Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/323830343a3731633a3a2f33322d3438203d3e203533303830.roa
File:                     323830343a3731633a3a2f33322d3438203d3e203533303830.roa (raw, json)
Hash identifier:          nqNv7ZBbQARiA9t4QSduuryCCufNO3s7Vqkk8GhRT9U=
Subject key identifier:   45:86:EF:2C:7B:64:22:96:F9:6E:E5:56:07:C6:FC:EB:D7:04:48:28
Certificate issuer:       /CN=3894D8226D8DE38887812D39103AE1FA7F305173
Certificate serial:       40869D174A5715B068E28D7F72CF7B70C8D8DB52
Authority key identifier: 38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/323830343a3731633a3a2f33322d3438203d3e203533303830.roa
Signing time:             Fri 09 Dec 2022 11:53:27 +0000
ROA not before:           Fri 09 Dec 2022 11:48:27 +0000
ROA not after:            Fri 08 Dec 2023 11:53:27 +0000
asID:                     53080
IP address blocks:        2804:71c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            40:86:9d:17:4a:57:15:b0:68:e2:8d:7f:72:cf:7b:70:c8:d8:db:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3894D8226D8DE38887812D39103AE1FA7F305173
        Validity
            Not Before: Dec  9 11:48:27 2022 GMT
            Not After : Dec  8 11:53:27 2023 GMT
        Subject: CN=4586EF2C7B642296F96EE55607C6FCEBD7044828
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cb:ae:77:f2:e4:12:f3:ff:77:70:d7:81:0e:d0:
                    5f:20:7d:8d:ff:54:03:77:da:a3:fd:47:ac:9e:85:
                    f2:4a:2c:32:89:22:64:72:e9:4e:c0:46:9a:a6:08:
                    ee:29:3a:c7:38:05:16:1c:0b:b1:ba:fa:ed:27:f2:
                    7a:f5:ad:44:5e:41:54:89:29:58:19:ee:51:b8:d5:
                    4f:66:75:13:13:6c:50:ad:b2:1e:ca:35:8f:05:88:
                    62:c3:ff:42:05:9b:3c:fb:5a:a0:49:9a:ec:36:94:
                    1a:5f:8b:06:e1:ef:84:26:75:5f:4d:85:5d:df:85:
                    9d:5d:16:db:32:4b:5a:2f:bc:ad:ac:ea:7d:33:c1:
                    08:7f:2d:8e:be:07:a2:cc:34:e6:6b:bd:e7:b2:e6:
                    80:a4:d6:3c:30:0a:30:0a:e2:d2:17:b7:f3:c7:e7:
                    26:6d:59:01:44:cc:9b:14:5e:29:36:78:6a:5b:e4:
                    19:bc:1d:7a:f7:76:0a:60:fd:19:0a:ed:82:a8:3c:
                    fe:87:de:9a:e5:f3:27:24:e3:1b:a4:19:43:d2:39:
                    ad:10:f8:e2:d2:1f:3d:07:6c:6a:4f:03:46:2b:3d:
                    81:74:5b:98:64:89:8d:db:4a:da:32:91:18:3a:51:
                    09:4f:1e:b1:5b:b2:4f:43:73:f0:b3:5f:b1:dc:92:
                    35:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:86:EF:2C:7B:64:22:96:F9:6E:E5:56:07:C6:FC:EB:D7:04:48:28
            X509v3 Authority Key Identifier:
                keyid:38:94:D8:22:6D:8D:E3:88:87:81:2D:39:10:3A:E1:FA:7F:30:51:73

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/3894D8226D8DE38887812D39103AE1FA7F305173.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3894D8226D8DE38887812D39103AE1FA7F305173.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BN7qJxmo7eGC1j358Q8RB3nXCJX32EYM4Bx4Ca6BKypU/0/323830343a3731633a3a2f33322d3438203d3e203533303830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c::/32

    Signature Algorithm: sha256WithRSAEncryption
         27:c1:cb:68:44:81:f9:5a:e0:85:1d:25:cc:aa:24:09:bc:b9:
         92:d1:41:e1:8e:61:31:15:e3:5c:3a:57:a6:71:4a:ec:05:41:
         64:64:a6:a5:f2:a9:c5:20:68:f2:a9:fd:ec:c7:78:85:50:e5:
         6b:ac:5b:ad:49:e4:7d:c7:d4:12:d7:da:da:df:f6:b0:e2:ad:
         9f:be:11:04:9d:88:72:0f:94:f5:91:63:c5:91:e6:e1:ff:04:
         3e:e4:48:7a:b2:23:3c:bb:0a:5d:8c:1f:8d:b9:53:76:29:6f:
         43:da:e5:10:92:3e:e6:70:95:d8:18:c1:7d:d6:45:51:bc:24:
         3c:7f:cf:04:2e:6c:83:fa:d3:c1:6b:9f:95:45:13:8f:cb:11:
         78:c9:90:d1:74:ba:47:04:68:8f:93:6f:d5:2d:76:d2:27:25:
         4d:b0:4d:6e:56:76:1f:d7:ea:4d:dd:e9:09:54:91:c1:e4:63:
         ed:77:5e:c0:3f:47:c2:05:a8:fa:ca:66:85:05:22:46:19:21:
         c8:e4:a0:1f:09:bd:e3:45:6b:03:c0:f7:c5:ce:48:3c:d4:84:
         6a:aa:3f:4b:ad:d5:e0:e8:ed:1d:00:d9:14:7c:e6:9b:28:1d:
         7c:1a:70:3e:f9:3d:9f:ef:64:97:1a:1e:dc:d4:78:ff:b0:c8:
         d6:9e:63:c6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:19 2024 by rpki-client on console-fra.rpki-client.org