Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a3a2f33322d3438203d3e20323632373431.roa
File:                     323830343a326233303a3a2f33322d3438203d3e20323632373431.roa (raw, json)
Hash identifier:          XfooUzONBHP2fmIsbSB7gM9CbzEO8E1BjSgFjzz0CFs=
Subject key identifier:   8E:B5:22:90:30:BD:D4:E4:DC:A4:F4:62:61:B6:A8:EF:91:E3:9E:BA
Certificate issuer:       /CN=E6ABDC76C8CD188991C376BDC7A9A855FAC4ECD1
Certificate serial:       7E0C4DB17FE6684947ABD0344E52555C7DEEEB40
Authority key identifier: E6:AB:DC:76:C8:CD:18:89:91:C3:76:BD:C7:A9:A8:55:FA:C4:EC:D1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6ABDC76C8CD188991C376BDC7A9A855FAC4ECD1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a3a2f33322d3438203d3e20323632373431.roa
Signing time:             Thu 01 Feb 2024 14:03:31 +0000
ROA not before:           Thu 01 Feb 2024 13:58:31 +0000
ROA not after:            Thu 30 Jan 2025 14:03:31 +0000
asID:                     262741
IP address blocks:        2804:2b30::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:0c:4d:b1:7f:e6:68:49:47:ab:d0:34:4e:52:55:5c:7d:ee:eb:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E6ABDC76C8CD188991C376BDC7A9A855FAC4ECD1
        Validity
            Not Before: Feb  1 13:58:31 2024 GMT
            Not After : Jan 30 14:03:31 2025 GMT
        Subject: CN=8EB5229030BDD4E4DCA4F46261B6A8EF91E39EBA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:99:8d:b0:37:25:6a:c6:d2:72:1c:b1:34:24:e1:
                    6f:8e:cc:1b:db:87:13:e4:1f:1e:01:a5:81:3b:69:
                    0d:69:11:c6:07:a1:11:d1:61:37:78:3e:3f:aa:f7:
                    d8:5d:6c:a2:17:f0:ae:cf:e4:8a:16:d0:80:cd:fa:
                    e7:a2:2b:5c:a6:04:41:ed:58:e6:81:23:52:94:97:
                    db:98:e3:3f:26:57:17:30:54:7b:a1:f7:bf:f6:57:
                    e5:6d:12:e3:20:2b:f1:be:58:49:52:36:cf:e3:5d:
                    24:b6:17:fd:b7:12:e7:cd:ca:df:86:a4:1a:cf:64:
                    49:7e:c6:0e:3b:81:b7:d8:3f:29:70:bf:60:db:65:
                    c7:2b:da:14:23:34:2f:74:fc:14:a0:1c:84:26:cd:
                    42:f5:a3:32:ab:e3:b1:fc:83:ed:24:c6:73:3f:c4:
                    62:39:0a:45:d5:e4:89:3f:3f:f3:d2:7d:5e:ad:28:
                    c2:8d:6a:2e:c3:92:93:9c:bd:f6:6f:6a:32:5d:7d:
                    96:ca:26:fd:5d:71:66:5f:49:a7:63:f3:f9:f2:f7:
                    91:3f:42:77:38:af:5a:4a:98:71:c3:de:02:ef:5d:
                    20:77:33:74:32:85:96:cd:8f:60:ed:7d:b4:2c:3f:
                    0d:01:63:44:5c:23:13:7f:37:95:19:79:66:63:f2:
                    35:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8E:B5:22:90:30:BD:D4:E4:DC:A4:F4:62:61:B6:A8:EF:91:E3:9E:BA
            X509v3 Authority Key Identifier:
                keyid:E6:AB:DC:76:C8:CD:18:89:91:C3:76:BD:C7:A9:A8:55:FA:C4:EC:D1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/E6ABDC76C8CD188991C376BDC7A9A855FAC4ECD1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E6ABDC76C8CD188991C376BDC7A9A855FAC4ECD1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/CmnHRGZzHABhyhzy5XPXs6qzV5Hxxa1AoG3xpneiBcW1/0/323830343a326233303a3a2f33322d3438203d3e20323632373431.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2b30::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:5f:13:74:1d:4f:56:d7:53:f5:c2:8e:1d:c2:08:91:49:fb:
         1c:0c:bb:01:29:2d:67:1f:62:43:e6:e0:a0:87:c9:b5:5c:e7:
         4b:13:90:24:e9:f6:aa:e1:b8:f5:65:42:b8:ef:ea:a9:86:a2:
         56:b3:f0:3b:6d:cd:36:40:2d:a3:80:59:f0:e1:47:41:f2:bf:
         c1:fe:3c:e3:e0:2c:af:2d:a4:17:9a:0d:ff:e9:df:26:e3:a0:
         ca:67:8a:2b:62:c2:78:ff:72:22:0f:f6:db:64:0c:3a:16:ee:
         8c:3a:04:26:a9:56:a4:3a:ee:47:43:e4:8f:d4:b7:3f:62:7a:
         d2:42:97:4f:c7:02:da:53:5a:bb:63:a4:88:0a:17:bc:39:d1:
         59:7f:af:19:4f:dd:62:94:bb:cf:1f:ba:15:18:b5:fb:f3:18:
         fb:09:3e:ff:51:eb:17:75:25:10:4a:7f:f4:c7:68:e2:7f:a0:
         d8:dc:2f:a9:e0:22:7e:ae:87:66:ba:49:64:73:00:69:09:50:
         7b:d3:bf:7d:e5:9b:7c:81:4c:ac:df:e0:d7:38:cf:24:e3:5d:
         fc:51:18:30:e4:e3:90:ff:63:96:c2:c8:62:0b:99:ac:92:a5:
         1e:84:e8:98:02:8d:de:93:25:bf:9d:2b:10:3e:b1:fd:bf:79:
         50:74:62:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:27 2024 by rpki-client on console-fra.rpki-client.org