Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3438203d3e203532373732.roa
File:                     323830343a323539633a3a2f33322d3438203d3e203532373732.roa (raw, json)
Hash identifier:          gPvFqjL8fAbduR8MYQD1PJhHGfXllSuopDdYffsngaw=
Subject key identifier:   22:16:C9:C8:5D:F5:CB:E7:49:25:7C:6B:9A:B9:69:0D:51:12:3D:81
Certificate issuer:       /CN=EC875FA85A1BEAB5C7B068927C636B5908F78397
Certificate serial:       1153B96CF7A70A48F22FC61A7B76056E4DCB66B3
Authority key identifier: EC:87:5F:A8:5A:1B:EA:B5:C7:B0:68:92:7C:63:6B:59:08:F7:83:97
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC875FA85A1BEAB5C7B068927C636B5908F78397.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3438203d3e203532373732.roa
Signing time:             Sat 17 Feb 2024 13:36:52 +0000
ROA not before:           Sat 17 Feb 2024 13:31:52 +0000
ROA not after:            Sat 15 Feb 2025 13:36:52 +0000
asID:                     52772
IP address blocks:        2804:259c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            11:53:b9:6c:f7:a7:0a:48:f2:2f:c6:1a:7b:76:05:6e:4d:cb:66:b3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=EC875FA85A1BEAB5C7B068927C636B5908F78397
        Validity
            Not Before: Feb 17 13:31:52 2024 GMT
            Not After : Feb 15 13:36:52 2025 GMT
        Subject: CN=2216C9C85DF5CBE749257C6B9AB9690D51123D81
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:24:78:91:a3:c2:3b:98:b8:5a:8d:00:53:be:
                    d2:d6:85:bb:b3:f0:ed:52:f8:96:78:06:4a:f7:35:
                    a1:7c:33:92:d8:f9:4b:bc:b9:30:48:ad:37:eb:1b:
                    f9:ac:b6:89:4a:60:22:08:43:74:c6:2d:fa:cf:89:
                    1d:0a:5d:ec:96:8b:c1:7b:2d:f6:f2:5c:3f:f1:50:
                    fd:82:6d:5a:59:a5:99:56:33:cf:67:d9:93:d3:3e:
                    19:27:8f:2f:46:a3:bc:65:34:e1:90:fa:76:31:01:
                    4c:fb:6f:72:66:dd:f7:a3:cf:d5:c5:19:e5:a3:52:
                    18:52:26:ad:06:43:e9:ab:96:ce:41:c2:d8:cb:59:
                    17:95:b7:d9:80:fb:16:e2:05:be:c5:aa:9e:76:ad:
                    03:fa:a3:eb:fb:c6:9a:22:51:5f:5d:c4:d2:6d:8a:
                    29:19:72:58:b3:96:60:49:d0:a8:96:c4:00:99:24:
                    59:32:8a:42:c3:50:8a:f0:22:fa:7b:39:01:db:7c:
                    30:4f:6f:f8:34:2c:27:d8:68:ad:40:a3:f7:31:ce:
                    76:4c:0c:e4:1b:32:39:49:0b:c9:a4:33:6e:a8:87:
                    8a:b9:7f:2b:d5:19:b0:42:35:d3:82:f2:fc:1a:9a:
                    46:53:b3:0d:35:fe:ee:e2:ff:af:c8:3f:53:44:c6:
                    e1:cb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:16:C9:C8:5D:F5:CB:E7:49:25:7C:6B:9A:B9:69:0D:51:12:3D:81
            X509v3 Authority Key Identifier:
                keyid:EC:87:5F:A8:5A:1B:EA:B5:C7:B0:68:92:7C:63:6B:59:08:F7:83:97

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/EC875FA85A1BEAB5C7B068927C636B5908F78397.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/EC875FA85A1BEAB5C7B068927C636B5908F78397.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/0/323830343a323539633a3a2f33322d3438203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c::/32

    Signature Algorithm: sha256WithRSAEncryption
         6b:c7:f1:34:d7:a9:d4:fd:54:ee:1d:d8:70:02:8a:2c:e2:1e:
         1b:eb:e0:14:5d:fe:56:a9:10:37:39:5c:04:6a:e0:ff:a7:fc:
         56:ad:66:2a:ae:15:b9:d0:f3:d1:0d:5d:97:8f:cf:55:6c:c2:
         4d:17:08:b0:a6:63:da:15:bf:86:7f:70:3d:dc:98:4e:5b:dd:
         59:09:8a:bc:ac:0d:33:15:c9:f1:2d:06:ad:77:8c:3f:ab:40:
         6d:18:c4:fc:eb:f6:d5:1a:07:0a:e7:81:59:3f:9d:d8:d8:1f:
         2d:a0:0d:e1:97:ba:52:c4:75:80:31:3a:2b:3c:46:21:21:e7:
         ac:66:06:8b:8b:1f:40:f7:7b:5a:9c:31:77:7d:05:bc:41:f7:
         29:0f:4d:0d:50:10:70:f4:91:48:0f:f0:63:40:b3:1f:e2:61:
         8f:cf:1e:82:a1:9d:2f:79:fa:c6:b6:49:8f:b6:88:16:6b:b2:
         1f:4a:da:c2:6c:f1:11:17:5a:58:cb:1b:90:c9:a6:75:85:92:
         54:ab:ce:a2:98:75:d0:50:4e:72:3a:96:77:55:01:f5:09:97:
         71:ad:5f:ce:56:44:3a:dc:59:4e:44:9c:b5:8f:e8:f6:49:24:
         a7:bd:13:02:d2:ae:71:08:99:fc:f8:b5:19:34:e2:44:57:7e:
         4c:03:66:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:22 2024 by rpki-client on console-ams.rpki-client.org