Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a61303a3a2f34382d3438203d3e203533313138.roa
File:                     323830343a3266343a61303a3a2f34382d3438203d3e203533313138.roa (raw, json)
Hash identifier:          phs/YKtVZ2BpHVxPypLHNI/DEFq9NZGqgb8YmkdJD7g=
Subject key identifier:   B3:06:3B:94:31:40:6B:42:D2:98:7F:EC:AE:E7:93:8C:4D:77:DB:81
Certificate issuer:       /CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
Certificate serial:       640358BC00C4B6EEDB42936DC87C5E426514A799
Authority key identifier: 95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a61303a3a2f34382d3438203d3e203533313138.roa
Signing time:             Thu 27 Jul 2023 14:24:31 +0000
ROA not before:           Thu 27 Jul 2023 14:19:31 +0000
ROA not after:            Thu 25 Jul 2024 14:24:31 +0000
asID:                     53118
IP address blocks:        2804:2f4:a0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:03:58:bc:00:c4:b6:ee:db:42:93:6d:c8:7c:5e:42:65:14:a7:99
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=95ED1DAC166F71DC46F97C615E9287D7D6F9EA91
        Validity
            Not Before: Jul 27 14:19:31 2023 GMT
            Not After : Jul 25 14:24:31 2024 GMT
        Subject: CN=B3063B9431406B42D2987FECAEE7938C4D77DB81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:50:fc:3d:b0:be:da:6e:7e:ce:6e:98:b6:8d:
                    55:7e:0a:f2:7c:f8:c4:01:5c:70:0a:23:a0:1e:ce:
                    b7:9b:9c:e7:c4:f8:91:23:88:b0:9f:49:46:9a:74:
                    bf:b7:25:d9:f4:91:2e:e7:bb:02:e9:5a:e5:c3:7a:
                    0f:c7:32:08:8f:2f:a5:61:3a:09:1f:ff:dc:10:34:
                    c5:11:41:af:f4:6c:b9:92:f9:82:e8:94:08:7d:f2:
                    a0:09:0d:ca:99:ea:fe:27:ee:bf:91:05:dd:5e:87:
                    47:1e:04:06:d2:12:8e:2c:c0:09:79:1c:cd:22:af:
                    d1:ee:62:80:9c:fb:75:90:aa:7a:87:bb:ac:34:0d:
                    ea:39:b8:f6:a5:ba:1b:cb:d4:2d:20:e7:b9:2b:17:
                    39:be:ad:05:46:c4:c4:4c:b0:98:45:6a:ae:b4:eb:
                    77:a5:8a:ef:30:44:f2:f5:ad:38:85:28:07:08:7a:
                    15:d4:47:10:c2:c3:2b:2e:9b:9f:4f:b3:ae:a2:fa:
                    9a:7e:bb:6e:e3:7f:f4:89:c4:89:14:0f:19:fe:99:
                    d1:29:17:ef:7e:44:95:d9:ed:a5:bf:3a:84:d9:99:
                    c3:3f:8d:ed:d3:d0:68:ec:ab:27:48:05:a1:44:dc:
                    47:29:a6:d0:10:80:1c:cf:f9:9b:bd:50:8e:de:4d:
                    06:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B3:06:3B:94:31:40:6B:42:D2:98:7F:EC:AE:E7:93:8C:4D:77:DB:81
            X509v3 Authority Key Identifier:
                keyid:95:ED:1D:AC:16:6F:71:DC:46:F9:7C:61:5E:92:87:D7:D6:F9:EA:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/95ED1DAC166F71DC46F97C615E9287D7D6F9EA91.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ATG1sL9rDX6hjXR37axsXnShrEQhujZgVwBSJaiaJPcj/0/323830343a3266343a61303a3a2f34382d3438203d3e203533313138.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2f4:a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         44:77:2e:3f:c3:b1:12:31:c2:3f:4a:4c:45:94:50:66:79:9d:
         73:65:eb:bc:cd:9c:48:e3:53:5c:e8:9f:2f:57:27:95:43:af:
         07:bb:8c:9f:ca:92:f8:32:11:bc:5e:95:d7:1a:2e:c5:e3:ba:
         f5:5c:f3:88:b8:7b:38:e6:60:c3:fc:ac:ef:7d:4b:f9:d0:f8:
         45:f8:60:80:06:56:d8:23:3d:36:4a:b3:5f:33:52:e4:a7:bb:
         ef:20:14:51:1c:e9:23:bf:1a:c6:05:3e:c5:a6:44:67:ba:1d:
         81:20:2d:9d:51:67:c7:c1:c2:a5:81:33:3a:30:f4:9b:f7:e7:
         80:b6:99:cf:6a:30:b9:66:dd:a7:ba:1f:b1:f6:9c:ed:1a:cf:
         89:74:d1:ad:e5:02:a5:7d:72:2f:49:65:89:ce:83:35:b5:33:
         7f:91:c7:13:4e:c4:87:e2:17:84:b8:83:c7:b9:8b:d4:8c:ff:
         b0:c7:6b:be:ba:77:a5:73:29:54:3e:e1:fb:e5:c8:4b:db:79:
         84:1f:f6:2b:b3:a3:6f:56:67:fc:f0:d0:c3:09:15:a3:ca:a8:
         eb:04:8a:15:0a:6e:2b:58:96:14:8f:30:91:8d:5b:f2:dd:75:
         1d:f1:b8:05:7a:62:a6:10:63:1f:c0:5a:54:e3:0d:50:6f:ce:
         21:ad:74:a1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:12 2024 by rpki-client on console-fra.rpki-client.org