Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a3a2f33362d3336203d3e20323731353438.roa
File:                     323830343a376433633a3a2f33362d3336203d3e20323731353438.roa (raw, json)
Hash identifier:          ZcBzFAZRXWYUeLTUJWaAwrCtv/ahcRfdPMdyw5Z4br8=
Subject key identifier:   A0:57:6A:FA:F5:E8:22:6D:62:82:61:61:4D:D5:74:A9:99:32:F9:21
Certificate issuer:       /CN=3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48
Certificate serial:       64DEFB49EE035EF53D9A52CA22785008FC147B62
Authority key identifier: 3A:BB:FF:DA:8F:C3:BC:76:94:76:DD:8D:E3:2E:16:12:07:7F:DC:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a3a2f33362d3336203d3e20323731353438.roa
Signing time:             Wed 28 Feb 2024 16:58:22 +0000
ROA not before:           Wed 28 Feb 2024 16:53:22 +0000
ROA not after:            Wed 26 Feb 2025 16:58:22 +0000
asID:                     271548
IP address blocks:        2804:7d3c::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            64:de:fb:49:ee:03:5e:f5:3d:9a:52:ca:22:78:50:08:fc:14:7b:62
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48
        Validity
            Not Before: Feb 28 16:53:22 2024 GMT
            Not After : Feb 26 16:58:22 2025 GMT
        Subject: CN=A0576AFAF5E8226D628261614DD574A99932F921
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:6b:a4:cb:df:83:80:04:63:ed:61:f0:8c:20:
                    a8:7b:94:df:46:d1:2c:3a:03:e9:d4:f5:9a:20:b7:
                    d3:f4:31:1f:8c:fa:a9:fd:e0:b6:4d:a0:bb:ff:6f:
                    0f:ef:41:7a:ca:f5:4e:ea:ab:22:2f:c3:70:4d:1b:
                    f0:0c:a0:dd:d1:ab:7e:9f:6e:a4:7c:33:a1:b1:00:
                    72:34:d0:03:e2:5f:7e:80:1f:e8:b3:b7:80:7e:22:
                    99:06:c0:38:78:0f:89:f9:a9:3f:9d:6b:40:ec:b0:
                    d1:d4:27:68:76:6b:99:e6:d6:37:8e:01:d6:51:ab:
                    f3:d1:8d:dd:fb:23:26:43:1e:2f:9f:32:34:7d:2e:
                    c4:df:6f:d5:55:de:f3:0c:a6:5b:42:a3:1a:d2:23:
                    33:c9:aa:0e:9a:6a:95:51:1a:1d:ae:43:2c:1d:8a:
                    43:66:5a:60:1e:23:57:99:d4:8f:46:87:98:da:21:
                    c2:41:52:13:47:fa:e1:e6:e6:40:16:af:44:75:c9:
                    0c:5a:3f:a8:47:cc:d8:30:56:bc:0b:74:6c:74:d5:
                    78:39:ac:8c:31:39:77:fe:aa:1c:9b:7a:62:7b:e8:
                    43:31:9f:06:6a:77:f7:26:98:cb:a7:04:15:f6:d6:
                    3c:6b:67:95:76:03:02:8d:4e:1e:77:46:30:18:f9:
                    2d:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A0:57:6A:FA:F5:E8:22:6D:62:82:61:61:4D:D5:74:A9:99:32:F9:21
            X509v3 Authority Key Identifier:
                keyid:3A:BB:FF:DA:8F:C3:BC:76:94:76:DD:8D:E3:2E:16:12:07:7F:DC:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3ABBFFDA8FC3BC769476DD8DE32E1612077FDC48.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/C1Q5wyibigYr993FXQLqZ6LCGKVuC9DW2RUnQXJtHdiJ/0/323830343a376433633a3a2f33362d3336203d3e20323731353438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7d3c::/36

    Signature Algorithm: sha256WithRSAEncryption
         d0:1a:c8:cc:fe:ca:12:c8:ef:3c:bd:e1:56:c5:46:90:13:b9:
         4a:8c:70:7a:12:f8:d9:3c:81:86:62:46:9c:02:78:2d:c5:79:
         b4:0d:c0:8e:85:5b:d3:59:0b:67:57:97:d2:8f:14:ff:44:35:
         f1:8d:6b:97:80:85:c9:a1:a7:3b:32:b2:6d:e6:a9:b9:61:a4:
         05:50:0f:35:f0:c1:e0:c5:2a:fc:34:3b:8a:7c:9a:f8:cd:0b:
         07:8d:94:ac:87:a6:46:38:b9:e7:98:c0:2e:4d:10:79:94:e7:
         db:97:11:ed:3a:49:43:bd:e2:ab:cd:2f:51:9d:88:79:43:a4:
         11:f4:b3:e4:7b:ff:b9:cc:17:d5:57:4c:ee:df:af:13:23:c4:
         ad:b1:8a:0b:84:4d:72:a3:57:04:05:3c:7b:d2:ec:6f:15:13:
         ec:54:b9:aa:49:99:de:11:9b:48:0b:86:20:03:a6:6e:b4:cc:
         ec:a8:50:f1:7c:12:63:d2:4d:8c:05:84:24:ae:52:4b:48:4d:
         f3:ed:45:4f:53:81:33:69:49:44:9b:a9:f5:ff:6e:ce:d6:85:
         2b:92:0d:e4:51:54:b1:35:30:de:3b:36:e1:bd:34:12:f9:df:
         4d:de:0a:2a:d2:12:41:16:f4:8e:b1:5c:df:17:11:2f:fe:48:
         c0:85:a6:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:03 2024 by rpki-client on console-ams.rpki-client.org