Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a6630303a3a2f34302d3430203d3e20323632323933.roa
File:                     323830343a6138303a6630303a3a2f34302d3430203d3e20323632323933.roa (raw, json)
Hash identifier:          8sdnzodqiX/1UC5fVasCW7kPyz9bsUHIGMDv6omHFo4=
Subject key identifier:   3E:52:FA:FF:67:26:4A:24:A8:AF:6B:0E:49:12:C3:43:CC:5D:0D:81
Certificate issuer:       /CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
Certificate serial:       2C8B38CC0D7CD5BCD8527DE901CFD795CEFA805C
Authority key identifier: 1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a6630303a3a2f34302d3430203d3e20323632323933.roa
Signing time:             Tue 02 Jan 2024 21:16:32 +0000
ROA not before:           Tue 02 Jan 2024 21:11:32 +0000
ROA not after:            Tue 31 Dec 2024 21:16:32 +0000
asID:                     262293
IP address blocks:        2804:a80:f00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2c:8b:38:cc:0d:7c:d5:bc:d8:52:7d:e9:01:cf:d7:95:ce:fa:80:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1A01AD3383BFA38B76F1CA139958102A17AF0391
        Validity
            Not Before: Jan  2 21:11:32 2024 GMT
            Not After : Dec 31 21:16:32 2024 GMT
        Subject: CN=3E52FAFF67264A24A8AF6B0E4912C343CC5D0D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dd:c9:87:10:0e:f4:56:be:6b:dc:18:ac:ae:d5:
                    3e:5f:44:4d:30:9a:aa:bb:71:3b:0f:3f:ff:06:71:
                    a2:2d:52:71:de:b5:9d:82:01:5b:ab:47:f7:af:b6:
                    41:37:51:94:e6:5d:46:84:15:3f:e5:1e:2a:21:e1:
                    96:ff:74:78:10:3f:c2:e2:1c:13:21:2b:cb:75:93:
                    bc:cb:a8:a2:ee:40:bf:12:6a:e6:5c:d7:5e:18:37:
                    49:40:e8:12:ef:64:fe:1f:40:cc:6b:80:7a:4a:3e:
                    be:c1:bd:14:d8:50:64:3a:d6:8c:65:89:0f:6a:51:
                    c6:f1:d7:c5:3f:5d:dc:f2:a7:a5:0f:de:ae:bd:1d:
                    1b:a4:10:9b:70:25:e9:d6:47:a9:2e:6a:72:0f:35:
                    8b:2d:77:fe:50:c6:6d:58:d0:7d:5c:b9:4a:d2:f7:
                    fd:28:0d:a5:dd:32:df:46:a1:e0:56:4b:0e:28:f8:
                    ba:11:86:dd:d5:f7:2c:2e:f7:ce:89:60:3a:b5:6d:
                    18:2e:96:4f:b7:5f:80:1e:fe:79:0c:27:66:fe:c6:
                    90:df:54:ff:a4:77:ac:00:a3:26:36:9a:38:73:de:
                    e8:c8:a7:a1:71:91:de:35:a4:0c:d3:aa:10:7b:98:
                    52:9f:d0:f0:6e:54:64:dd:b8:82:7a:61:7f:57:25:
                    41:f3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3E:52:FA:FF:67:26:4A:24:A8:AF:6B:0E:49:12:C3:43:CC:5D:0D:81
            X509v3 Authority Key Identifier:
                keyid:1A:01:AD:33:83:BF:A3:8B:76:F1:CA:13:99:58:10:2A:17:AF:03:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1A01AD3383BFA38B76F1CA139958102A17AF0391.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AzryA53vrgtQwxENAcw4s9xEfQvrhzTGTKn7WVXLDdHh/0/323830343a6138303a6630303a3a2f34302d3430203d3e20323632323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:a80:f00::/40

    Signature Algorithm: sha256WithRSAEncryption
         20:d7:2b:58:fb:64:64:3d:0f:8e:2d:de:46:29:23:37:f1:4f:
         ae:fe:84:6b:74:01:a6:7f:22:f6:de:c2:9b:68:99:3b:a0:be:
         f0:c7:c6:5f:49:6e:2f:1b:3b:2f:d0:be:34:8a:4c:3f:37:ad:
         f2:47:85:79:8c:bf:11:9e:47:c8:a3:5b:ab:ef:a9:ff:5a:ea:
         66:17:10:9d:b0:b1:48:be:93:ad:f3:fd:f7:79:83:49:db:ea:
         9d:a4:b4:af:76:98:5a:ad:e6:15:83:c3:bb:d1:02:73:dc:96:
         88:2f:c2:6f:e3:89:ff:a0:e7:71:14:95:04:82:e9:30:c1:58:
         87:72:24:34:a0:ae:4a:e1:53:46:70:32:4e:52:ab:f4:42:26:
         57:bf:fd:24:b1:79:6c:61:b8:61:ad:e6:a6:44:1b:7d:98:69:
         cd:4c:4a:92:d2:93:64:cd:63:c0:de:1b:63:6a:7c:3b:01:07:
         58:98:ac:d5:25:47:ba:c0:ba:b6:0e:28:d0:cf:59:08:d7:2e:
         d7:2b:d0:4a:18:a0:c9:46:86:aa:06:f6:4e:92:02:06:8a:7f:
         d4:ac:8d:ff:19:89:6b:f3:61:dc:02:49:03:27:7f:d2:f4:1d:
         60:7c:e7:2d:e1:c9:62:ce:b6:27:34:1a:7a:7d:ce:3e:fa:72:
         f8:ea:e5:53
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:37 2024 by rpki-client on console-ams.rpki-client.org