Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/323830343a3135303a3a2f33302d3438203d3e203130393534.roa
File:                     323830343a3135303a3a2f33302d3438203d3e203130393534.roa (raw, json)
Hash identifier:          GkDhYo8nlye3HLixLOOq+5uqdF4vxnOm7w0rYaeHtro=
Subject key identifier:   D2:EB:F0:9E:23:57:7F:9A:73:3C:34:93:44:A8:E9:67:8A:48:C8:3E
Certificate issuer:       /CN=7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A
Certificate serial:       468D2BBA27187AD9269CA4D343584978B812F346
Authority key identifier: 7A:3F:90:7A:7F:1E:82:A3:12:A9:EC:D2:C4:A3:E4:20:33:9C:2C:6A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/323830343a3135303a3a2f33302d3438203d3e203130393534.roa
Signing time:             Thu 22 Jun 2023 18:18:18 +0000
ROA not before:           Thu 22 Jun 2023 18:13:18 +0000
ROA not after:            Thu 20 Jun 2024 18:18:18 +0000
asID:                     10954
IP address blocks:        2804:150::/30 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            46:8d:2b:ba:27:18:7a:d9:26:9c:a4:d3:43:58:49:78:b8:12:f3:46
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A
        Validity
            Not Before: Jun 22 18:13:18 2023 GMT
            Not After : Jun 20 18:18:18 2024 GMT
        Subject: CN=D2EBF09E23577F9A733C349344A8E9678A48C83E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:7b:3e:04:11:06:8e:5d:9d:46:a1:de:8a:2a:
                    d5:de:6f:6a:24:b5:41:bc:c4:c9:58:64:8b:b7:74:
                    74:2a:42:27:e5:4e:37:a7:7a:a4:fc:8a:4c:73:0c:
                    25:d8:af:04:e5:49:95:39:34:4c:5f:6a:23:22:5a:
                    79:8d:7d:2c:7d:56:13:22:8c:cb:28:51:78:d4:5d:
                    a4:1e:26:fa:6f:f9:4e:af:fa:70:aa:f7:fd:6c:db:
                    0b:f2:74:e0:f1:61:dc:53:70:d2:48:a3:cc:7e:90:
                    e0:e8:1d:c9:8d:09:cc:ab:3f:d8:be:37:e6:73:14:
                    e6:fc:32:98:75:49:46:a0:fc:d5:ae:4b:54:10:e6:
                    f7:ae:be:ae:ee:31:d5:8d:5a:0c:01:44:8e:ef:ec:
                    ce:48:c4:34:c8:f7:c6:e0:15:64:05:f7:31:7f:69:
                    fd:18:9c:2c:97:01:e6:d0:bf:f7:66:e6:ee:7b:6a:
                    1f:98:1e:8e:61:cf:ef:95:af:96:02:94:fd:e2:74:
                    ea:2e:83:21:97:38:16:c0:e1:93:5a:21:ec:dd:eb:
                    83:c7:af:f3:62:4e:54:a8:d5:db:68:57:31:8e:50:
                    d7:4f:61:d8:4b:4e:a6:82:f9:30:be:da:d3:fe:e1:
                    2d:43:18:75:9d:96:53:f1:d0:a9:10:3b:3b:09:8a:
                    ab:25
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D2:EB:F0:9E:23:57:7F:9A:73:3C:34:93:44:A8:E9:67:8A:48:C8:3E
            X509v3 Authority Key Identifier:
                keyid:7A:3F:90:7A:7F:1E:82:A3:12:A9:EC:D2:C4:A3:E4:20:33:9C:2C:6A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7A3F907A7F1E82A312A9ECD2C4A3E420339C2C6A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CeRruZG2HFfdRVm8RnLUUBpy3sMFJUtKKZpa11CAz2cm/0/323830343a3135303a3a2f33302d3438203d3e203130393534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:150::/30

    Signature Algorithm: sha256WithRSAEncryption
         88:9f:1c:68:1d:c6:2c:41:92:51:8e:58:c9:56:30:97:f2:8a:
         26:de:c4:81:e4:f3:15:84:a9:aa:bb:32:8f:fa:92:1a:f5:77:
         dc:f7:78:5e:2e:a5:3b:c8:c6:ad:85:0e:84:c2:f7:51:71:1d:
         39:b9:ba:9d:56:cd:34:8c:dd:64:dd:cf:a5:25:fa:b3:d7:f8:
         6f:d6:49:bc:d0:0e:34:cd:f6:f6:c3:77:aa:95:d5:4e:07:b1:
         0f:de:b7:94:bf:bd:d4:5b:64:05:f3:30:45:ef:45:9b:ca:41:
         f0:c3:2a:03:15:0e:87:b8:39:2f:cf:d8:d2:3b:13:2d:b0:c9:
         41:83:46:02:df:14:34:d5:95:50:56:5e:91:ee:6e:db:a7:53:
         57:8f:f0:50:53:8e:85:c6:6d:61:03:a1:55:ed:16:11:f2:69:
         46:56:d2:82:d0:62:f4:1b:78:3a:cd:5d:7e:f1:21:d5:0e:d2:
         5e:dd:f0:10:79:a9:5b:86:f8:4d:51:5f:62:6a:e9:08:e6:7b:
         97:30:e5:5d:8f:75:9f:45:87:3c:78:34:cc:f5:8e:44:36:8b:
         a3:fd:cd:a8:31:0e:e8:87:bf:bc:6f:3d:ff:68:81:05:dd:eb:
         24:54:aa:b3:c5:c5:ba:eb:b2:06:14:0a:85:44:0d:61:92:25:
         c3:d4:bf:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org