Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/323830343a366665383a3a2f33322d3432203d3e20323730363932.roa
File:                     323830343a366665383a3a2f33322d3432203d3e20323730363932.roa (raw, json)
Hash identifier:          kt4UZheSddTzo1+b8orxbmENuds11lGnNl5QQ/ex6q0=
Subject key identifier:   E4:C8:09:CA:A4:AE:15:E6:08:C6:A7:5B:60:EC:A9:34:02:50:F1:CF
Certificate issuer:       /CN=4B28FA6097EDAF3D1C740125A43F5115184B3E7F
Certificate serial:       551C55842FEE49655364509BC0EF1561AAA3C938
Authority key identifier: 4B:28:FA:60:97:ED:AF:3D:1C:74:01:25:A4:3F:51:15:18:4B:3E:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/323830343a366665383a3a2f33322d3432203d3e20323730363932.roa
Signing time:             Thu 04 Apr 2024 06:15:29 +0000
ROA not before:           Thu 04 Apr 2024 06:10:29 +0000
ROA not after:            Thu 03 Apr 2025 06:15:29 +0000
asID:                     270692
IP address blocks:        2804:6fe8::/32 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:1c:55:84:2f:ee:49:65:53:64:50:9b:c0:ef:15:61:aa:a3:c9:38
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4B28FA6097EDAF3D1C740125A43F5115184B3E7F
        Validity
            Not Before: Apr  4 06:10:29 2024 GMT
            Not After : Apr  3 06:15:29 2025 GMT
        Subject: CN=E4C809CAA4AE15E608C6A75B60ECA9340250F1CF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:bb:0e:a3:95:8d:b2:7c:2d:b8:f1:01:b3:97:
                    1d:a2:19:7a:07:14:c6:c0:4e:e9:cc:ed:0d:75:da:
                    19:72:ac:93:6d:ca:71:09:ea:aa:2a:5c:cc:14:58:
                    73:f3:ce:5a:69:9c:e8:6b:ae:a5:41:b1:c4:cc:51:
                    47:29:26:97:c2:31:c4:32:d6:1f:4f:e2:a1:ed:c1:
                    71:5a:0b:e1:dd:8c:41:b1:35:fc:73:7a:8d:72:a9:
                    37:f5:5c:e7:c6:c6:3b:72:00:8b:d9:e0:26:1b:1e:
                    8b:d6:a3:7e:75:75:87:1e:b9:a1:6b:48:2f:eb:d0:
                    94:c4:8c:2b:a5:5a:43:f0:1c:a1:9c:58:35:56:7f:
                    73:03:6d:56:3b:a0:da:75:12:a7:e7:84:cc:bd:94:
                    e9:e5:36:15:c0:76:1f:b1:7d:7a:cf:35:53:ce:8c:
                    fb:8a:68:bf:bf:bc:40:4a:33:9e:58:7c:a0:1b:19:
                    27:57:2d:62:86:84:86:ca:bb:3b:75:2e:b6:2f:93:
                    43:53:13:3c:b3:70:5f:c0:d8:c1:01:ea:56:1f:bb:
                    68:dc:63:2e:d4:5a:19:3d:5b:23:60:32:fa:8a:90:
                    a6:67:16:81:9f:88:6d:83:f8:1f:d2:f6:52:90:f7:
                    d7:f0:40:94:24:50:58:10:48:f3:07:97:b9:ee:68:
                    14:e3
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                E4:C8:09:CA:A4:AE:15:E6:08:C6:A7:5B:60:EC:A9:34:02:50:F1:CF
            X509v3 Authority Key Identifier:
                keyid:4B:28:FA:60:97:ED:AF:3D:1C:74:01:25:A4:3F:51:15:18:4B:3E:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/4B28FA6097EDAF3D1C740125A43F5115184B3E7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D22S2fFD3vBiGgDajdav7YNXyxUqjZgW3xexjkVpu2Nm/2/323830343a366665383a3a2f33322d3432203d3e20323730363932.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6fe8::/32

    Signature Algorithm: sha256WithRSAEncryption
         91:be:11:3d:f4:2b:0f:04:ab:e3:71:b7:9d:51:ef:04:4d:21:
         63:fe:64:3c:b4:5e:4a:ea:fe:94:ed:13:71:57:44:c1:82:ad:
         19:f5:d4:aa:2c:fa:27:d6:41:4d:a2:e6:a6:11:e8:88:56:22:
         7c:af:6e:c1:21:75:d4:ce:e3:ec:b6:d4:09:fb:1a:38:d3:17:
         15:c8:00:73:60:a6:0c:96:11:cb:e3:db:c8:e8:ec:ba:ea:ed:
         fc:25:5d:d9:05:65:24:c7:5b:c6:3c:06:a0:86:34:cd:0b:21:
         17:de:c0:8e:6d:07:05:0c:19:24:52:10:13:97:36:b3:5d:bf:
         61:78:4a:a2:73:cd:20:30:39:88:42:c4:b5:e4:64:ba:d8:bc:
         18:04:27:a8:19:6a:ac:17:79:22:46:0f:e3:44:65:a2:4f:ce:
         f6:5e:01:85:df:42:f5:af:b8:1d:4b:49:14:e7:58:00:aa:b1:
         64:12:4e:ec:37:fb:af:60:b0:c5:99:21:89:30:79:c3:f1:1e:
         08:d4:54:25:49:7d:2e:9b:d4:03:48:17:cc:6d:db:0b:86:34:
         8a:8e:15:18:cf:f4:a7:c9:b9:aa:1c:86:2b:15:40:53:10:65:
         7e:49:aa:54:35:24:2a:7c:bc:ed:f9:29:4e:3f:7f:5b:41:59:
         70:c5:d8:e2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Nov 7 18:18:42 2024 by rpki-client on console-fra.rpki-client.org