Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/323830343a373362343a3a2f33322d3332203d3e20323730393332.roa
File:                     323830343a373362343a3a2f33322d3332203d3e20323730393332.roa (raw, json)
Hash identifier:          a9ykZmOTBzPTkILL9ZASaDAyahaqwY1qhoiB+mjJ2Q8=
Subject key identifier:   04:D3:04:17:26:78:42:95:4B:A4:F8:17:DE:31:A4:2E:55:2F:86:E0
Certificate issuer:       /CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
Certificate serial:       7D6DA2B98B09B449FDB5FD213CAFC1C6CBE8117A
Authority key identifier: 51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/323830343a373362343a3a2f33322d3332203d3e20323730393332.roa
Signing time:             Wed 13 Mar 2024 12:03:14 +0000
ROA not before:           Wed 13 Mar 2024 11:58:14 +0000
ROA not after:            Wed 12 Mar 2025 12:03:14 +0000
asID:                     270932
IP address blocks:        2804:73b4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7d:6d:a2:b9:8b:09:b4:49:fd:b5:fd:21:3c:af:c1:c6:cb:e8:11:7a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51DAA39E5D48A044D7B76228DAA9660C6147723A
        Validity
            Not Before: Mar 13 11:58:14 2024 GMT
            Not After : Mar 12 12:03:14 2025 GMT
        Subject: CN=04D30417267842954BA4F817DE31A42E552F86E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b5:7d:38:7b:6d:7f:f8:3a:db:f4:5c:cc:b8:
                    c2:88:80:25:87:05:51:8c:ed:de:5c:44:6c:26:b5:
                    81:4c:41:d9:18:f6:15:3e:05:ac:14:d2:6d:5d:85:
                    8d:0b:a3:4d:66:a2:60:34:a9:97:f0:33:2f:7f:4d:
                    fb:e4:59:06:d5:57:be:18:24:10:b8:23:5e:7d:0d:
                    8d:cf:6e:7f:a4:1e:88:d4:4a:6b:fe:c7:51:75:19:
                    bd:80:71:d1:4d:46:2e:55:20:ad:10:35:f5:a1:72:
                    df:f4:99:22:a9:57:1d:e6:0d:54:1a:07:52:a0:36:
                    d7:e8:64:a9:90:2d:94:42:0e:e9:71:e8:a5:f0:15:
                    a3:60:fa:fd:b7:e3:cb:8f:a7:88:47:3b:e8:c9:9e:
                    eb:01:72:0f:ef:7f:c1:7a:48:5c:f2:8d:12:7d:90:
                    4e:cf:25:77:a2:ef:e6:b3:b7:e9:47:a7:28:7e:3c:
                    bc:ae:9a:01:db:46:e5:ec:11:82:19:56:0f:b3:e8:
                    6c:3b:30:31:05:5d:ef:1e:71:d6:f0:59:73:c6:aa:
                    8e:9a:89:20:98:05:cb:a4:93:57:81:89:fc:70:76:
                    4a:a7:df:2a:19:a6:b7:8d:36:fd:d5:95:05:4a:2e:
                    db:11:dd:8a:b1:24:cd:c5:64:70:36:79:1c:e8:48:
                    c7:49
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                04:D3:04:17:26:78:42:95:4B:A4:F8:17:DE:31:A4:2E:55:2F:86:E0
            X509v3 Authority Key Identifier:
                keyid:51:DA:A3:9E:5D:48:A0:44:D7:B7:62:28:DA:A9:66:0C:61:47:72:3A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/51DAA39E5D48A044D7B76228DAA9660C6147723A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CVfsZqZgH69aatvtKpMFeVMwMNY7Fgs358tQKzXVUUHe/0/323830343a373362343a3a2f33322d3332203d3e20323730393332.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:73b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         aa:ba:29:0a:f2:cb:25:b6:8c:d7:ac:d8:51:37:f4:f6:6d:4f:
         c7:61:4d:69:b1:92:9b:07:8b:b5:ce:ed:b5:29:49:b8:80:fc:
         a3:0e:3e:5b:5b:d9:42:1f:0d:01:68:b3:77:dc:01:70:67:59:
         6b:4c:e0:25:e5:e8:86:9e:ec:fa:2b:cd:59:be:08:84:61:1e:
         f6:f9:96:68:75:54:ab:f5:df:d9:3f:03:1e:60:ea:55:ff:72:
         64:72:0f:4c:10:ce:fa:6e:c0:e6:b8:fd:c3:34:c8:97:15:18:
         4c:8b:ed:a0:c2:18:c9:d6:06:b0:a3:af:e4:53:f8:70:65:6b:
         7a:68:b3:59:90:3e:8a:6c:16:95:3d:d8:a8:e2:85:8e:d1:7a:
         5d:83:be:92:ce:90:de:73:e6:88:b3:ce:ad:18:a4:30:82:3a:
         72:35:d5:8d:c7:36:43:9a:09:61:13:ff:78:47:fa:76:3c:b3:
         89:68:12:06:4b:b7:6e:5d:af:0a:50:d5:82:79:01:b2:2a:20:
         d3:39:02:2c:e5:b1:94:99:ef:62:4d:d7:b2:cc:89:a3:52:4d:
         f4:54:e1:a2:a1:6e:c8:a7:2a:a2:30:03:6f:b5:e9:9b:7b:a6:
         ed:46:09:50:62:fd:ed:f9:a1:e9:55:9a:c1:61:fd:a2:53:8b:
         43:49:02:6a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:05 2024 by rpki-client on console-ams.rpki-client.org