Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a3a2f33342d3334203d3e20323634333131.roa
File:                     323830343a323566303a3a2f33342d3334203d3e20323634333131.roa (raw, json)
Hash identifier:          asW6Q1YJUTcQtLbpR7gKpuvOi+soK/NR3s8COBkfEaE=
Subject key identifier:   97:5F:3F:AC:0D:31:1A:F9:F9:BB:1C:7F:7F:B9:00:62:08:F7:C4:E1
Certificate issuer:       /CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
Certificate serial:       7310F4789AB7E1D175079DB99DB4C2AAD508B84A
Authority key identifier: 41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a3a2f33342d3334203d3e20323634333131.roa
Signing time:             Fri 08 Sep 2023 13:00:01 +0000
ROA not before:           Fri 08 Sep 2023 12:55:01 +0000
ROA not after:            Fri 06 Sep 2024 13:00:01 +0000
asID:                     264311
IP address blocks:        2804:25f0::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:10:f4:78:9a:b7:e1:d1:75:07:9d:b9:9d:b4:c2:aa:d5:08:b8:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=41E59B548B916216367A1DBCA5AD17479C65F6DA
        Validity
            Not Before: Sep  8 12:55:01 2023 GMT
            Not After : Sep  6 13:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:d0:0b:cc:1b:6b:c0:eb:52:78:11:3c:75:40:
                    49:7c:f8:a6:b0:a9:ab:1d:0c:3f:fc:8c:95:c2:32:
                    21:6a:10:3e:3b:3b:7c:a6:be:49:0a:93:48:b0:28:
                    b0:de:df:11:f1:2a:c1:73:2f:a6:eb:8c:39:53:1b:
                    96:b7:7a:c8:86:82:1d:cb:e7:b1:51:0d:31:ab:c2:
                    cd:82:a4:31:88:b9:46:33:c5:b0:9e:c1:d8:18:d2:
                    22:45:dd:c2:0d:42:5c:5a:b4:9b:a1:7e:80:de:8e:
                    4c:80:5c:5e:b8:f1:c7:32:3c:cf:86:77:0a:75:6c:
                    62:62:62:ad:fb:71:82:f0:b5:29:50:9f:b1:39:b5:
                    3c:a7:8d:11:4f:83:7c:cf:f8:ee:b1:f9:da:95:5b:
                    9d:17:96:64:e7:89:37:04:d6:02:10:14:2b:02:1e:
                    0e:07:50:2b:6c:cb:f6:74:11:4d:c8:48:ee:66:b8:
                    b4:76:6e:7a:de:3c:8d:b8:48:8b:27:f9:18:d4:26:
                    0b:82:d4:ce:02:0c:76:6c:92:9a:8c:8b:4f:54:f1:
                    60:c2:51:ea:f1:6b:dd:cd:df:7b:cd:93:b0:b9:e2:
                    98:ad:6b:16:02:8c:c4:b7:17:38:60:81:f3:f9:81:
                    5c:5e:3b:a3:65:af:0e:46:54:89:81:e0:5c:2d:c8:
                    c9:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                97:5F:3F:AC:0D:31:1A:F9:F9:BB:1C:7F:7F:B9:00:62:08:F7:C4:E1
            X509v3 Authority Key Identifier:
                keyid:41:E5:9B:54:8B:91:62:16:36:7A:1D:BC:A5:AD:17:47:9C:65:F6:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/41E59B548B916216367A1DBCA5AD17479C65F6DA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CCmwsTH3gqtQGHweVDkVV5zEwQKRdPvUAcDajAQt9WRf/0/323830343a323566303a3a2f33342d3334203d3e20323634333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:25f0::/34

    Signature Algorithm: sha256WithRSAEncryption
         7d:42:53:61:4c:93:69:b8:ce:8b:8a:75:2d:c6:86:d2:e7:2f:
         d5:04:19:40:44:e9:e4:c1:6b:8b:2f:15:2c:3d:d4:ff:c7:de:
         83:25:8e:bb:ce:2e:c9:8e:9f:07:3e:04:1b:94:8a:ed:d1:ae:
         7e:88:a6:61:4f:de:e1:ee:68:57:0b:8e:81:33:78:70:08:43:
         f7:2e:81:eb:4b:36:fd:b9:78:59:a3:f6:d9:89:a8:57:f8:5f:
         de:17:b3:97:44:7e:b7:51:e7:9a:62:f3:8f:13:09:94:ce:a9:
         95:9a:4d:f1:ea:19:e5:8f:5d:ff:ed:f7:b3:0e:fb:33:f5:e8:
         b4:78:71:8e:e1:16:1b:2e:00:50:f5:b7:b2:98:df:18:ad:e6:
         45:16:15:86:a0:fe:c3:55:f9:bd:8e:73:70:d8:f3:8d:11:da:
         95:29:ce:ca:af:6f:ce:f9:66:53:fe:76:81:c5:22:21:35:40:
         b3:88:8f:2e:b5:84:7b:70:7c:0b:50:63:82:f6:c8:8f:60:a1:
         ca:2c:31:bb:3e:e6:11:46:ec:8e:68:c1:34:72:60:2f:95:9f:
         a5:0b:e0:5b:c3:d9:09:7b:7e:eb:b4:f3:15:9b:8d:54:01:d3:
         03:f8:cf:05:c3:86:af:2e:5b:d0:70:80:61:ed:01:c7:e4:92:
         e1:e2:75:85
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org