Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/323830343a3663343a3a2f33362d313238203d3e20323632383933.roa
File:                     323830343a3663343a3a2f33362d313238203d3e20323632383933.roa (raw, json)
Hash identifier:          9hekyQaGh2fH9to0OHkA8PUA8YVsAzuEanxDRyu+/ns=
Subject key identifier:   1C:B2:37:0C:C3:2A:68:68:28:6C:8F:11:2A:2E:82:91:D4:4B:30:FA
Certificate issuer:       /CN=4502CD1B49644F16402D764130FC71B676EC91F0
Certificate serial:       0B3F42C3C3E490F2A02F06A3A7FEA1FE46EC977F
Authority key identifier: 45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/323830343a3663343a3a2f33362d313238203d3e20323632383933.roa
Signing time:             Wed 31 Jan 2024 12:36:51 +0000
ROA not before:           Wed 31 Jan 2024 12:31:51 +0000
ROA not after:            Wed 29 Jan 2025 12:36:51 +0000
asID:                     262893
IP address blocks:        2804:6c4::/36 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:3f:42:c3:c3:e4:90:f2:a0:2f:06:a3:a7:fe:a1:fe:46:ec:97:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4502CD1B49644F16402D764130FC71B676EC91F0
        Validity
            Not Before: Jan 31 12:31:51 2024 GMT
            Not After : Jan 29 12:36:51 2025 GMT
        Subject: CN=1CB2370CC32A6868286C8F112A2E8291D44B30FA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cf:a5:f1:fa:bd:3b:41:92:01:ab:e9:0b:4a:bd:
                    4a:60:f5:37:b5:8c:aa:73:2e:37:60:49:1f:b3:cb:
                    9e:d2:5e:bb:fc:d8:dd:10:bc:d5:a8:9b:4a:b9:78:
                    6a:da:27:85:f5:ff:4a:7c:f9:f9:93:45:68:40:f8:
                    5a:8c:7b:7d:e5:26:1a:09:44:b5:80:7a:08:ec:b1:
                    87:a0:a1:4f:ce:92:42:ca:e3:97:b2:45:c2:91:7e:
                    9a:0a:30:38:50:3f:f7:01:93:8a:b9:77:c8:5b:f1:
                    c3:16:80:ca:60:34:f5:fc:f3:5d:47:33:9b:ce:9b:
                    c6:64:33:d5:d6:18:7b:f6:7e:64:b9:88:fb:27:34:
                    62:2d:8d:05:8c:4f:90:da:43:99:f0:69:c7:9d:73:
                    c5:fa:68:fe:7f:fb:0b:82:eb:b7:a0:07:47:1c:c9:
                    60:aa:db:d2:8d:5b:d2:49:ed:4a:71:1f:f9:c3:d9:
                    98:ba:20:84:16:75:dc:b2:04:89:10:7a:f9:16:94:
                    4a:c7:16:85:ee:b2:27:ff:f3:a1:c6:84:7b:13:4d:
                    9e:d6:97:ae:4a:5b:e9:f2:59:9f:36:3a:6d:c2:76:
                    b1:05:37:47:ee:71:f6:0e:27:0d:c1:fc:99:40:b1:
                    40:d3:01:9c:91:77:e8:7a:aa:3b:5b:3b:db:a3:85:
                    c3:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1C:B2:37:0C:C3:2A:68:68:28:6C:8F:11:2A:2E:82:91:D4:4B:30:FA
            X509v3 Authority Key Identifier:
                keyid:45:02:CD:1B:49:64:4F:16:40:2D:76:41:30:FC:71:B6:76:EC:91:F0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/4502CD1B49644F16402D764130FC71B676EC91F0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4502CD1B49644F16402D764130FC71B676EC91F0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AMFFnopgdGLc3HQq35JMYpUMFHDSMkyAK8SkK1Yv27o7/0/323830343a3663343a3a2f33362d313238203d3e20323632383933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6c4::/36

    Signature Algorithm: sha256WithRSAEncryption
         a1:34:7b:b0:16:d8:c8:20:71:90:d3:58:1a:3a:97:d7:c6:b2:
         7c:b2:15:18:6e:9f:fa:fe:be:14:37:3b:a3:cc:63:ed:d6:50:
         a0:9a:24:db:c9:2a:47:21:4c:86:78:8b:86:c8:3c:a3:56:7f:
         c8:89:60:48:42:25:9c:2b:32:52:69:02:f9:87:57:e9:3a:2f:
         b2:03:36:33:68:04:6a:e4:7c:73:74:d4:6c:fd:88:df:ce:10:
         f8:db:f6:34:44:9b:77:d3:69:ab:cf:bb:3c:ad:18:b6:e6:0e:
         09:b8:83:aa:f9:d3:80:0c:27:d3:69:a9:ef:00:82:b6:73:21:
         57:06:30:37:86:60:2d:20:36:4c:45:52:3c:d2:49:34:be:ce:
         51:bb:24:05:39:93:d6:15:db:af:b2:fa:9e:51:f6:45:cc:e1:
         4a:54:f3:aa:3f:60:3f:ad:21:f2:0a:12:4c:1b:b9:c3:0a:ba:
         76:ac:50:52:6c:3b:ee:6a:32:a0:40:7f:76:26:70:fd:92:9d:
         81:02:88:c6:56:7f:92:1d:70:1a:2f:8d:c2:72:db:e3:32:f7:
         37:af:50:73:f1:0a:c9:a5:21:f9:84:94:45:60:a9:41:3a:79:
         dd:7f:1e:60:9f:be:d9:c8:55:09:e1:bf:76:c5:f0:ab:31:39:
         31:5c:51:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org