Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a31653a3a2f34382d3438203d3e203631383332.roa
File:                     323830343a316130343a31653a3a2f34382d3438203d3e203631383332.roa (raw, json)
Hash identifier:          tLHJ3tve7ArieGciTsPVP0fMqaaN8X83WbycTyGrOZQ=
Subject key identifier:   85:1F:36:45:1F:12:27:B3:9A:62:A3:B5:5C:90:54:2F:1C:90:3E:BF
Certificate issuer:       /CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
Certificate serial:       498677AE523697D7991FF8B5542A0819A6617396
Authority key identifier: D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a31653a3a2f34382d3438203d3e203631383332.roa
Signing time:             Thu 05 Oct 2023 17:51:48 +0000
ROA not before:           Thu 05 Oct 2023 17:46:48 +0000
ROA not after:            Thu 03 Oct 2024 17:51:48 +0000
asID:                     61832
IP address blocks:        2804:1a04:1e::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            49:86:77:ae:52:36:97:d7:99:1f:f8:b5:54:2a:08:19:a6:61:73:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D2ADA57D8601634394F4D09E2D0517E3029FE940
        Validity
            Not Before: Oct  5 17:46:48 2023 GMT
            Not After : Oct  3 17:51:48 2024 GMT
        Subject: CN=851F36451F1227B39A62A3B55C90542F1C903EBF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c7:9e:9e:6d:d2:d1:7a:48:06:dc:21:61:7c:fe:
                    ef:e2:91:cc:e8:8d:81:17:09:53:a3:f2:da:9e:56:
                    48:84:29:29:50:0d:2f:2c:b0:78:5a:78:d9:f2:3e:
                    37:7d:49:c3:91:21:89:50:4f:a0:e2:f1:57:25:fb:
                    f8:2e:93:86:48:03:99:97:42:19:13:d4:79:2c:ce:
                    ad:fb:6d:ed:ed:d1:ee:d0:68:57:a8:9d:1e:76:91:
                    06:99:af:ca:2f:be:5b:c4:4e:be:7f:d4:bd:49:65:
                    05:51:79:0d:70:98:67:02:e7:6a:84:52:41:48:75:
                    08:b4:75:9d:dd:a7:1a:c5:a8:de:82:c3:b3:5e:82:
                    0f:df:7a:02:72:04:3b:8a:5f:8d:e2:95:4d:e2:c8:
                    a0:a7:58:1e:f7:bd:c2:24:2b:86:6d:83:e7:14:36:
                    53:02:8c:3f:1b:c0:05:73:00:b3:26:73:c4:77:fa:
                    a5:b7:1e:dc:b5:9b:b9:76:86:e0:4d:b5:55:88:ca:
                    44:75:81:91:56:cc:9e:a7:e7:3c:b5:25:80:44:57:
                    e9:78:63:56:9d:18:a3:01:ab:fe:32:fc:38:2e:6e:
                    b3:e7:18:62:4f:5e:2c:11:75:68:7d:d7:c5:f3:e5:
                    8f:31:53:b9:d9:42:38:43:28:02:16:a8:43:0a:78:
                    42:9f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                85:1F:36:45:1F:12:27:B3:9A:62:A3:B5:5C:90:54:2F:1C:90:3E:BF
            X509v3 Authority Key Identifier:
                keyid:D2:AD:A5:7D:86:01:63:43:94:F4:D0:9E:2D:05:17:E3:02:9F:E9:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D2ADA57D8601634394F4D09E2D0517E3029FE940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CRWxwqj9KkCUjUrQa61c8Zo1DHmHmpTkT9nUfjafQfuq/0/323830343a316130343a31653a3a2f34382d3438203d3e203631383332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1a04:1e::/48

    Signature Algorithm: sha256WithRSAEncryption
         3b:a0:a9:e5:f3:db:3c:e8:96:ee:50:78:1c:1f:dd:e1:a2:28:
         38:85:62:07:7a:7e:23:93:13:3a:08:df:79:d5:37:df:7a:9c:
         e4:2a:23:9c:bb:10:93:fd:da:ff:0f:49:f5:4d:9f:5e:46:35:
         13:d9:21:92:79:6a:a8:c6:79:24:c2:7d:6e:cd:fe:11:e8:7e:
         68:b2:6c:44:f7:c7:a5:1f:a2:bd:55:fb:c3:7e:3b:60:c1:7f:
         cd:b8:47:e8:c5:bb:41:45:28:bc:77:f0:00:78:83:66:e7:d3:
         9d:4f:0c:ae:96:d0:23:65:f3:2c:73:60:7b:ee:c1:4c:fc:91:
         af:46:12:c3:b9:1b:0e:c4:6c:05:32:48:ff:38:ed:d7:54:31:
         64:1e:cf:51:3f:af:af:b0:20:03:06:dc:73:f0:4b:d4:a7:f7:
         e3:c5:2d:28:dc:e5:77:bc:1f:a7:65:38:b5:88:ec:f2:87:86:
         7b:2d:d9:92:5f:d6:88:c0:9f:c5:2b:b2:1c:8c:88:31:74:e5:
         bd:9f:2c:df:da:b9:01:d5:10:c6:ac:0e:60:53:10:26:69:ef:
         17:78:80:83:48:b1:6a:60:25:a9:43:9c:de:8f:90:cc:7b:6e:
         15:ce:c6:90:34:88:a5:52:d2:02:28:cf:71:0a:73:cc:1c:c9:
         4a:65:61:f1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:23 2024 by rpki-client on console-fra.rpki-client.org