Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa
File:                     323830343a373463303a3a2f33322d3332203d3e20323731303031.roa (raw, json)
Hash identifier:          CUilTrR7uVm3/FT2d9TmHoP7/0T2naB0xN5yfrhZt7c=
Subject key identifier:   DE:B4:7D:EE:DF:D2:F4:30:CD:F7:14:24:C4:57:50:59:2E:EA:76:C4
Certificate issuer:       /CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
Certificate serial:       2FBA30CC56A872F7713BF613318C473B16F15AD9
Authority key identifier: A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa
Signing time:             Thu 16 Nov 2023 17:54:17 +0000
ROA not before:           Thu 16 Nov 2023 17:49:17 +0000
ROA not after:            Thu 14 Nov 2024 17:54:17 +0000
asID:                     271001
IP address blocks:        2804:74c0::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2f:ba:30:cc:56:a8:72:f7:71:3b:f6:13:31:8c:47:3b:16:f1:5a:d9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A11146E6D35397A3EFDADB5919573175A8DBBD03
        Validity
            Not Before: Nov 16 17:49:17 2023 GMT
            Not After : Nov 14 17:54:17 2024 GMT
        Subject: CN=DEB47DEEDFD2F430CDF71424C45750592EEA76C4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:1f:9c:c5:78:2d:dd:72:a0:ed:f1:fc:b5:60:
                    06:81:b2:e8:50:96:b9:35:d4:5d:1c:27:d0:9e:45:
                    1d:7b:81:df:4f:44:2e:92:84:41:91:47:aa:09:d6:
                    76:c8:bb:f0:1e:66:7f:13:f1:70:26:a9:e4:b7:6f:
                    e2:63:12:ed:1e:56:e6:4c:a3:95:7d:d0:94:e9:5e:
                    c8:ef:5f:75:b5:d4:9d:4d:3b:9c:11:43:42:09:0a:
                    69:23:f3:b9:5d:5d:71:e1:48:d3:ae:82:39:1c:1e:
                    ac:a6:b1:4a:bc:10:da:06:d4:fa:7d:15:c4:2d:28:
                    40:72:1e:38:51:b8:e1:05:04:94:24:14:d1:11:31:
                    ad:17:7b:69:8e:11:22:b9:a9:d1:e9:af:08:0f:a1:
                    30:1c:77:98:22:67:66:94:74:60:ff:18:c8:f0:1b:
                    d6:af:98:ae:40:29:86:33:74:20:71:34:2e:30:52:
                    ea:cc:55:e4:b4:3f:10:19:a2:c0:f0:1f:59:31:fc:
                    03:43:9f:c8:5d:46:0e:db:c0:af:91:54:78:d7:7a:
                    46:5b:f8:71:f3:b1:4f:ff:2d:16:a7:63:d2:0e:a5:
                    0e:cf:51:01:fe:b4:63:70:64:f4:9a:f0:5f:75:98:
                    25:f7:d0:5a:08:84:f4:f6:76:56:eb:3e:45:6c:b3:
                    c2:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DE:B4:7D:EE:DF:D2:F4:30:CD:F7:14:24:C4:57:50:59:2E:EA:76:C4
            X509v3 Authority Key Identifier:
                keyid:A1:11:46:E6:D3:53:97:A3:EF:DA:DB:59:19:57:31:75:A8:DB:BD:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A11146E6D35397A3EFDADB5919573175A8DBBD03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CZ5ucv721d4fDbqAuE1Um8ZnQj8papaJ51HSRpHxiWDU/0/323830343a373463303a3a2f33322d3332203d3e20323731303031.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         a5:68:d7:bb:c7:70:9d:ed:88:24:ab:4e:95:0a:9f:60:43:6b:
         da:7d:a6:8b:b7:39:cc:11:0c:16:d6:b1:1e:b9:80:11:b4:08:
         79:66:2e:91:7b:2c:e8:08:66:ce:56:10:b9:f7:3c:ed:2f:e3:
         b4:05:70:1a:df:13:c1:7b:b6:bb:d5:00:35:37:43:69:74:0c:
         de:c0:e7:6a:8a:13:93:71:19:e6:de:4e:a7:1c:ab:f3:bf:ed:
         3d:1a:55:05:f8:75:d9:f1:c1:e3:b3:28:54:8d:7e:77:a7:c7:
         31:d8:5f:31:4c:1f:ad:ac:6c:ea:61:3d:1d:33:4a:e3:2b:30:
         b8:e0:4a:aa:0b:8a:5b:fd:68:32:c6:9f:2d:35:31:e5:a7:09:
         40:d1:62:45:12:51:bf:0b:69:f0:91:63:a9:1c:2b:ab:c8:fa:
         ad:1c:d2:53:a2:e9:03:93:7d:cc:f5:bd:34:08:dd:28:08:2e:
         60:bf:7c:dd:a0:d3:30:fe:fb:65:f1:93:a6:7b:7c:46:4e:76:
         e5:b4:10:3e:f7:be:22:4f:12:9d:ae:0c:38:96:eb:16:c1:83:
         c6:ab:dc:a7:60:2c:25:aa:a9:6b:b3:3f:3a:30:7d:a0:46:94:
         85:e9:61:62:a2:cc:09:03:29:25:44:12:2e:1e:d6:12:34:6d:
         bb:92:48:fb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:17 2024 by rpki-client on console-ams.rpki-client.org