Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/0/323830343a363238383a3a2f33322d313238203d3e20323639333032.roa
File:                     323830343a363238383a3a2f33322d313238203d3e20323639333032.roa (raw, json)
Hash identifier:          RK/cv36LjmSyBLVXNRTluRBNyzigEAoHGgGtzLTMemU=
Subject key identifier:   F7:02:BB:61:9C:68:BA:FC:4D:C1:72:25:67:56:62:28:C0:E0:37:7C
Certificate issuer:       /CN=D436C26BC53142761B397F4B5DE3C0E21F27A199
Certificate serial:       3598A250BFBC32B3C6B2E455B375DCC085CF2BE6
Authority key identifier: D4:36:C2:6B:C5:31:42:76:1B:39:7F:4B:5D:E3:C0:E2:1F:27:A1:99
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D436C26BC53142761B397F4B5DE3C0E21F27A199.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/0/323830343a363238383a3a2f33322d313238203d3e20323639333032.roa
Signing time:             Sat 06 Apr 2024 16:00:21 +0000
ROA not before:           Sat 06 Apr 2024 15:55:21 +0000
ROA not after:            Sat 05 Apr 2025 16:00:21 +0000
asID:                     269302
IP address blocks:        2804:6288::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:98:a2:50:bf:bc:32:b3:c6:b2:e4:55:b3:75:dc:c0:85:cf:2b:e6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D436C26BC53142761B397F4B5DE3C0E21F27A199
        Validity
            Not Before: Apr  6 15:55:21 2024 GMT
            Not After : Apr  5 16:00:21 2025 GMT
        Subject: CN=F702BB619C68BAFC4DC1722567566228C0E0377C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:df:94:05:98:e7:8c:94:7e:39:7f:2a:09:0e:ff:
                    47:0e:c9:94:5c:b7:8e:4a:cd:d1:8d:70:0d:80:95:
                    f6:3d:f6:bb:31:b9:b0:84:e3:d7:5e:15:37:6d:06:
                    b9:3f:1d:8f:f9:99:41:46:28:33:56:1c:ed:dc:29:
                    59:95:58:82:33:ec:d8:4e:36:90:df:23:e7:98:f4:
                    f8:06:e3:1b:62:8d:a2:eb:b2:14:b3:6f:54:4f:10:
                    a7:3e:b2:f2:df:22:c1:62:b5:61:bb:52:83:13:86:
                    1c:f7:41:01:d6:fa:fb:1a:60:e9:02:00:6d:83:c3:
                    dd:2e:98:c4:18:3f:95:9a:6b:0c:21:11:bd:cf:f9:
                    dd:dc:e6:92:07:9a:2c:89:7a:fa:bf:47:c6:cc:2d:
                    c6:30:cc:3f:5e:d5:51:af:d4:e9:db:3d:49:54:b8:
                    41:47:5c:f1:6f:8d:28:c3:0a:6f:3c:6b:dd:da:7d:
                    7b:97:9f:92:91:14:96:91:1f:2e:61:ef:ab:45:fe:
                    a9:a6:d4:42:0e:3e:e4:a6:51:32:0c:42:30:5c:b4:
                    4e:69:39:41:05:7e:cb:4d:2d:56:44:af:31:9b:3f:
                    50:88:cc:ea:82:b8:fe:84:ae:6d:b8:3e:51:79:32:
                    66:31:8f:69:a7:6d:99:6e:e4:57:c9:91:e7:91:a6:
                    66:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F7:02:BB:61:9C:68:BA:FC:4D:C1:72:25:67:56:62:28:C0:E0:37:7C
            X509v3 Authority Key Identifier:
                keyid:D4:36:C2:6B:C5:31:42:76:1B:39:7F:4B:5D:E3:C0:E2:1F:27:A1:99

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/0/D436C26BC53142761B397F4B5DE3C0E21F27A199.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D436C26BC53142761B397F4B5DE3C0E21F27A199.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CgFW4qUHiiMR7yt2uF2KgbvCXLH27bbAUscu2bECXqtF/0/323830343a363238383a3a2f33322d313238203d3e20323639333032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6288::/32

    Signature Algorithm: sha256WithRSAEncryption
         82:83:46:cf:5e:7f:aa:c8:f9:8f:00:9e:df:24:63:1a:01:3a:
         f9:67:5a:1d:1f:05:b0:11:f0:96:bf:0a:fc:b3:1a:79:2d:9e:
         24:ae:e3:dc:64:7c:34:21:b6:4e:d2:5b:a8:84:b2:c1:1e:2f:
         6e:4a:53:b8:5f:1a:f4:44:a9:ab:0f:b3:17:8a:74:ca:6d:cf:
         23:9a:73:b4:30:ec:32:ca:f0:35:66:b2:11:bd:ef:9f:91:3b:
         bd:7c:2e:65:63:b9:94:b4:e2:77:3a:e5:35:b8:ab:18:23:66:
         e1:40:43:da:f1:25:1b:4c:bf:d1:a8:93:02:bf:f0:22:2b:cd:
         10:78:3a:b7:66:2f:4e:20:bb:dd:13:a4:48:e4:88:d0:ef:3c:
         55:fe:56:d9:99:9b:9b:4b:e1:74:4c:45:51:d7:02:cb:3f:76:
         c0:cd:fb:aa:47:21:99:0e:98:ea:82:b3:e9:af:17:b8:28:14:
         fa:c0:74:d2:65:f7:85:40:58:f7:0d:88:ba:f0:4e:ec:21:d5:
         43:2e:7f:3d:5b:bf:db:f9:7f:06:2a:60:6e:45:b5:61:e9:60:
         c9:eb:b9:ad:9c:11:cc:47:c5:02:ac:fa:d0:6e:e4:f3:15:95:
         a9:65:5f:38:d4:a2:76:a6:5a:00:1a:e1:ce:c8:99:06:b7:7d:
         e2:4b:ee:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org