:ea:a0:0a:7a:1b:66:47:ca:
                    90:9c:f4:bc:d2:bf:67:d8:1e:51:74:45:b0:ad:1f:
                    df:33:89:82:ac:74:ae:38:8c:66:2e:72:24:b9:de:
                    12:33:83:7b:c2:c7:9c:11:ce:60:c7:2c:a8:77:ee:
                    59:a7:34:52:fb:28:76:55:58:6f:98:17:74:3b:ff:
                    67:1b:cc:cd:f5:36:0c:05:c3:e2:dc:1d:e9:a9:a7:
                    9d:5e:72:ae:f4:e1:b5:b1:8f:89:dd:9b:e8:d0:4e:
                    39:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:BE:9C:7C:6F:C1:90:B2:9B:0C:47:19:80:04:1E:06:53:D2:43:D5
            X509v3 Authority Key Identifier:
                keyid:B0:D7:C2:01:79:C7:37:D0:51:AA:2F:FD:67:48:2F:38:82:CA:F0:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/B0D7C20179C737D051AA2FFD67482F3882CAF00F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/B0D7C20179C737D051AA2FFD67482F3882CAF00F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AET42FBtCa2fwcZPu1YR98KdPHi1oXiTSivtofnU8Dny/0/323830343a323464343a3a2f33322d3438203d3e203532373831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:24d4::/32

    Signature Algorithm: sha256WithRSAEncryption
         1c:0e:56:78:4c:e7:1b:07:1e:10:c4:0a:df:53:04:e7:d6:79:
         f2:72:93:d0:c9:5b:44:40:1c:ef:9d:51:aa:5d:1d:b6:c5:6c:
         72:4f:53:bb:c8:55:8f:85:4f:49:d1:22:a8:bd:4b:c7:0b:96:
         c4:ae:f4:3e:d3:1e:03:dd:00:9b:72:4c:11:a0:8a:d8:7a:41:
         10:c7:7c:1f:8a:27:b5:60:c1:4f:29:c2:4d:a5:2a:67:cd:17:
         61:76:57:e0:1c:52:e5:05:f5:ca:c0:e0:1d:d8:f9:1b:17:5b:
         59:f7:02:68:c4:d0:4a:eb:55:b7:90:db:f8:a2:a8:a4:20:5f:
         82:f7:02:a6:15:9e:ca:fd:47:43:a4:a1:f2:43:3f:06:f8:3d:
         8a:69:42:ed:06:7a:2a:37:72:75:45:f4:d6:19:55:94:6b:1e:
         51:40:ab:f8:9b:4e:8f:ef:c4:ff:7a:81:49:36:55:9c:45:c4:
         6e:d0:fa:44:7d:e0:a9:db:d1:85:81:3e:d1:c1:7a:e6:a6:f7:
         2f:b8:a7:44:96:73:ed:90:18:20:c1:32:f6:31:d0:4a:37:cb:
         fb:d8:b9:ad:9f:86:85:1c:86:ac:b0:e7:08:43:0e:8d:b2:da:
         af:bb:80:9d:9e:d1:e1:93:63:c8:fa:91:a5:c8:5e:38:86:2b:
         55:0e:c8:1d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:29 2024 by rpki-client on console-ams.rpki-client.org