Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/323830343a316162633a3a2f33322d3438203d3e203631383832.roa
File:                     323830343a316162633a3a2f33322d3438203d3e203631383832.roa (raw, json)
Hash identifier:          9HmFqE3pKp9SiW73kZB6+lpZ0p3cRtgM1HBi/kyVbq8=
Subject key identifier:   32:8D:9B:E7:32:98:46:5B:F6:EF:4D:E1:F9:9E:D8:9D:20:8C:D2:55
Certificate issuer:       /CN=1D99E9AD3D637A53C85C20B4682E7BA1FB03F453
Certificate serial:       01A95F36962BFE810677F2F803FE76B953D23ADF
Authority key identifier: 1D:99:E9:AD:3D:63:7A:53:C8:5C:20:B4:68:2E:7B:A1:FB:03:F4:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/323830343a316162633a3a2f33322d3438203d3e203631383832.roa
Signing time:             Mon 08 Apr 2024 19:25:04 +0000
ROA not before:           Mon 08 Apr 2024 19:20:04 +0000
ROA not after:            Mon 07 Apr 2025 19:25:04 +0000
asID:                     61882
IP address blocks:        2804:1abc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:a9:5f:36:96:2b:fe:81:06:77:f2:f8:03:fe:76:b9:53:d2:3a:df
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1D99E9AD3D637A53C85C20B4682E7BA1FB03F453
        Validity
            Not Before: Apr  8 19:20:04 2024 GMT
            Not After : Apr  7 19:25:04 2025 GMT
        Subject: CN=328D9BE73298465BF6EF4DE1F99ED89D208CD255
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:49:c4:4a:d0:8b:24:20:8a:56:b9:97:1b:3c:
                    9b:2f:0b:45:a0:51:ed:54:15:68:13:ca:8f:bb:41:
                    7a:f0:c1:e5:aa:79:1c:94:fb:07:99:95:9f:ee:2c:
                    a9:0b:3c:40:50:a2:e2:5e:f3:47:61:e1:f2:89:16:
                    bf:67:08:45:84:03:7c:7a:19:8e:4d:20:49:98:2b:
                    af:91:e9:d2:12:48:97:f3:26:1e:3a:09:0b:54:82:
                    7a:e8:1a:ff:57:fc:78:48:b2:56:67:29:a3:68:b2:
                    e4:88:09:54:f2:de:17:31:4a:69:1e:d1:f6:ff:bd:
                    cf:61:71:fa:78:6b:42:5b:16:23:6a:85:b7:70:d7:
                    19:01:ca:74:e0:24:a7:3d:80:ce:a7:c7:b9:bb:13:
                    a6:a4:a5:5d:6f:52:0b:98:85:ff:ce:65:c9:60:cb:
                    b6:bc:53:9c:e2:d6:53:3a:d8:ae:ed:76:0b:31:0a:
                    11:97:0a:2a:bd:e4:4c:c2:3e:eb:38:a4:72:6e:70:
                    b8:d1:be:13:bd:29:6e:c5:b9:20:34:25:8b:4b:ef:
                    eb:0a:93:56:0f:ed:d1:50:f4:c7:4a:da:de:2d:8c:
                    73:45:60:c5:15:6d:98:ac:a0:b2:f8:69:00:a4:fa:
                    75:2e:e6:49:24:f7:e5:3f:0a:a7:5a:72:cd:61:44:
                    8a:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:8D:9B:E7:32:98:46:5B:F6:EF:4D:E1:F9:9E:D8:9D:20:8C:D2:55
            X509v3 Authority Key Identifier:
                keyid:1D:99:E9:AD:3D:63:7A:53:C8:5C:20:B4:68:2E:7B:A1:FB:03:F4:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1D99E9AD3D637A53C85C20B4682E7BA1FB03F453.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BzTHpEYa4yRi1fRNqLzCTLoFCTo44eQwXSrYMPKAv4uD/0/323830343a316162633a3a2f33322d3438203d3e203631383832.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1abc::/32

    Signature Algorithm: sha256WithRSAEncryption
         30:8d:93:b9:d3:b3:29:71:e1:ed:81:89:ce:fd:14:0e:b1:a0:
         ee:c8:0b:1e:db:88:d7:84:f3:6a:ed:77:27:e9:02:b5:15:5c:
         c4:eb:89:be:e1:9f:33:48:3f:a4:76:9e:71:7c:07:b5:cb:57:
         b9:56:47:95:a0:6d:d9:7a:33:01:73:89:45:61:ba:78:cb:80:
         86:0a:77:a2:7a:3e:c6:e0:d9:c0:a7:27:29:dd:fa:5c:bb:35:
         b1:37:d2:c8:60:b5:3d:c4:c0:d9:84:26:70:51:6f:37:0c:93:
         30:0a:57:1a:f7:ef:f9:4f:3f:a4:35:8d:69:82:13:1d:fd:59:
         70:9f:f6:14:b0:be:6b:ab:c1:3f:53:df:4d:c9:eb:47:ac:fa:
         31:26:ef:1f:1b:79:49:cc:9b:df:47:48:f7:8b:52:c6:c3:df:
         e5:37:6f:18:57:af:0f:3b:2a:a9:51:e6:84:06:20:f2:3f:90:
         f6:41:ac:75:b1:f2:3f:d9:bf:80:47:de:0d:bb:bb:5d:ed:7c:
         d8:a5:ec:cf:58:59:20:a5:6a:71:6c:f0:4a:0f:8a:c0:44:73:
         b6:d2:0e:d0:e2:74:dc:90:b5:ef:d4:cf:1c:18:b3:f2:f1:60:
         89:f0:58:19:dd:fb:79:9a:54:e1:22:ea:70:0b:a5:c7:66:b9:
         99:53:63:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:02 2024 by rpki-client on console-ams.rpki-client.org