Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/323830343a343237343a3a2f33322d3438203d3e20323637353031.roa
File:                     323830343a343237343a3a2f33322d3438203d3e20323637353031.roa (raw, json)
Hash identifier:          F7ZXahhbfYi/KpfmA7tB5gDjV7I/iOXSoxjdR6JLVhQ=
Subject key identifier:   54:41:3D:F3:70:E1:64:CA:37:01:F5:3F:53:2B:91:EB:4E:D0:7F:E4
Certificate issuer:       /CN=83947998EFB8576DD0C3344C401D81EF9A1A155C
Certificate serial:       110ADF1788EBE65BA01824988A6AEB126D9262BE
Authority key identifier: 83:94:79:98:EF:B8:57:6D:D0:C3:34:4C:40:1D:81:EF:9A:1A:15:5C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/323830343a343237343a3a2f33322d3438203d3e20323637353031.roa
Signing time:             Sat 16 Mar 2024 12:12:38 +0000
ROA not before:           Sat 16 Mar 2024 12:07:38 +0000
ROA not after:            Sat 15 Mar 2025 12:12:38 +0000
asID:                     267501
IP address blocks:        2804:4274::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:0a:df:17:88:eb:e6:5b:a0:18:24:98:8a:6a:eb:12:6d:92:62:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=83947998EFB8576DD0C3344C401D81EF9A1A155C
        Validity
            Not Before: Mar 16 12:07:38 2024 GMT
            Not After : Mar 15 12:12:38 2025 GMT
        Subject: CN=54413DF370E164CA3701F53F532B91EB4ED07FE4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:0a:21:f6:5d:42:c0:12:b1:45:79:a0:a5:35:
                    b5:c5:c3:5c:9c:d2:49:10:60:74:78:d1:52:36:ec:
                    45:ff:5b:bb:0b:f0:b2:69:f3:4d:4e:d0:dd:18:20:
                    60:9c:a1:d3:ea:2b:e5:f2:61:32:ec:ba:fd:bd:c2:
                    e1:a7:89:2d:99:9d:d2:0c:ff:72:50:50:14:96:eb:
                    37:ba:ab:d4:7e:8f:f4:38:46:cc:fe:19:81:87:79:
                    16:01:6c:ca:d5:86:3c:fd:73:93:49:3f:44:6b:ea:
                    17:35:0d:4c:ee:d1:b3:b3:c3:bc:05:6d:a1:be:2b:
                    6b:4b:19:dd:1e:0a:cd:2a:83:70:ad:5f:00:4b:64:
                    36:64:78:37:55:1b:09:ff:9f:e5:f5:0d:88:30:ca:
                    d9:8d:4e:87:1b:ef:b9:5e:49:d5:0d:f7:6f:d1:30:
                    33:ae:09:9f:38:68:b4:08:d1:5f:e9:19:33:b9:1a:
                    58:b6:c9:6b:5e:0b:23:de:f6:f7:04:12:77:79:2b:
                    bb:db:86:2d:2a:77:33:c5:63:54:ed:99:91:20:9a:
                    48:89:97:7f:fb:0a:2c:33:a0:d9:a5:d5:fc:cc:c6:
                    04:6e:3d:6d:c3:53:b3:88:1e:8b:4b:60:1f:25:c4:
                    fd:c8:06:7a:95:03:64:25:79:b2:b6:5b:fc:77:f5:
                    e0:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:41:3D:F3:70:E1:64:CA:37:01:F5:3F:53:2B:91:EB:4E:D0:7F:E4
            X509v3 Authority Key Identifier:
                keyid:83:94:79:98:EF:B8:57:6D:D0:C3:34:4C:40:1D:81:EF:9A:1A:15:5C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/83947998EFB8576DD0C3344C401D81EF9A1A155C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CKnPxhksQHRuqgsakFRxumt4XRcgo7gQVGdSz9hTFFoq/0/323830343a343237343a3a2f33322d3438203d3e20323637353031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4274::/32

    Signature Algorithm: sha256WithRSAEncryption
         88:f2:a8:ea:25:70:dd:ff:3f:7c:9f:3a:22:fd:9f:fc:80:30:
         71:67:34:95:7d:7c:07:a6:5d:e1:0b:af:3a:20:22:9c:06:d4:
         98:13:45:fe:9f:e5:59:a9:2e:6d:9c:10:ee:99:62:ba:dc:46:
         0d:3e:36:f8:c7:fd:81:d1:6a:4e:d5:b1:b6:6f:4e:fc:eb:8e:
         1c:8d:9c:2e:b2:b0:ff:e1:b0:91:c4:aa:2f:54:61:30:22:66:
         9c:91:a4:a4:58:4b:d5:f3:c3:53:83:ed:ab:d3:05:b3:b0:0e:
         8c:6d:81:4d:4e:90:05:96:5a:82:79:50:05:df:90:8e:77:9a:
         5f:62:c1:3b:85:48:52:6e:8a:8d:69:2d:0e:e8:58:55:74:aa:
         20:f9:3f:59:d2:b7:1a:b9:51:ba:ce:2d:ee:ec:9c:c8:ec:28:
         d5:f4:2e:f1:bd:84:f9:af:b0:21:a3:59:be:1f:10:78:4a:55:
         71:c3:af:3e:d1:c1:91:91:93:76:2e:32:b0:a6:ef:98:f1:9f:
         c7:b4:78:2e:df:f5:f9:c6:b2:53:0d:eb:01:70:a8:e7:04:b4:
         d3:c3:2d:35:8c:59:93:3d:89:da:fd:8d:95:85:3a:db:89:9f:
         39:d7:07:fa:16:c1:23:64:1a:09:cc:4a:be:cf:fa:95:54:b1:
         27:39:8b:6d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:04 2024 by rpki-client on console-ams.rpki-client.org