Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f34302d3430203d3e20323632323933.roa
File:                     323830343a6138303a3a2f34302d3430203d3e20323632323933.roa (raw, json)
Hash identifier:          dz3+EpwqVDYVpTRRvwxvqho6ymd2W5vHjT99CJp/8Go=
Subject key identifier:   59:34:02:F5:E6:B4:2E:40:3D:0A:51:34:34:71:F6:2A:6A:19:B9:21
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       71D3112080A42717A02C95B5A0B2D4DF76AABB86
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f34302d3430203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:41 +0000
ROA not before:           Tue 02 Jan 2024 21:11:41 +0000
ROA not after:            Tue 31 Dec 2024 21:16:41 +0000
asID:                     262293
IP address blocks:        2804:a80::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:d3:11:20:80:a4:27:17:a0:2c:95:b5:a0:b2:d4:df:76:aa:bb:86
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:41 2024 GMT
            Not After : Dec 31 21:16:41 2024 GMT
        Subject: CN=593402F5E6B42E403D0A51343471F62A6A19B921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:fc:29:d7:be:88:64:47:e5:5e:95:64:37:37:
                    19:ca:7b:ab:32:3e:64:ed:8c:3c:4b:1b:6c:5e:5f:
                    23:95:61:12:f8:f0:cd:03:61:94:da:76:e6:ed:8f:
                    1d:a3:c1:2c:39:13:74:60:c4:64:d1:23:3b:47:ed:
                    02:68:92:cb:18:86:46:44:7f:3f:42:77:78:0b:9f:
                    b4:fc:93:6f:88:e4:fd:9d:14:b7:c4:65:e3:9d:70:
                    60:c2:53:f7:95:c3:ac:f6:63:78:8b:06:a9:66:62:
                    25:5b:fc:8a:7c:08:ef:f6:87:bf:81:96:cf:9d:a3:
                    96:46:d1:39:27:03:a8:49:28:06:51:5b:46:5a:2a:
                    7d:40:8d:33:75:b6:93:ce:11:40:18:f1:de:7e:be:
                    d6:ab:5b:0b:19:32:c0:7d:63:6a:d2:ca:d3:f7:29:
                    62:0e:59:5c:44:cd:28:fc:5a:14:9f:ed:03:bb:e1:
                    8c:41:69:39:54:ff:52:f8:05:b7:86:42:47:b7:64:
                    ad:c6:d1:90:d8:e6:27:f7:1d:92:19:d8:94:80:4f:
                    1e:ee:0b:6a:45:fd:60:83:14:c9:8d:8e:e1:22:b6:
                    a4:0e:f9:85:91:7c:50:f2:ce:ea:fa:df:cd:6d:78:
                    35:8b:7a:31:cd:d7:d6:17:5c:25:3c:f8:03:6b:9e:
                    47:d5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                59:34:02:F5:E6:B4:2E:40:3D:0A:51:34:34:71:F6:2A:6A:19:B9:21
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a3a2f34302d3430203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a80::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:80:df:bf:a5:1e:4f:d0:a3:6c:14:b3:01:4d:67:f6:e9:c1:
         57:08:c2:8d:11:70:dd:94:fa:48:50:f5:60:36:9f:da:2d:da:
         11:3c:3e:29:e3:3e:6e:55:3f:a4:02:aa:17:86:fe:f7:fa:5d:
         8d:75:47:af:59:53:7e:f9:35:74:f4:fb:9f:c6:48:f8:cf:76:
         38:92:ce:83:0a:bb:9a:2d:fb:5e:d7:f6:fb:9e:ea:72:c9:d0:
         ae:c1:41:aa:68:43:32:2d:a9:4a:56:69:75:03:34:dd:00:32:
         5a:20:6a:8b:58:a2:98:b5:b8:a4:ce:95:b2:20:b5:d8:cc:d5:
         9e:25:67:1b:7f:e8:22:47:ff:26:c7:f4:87:83:fe:69:e7:8d:
         08:0a:69:df:6b:27:71:9d:40:e9:0e:90:02:95:7d:18:4d:78:
         87:f2:51:c9:30:01:49:fa:34:5e:7b:18:50:7a:8c:22:ff:ac:
         1b:1a:6e:2d:71:b6:92:a1:ed:3d:f1:8a:b1:70:81:b7:71:3b:
         f9:35:3a:25:89:a6:b4:a4:98:60:53:ca:df:96:a1:f7:04:f8:
         8b:f1:e1:e1:b8:62:cb:78:d0:3c:ed:47:e5:36:5a:22:50:68:
         87:a8:cd:3a:b5:bb:72:8d:8f:d5:c6:bd:39:3c:10:77:63:bb:
         5c:83:db:7a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org