Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3230303a3a2f34382d3438203d3e203533313138.roa
File:                     323830343a3266343a3230303a3a2f34382d3438203d3e203533313138.roa (raw, json)
Hash identifier:          RKQssanhF++fOfzXAVWjHOumN4dN9q1JMuAbcQ0k4B8=
Subject key identifier:   EB:4D:1B:79:2D:09:E4:6A:30:99:B8:56:78:AE:24:84:E6:37:DC:7A
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       3B35C9BA4C04658FCD7436A30DB680EE1D990C22
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3230303a3a2f34382d3438203d3e203533313138.roa
Signing time:             Tue 08 Aug 2023 20:00:00 +0000
ROA not before:           Tue 08 Aug 2023 19:55:00 +0000
ROA not after:            Tue 06 Aug 2024 20:00:00 +0000
asID:                     53118
IP address blocks:        2804:2f4:200::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:35:c9:ba:4c:04:65:8f:cd:74:36:a3:0d:b6:80:ee:1d:99:0c:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Aug  8 19:55:00 2023 GMT
            Not After : Aug  6 20:00:00 2024 GMT
        Subject: CN=EB4D1B792D09E46A3099B85678AE2484E637DC7A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:af:2e:a0:26:a4:f1:13:a0:0d:f8:7c:c2:bb:4a:
                    aa:09:4f:5f:19:0c:0f:1c:2f:3e:0d:a7:7f:61:63:
                    f9:63:bb:20:0f:2c:e9:80:0b:77:4a:0c:a9:bd:7c:
                    b6:74:f0:e4:c6:19:f3:2b:0e:29:f1:8a:fd:d1:62:
                    98:65:ea:77:28:dc:1e:f8:69:83:ff:19:92:b0:67:
                    d6:bb:cc:bc:c1:93:27:d7:73:c4:2a:41:39:cb:6e:
                    47:5b:6d:9f:be:69:45:43:e9:10:3b:25:a3:ad:64:
                    de:83:12:ee:15:f9:88:0f:de:ff:1f:e1:fa:6d:87:
                    15:d4:da:2f:d9:47:33:30:df:ed:86:ab:33:e2:5e:
                    cd:4b:ec:16:24:b0:d7:a5:ee:6f:a0:a2:c7:5f:89:
                    69:40:ed:ee:be:b4:3f:6f:8d:d1:70:4f:4d:3b:08:
                    0b:b5:88:35:74:bc:b6:28:90:ec:ea:a3:36:06:91:
                    6f:27:f2:80:7a:b3:a6:27:bb:10:d3:22:94:7e:aa:
                    28:a2:b2:29:cb:7f:45:8b:22:82:20:36:8d:3b:df:
                    e8:cf:be:1d:73:2a:1c:16:35:0d:e5:a0:d8:b7:8e:
                    2e:0c:6b:aa:54:50:ff:0e:18:0d:9f:8a:c2:c4:7c:
                    4d:96:80:0f:f8:b5:a9:e4:59:f6:49:79:19:a2:5d:
                    74:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EB:4D:1B:79:2D:09:E4:6A:30:99:B8:56:78:AE:24:84:E6:37:DC:7A
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a3230303a3a2f34382d3438203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f4:200::/48

    Signature Algorithm: sha256WithRSAEncryption
         78:d0:c1:08:9b:40:78:68:0d:92:cd:65:48:c6:8f:b5:63:84:
         a9:b0:5e:eb:c2:a8:06:b5:e2:85:bf:05:0e:5c:0a:f3:da:47:
         46:35:5c:01:80:bf:ad:43:17:e5:ae:0f:f7:51:cb:87:57:a1:
         0d:47:68:cd:25:9f:6f:7e:8e:b4:02:e3:2e:5d:7c:49:a7:8e:
         9e:2d:d9:12:95:3a:fa:e5:ab:31:ab:5f:d5:fe:95:41:8f:44:
         1a:d6:31:cd:20:3b:9e:a1:74:cd:4d:5c:ac:6f:19:0b:4e:8e:
         45:d8:b9:1c:22:cc:da:31:6e:ac:ca:8c:b4:0d:32:ef:d1:3e:
         a6:9c:1f:71:1e:95:96:12:16:8d:a1:d2:fd:37:c8:15:c8:b1:
         c2:18:9f:e3:90:15:32:39:f1:bb:45:d8:52:fa:1c:05:d7:05:
         4f:2b:26:a1:24:66:59:0c:25:10:4d:60:40:af:13:a5:64:5c:
         ee:5c:e7:87:b7:e4:b9:7c:83:d9:7b:75:79:a4:1f:7d:09:1a:
         be:50:46:5b:81:d8:27:a1:10:93:87:cc:16:d2:ac:99:15:7e:
         26:1e:aa:73:dd:d3:ef:f1:24:58:7c:f3:43:47:91:42:e0:ec:
         6e:9d:1d:aa:82:a8:30:15:46:1b:bc:d3:f9:c6:14:7b:a0:77:
         67:81:61:0f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org