Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa
File:                     323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa (raw, json)
Hash identifier:          7KI0fVqguuNPNtQ+0Jsj9wn7t4cWWOP1xjKFvtOsxzs=
Subject key identifier:   D4:8B:3F:61:05:B2:3C:2D:EC:2A:CE:9D:04:D5:55:1A:4D:25:E5:DF
Certificate issuer:       /CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
Certificate serial:       2A1CBB61539EDC1AA9748174505846AB488044FD
Authority key identifier: 2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa
Signing time:             Wed 03 Apr 2024 21:54:18 +0000
ROA not before:           Wed 03 Apr 2024 21:49:18 +0000
ROA not after:            Wed 02 Apr 2025 21:54:18 +0000
asID:                     52772
IP address blocks:        2804:259c:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2a:1c:bb:61:53:9e:dc:1a:a9:74:81:74:50:58:46:ab:48:80:44:fd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F
        Validity
            Not Before: Apr  3 21:49:18 2024 GMT
            Not After : Apr  2 21:54:18 2025 GMT
        Subject: CN=D48B3F6105B23C2DEC2ACE9D04D5551A4D25E5DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:19:9d:04:d7:3f:0f:d7:0d:7c:09:64:0b:16:
                    48:42:b8:96:9c:96:6e:09:6d:fe:cf:75:71:ed:36:
                    95:89:46:eb:f3:34:0a:aa:2c:0c:9f:40:83:ab:39:
                    71:c8:d7:26:d4:64:8d:98:03:b8:f9:b7:1a:d8:9a:
                    6b:96:62:2a:70:53:96:bf:95:c7:3c:df:07:d7:c1:
                    34:34:d1:1d:dc:26:3f:41:86:8d:89:98:40:83:96:
                    e7:48:7a:bb:a5:c2:9e:5e:3a:a5:1e:d3:7d:18:5e:
                    2b:60:8e:a3:56:88:b2:ba:87:5f:9a:aa:21:d4:1f:
                    21:c6:79:c9:59:ff:d4:5b:87:05:c6:9a:bd:39:4a:
                    d5:81:37:28:e0:a6:a9:76:31:f6:07:56:80:5b:db:
                    ac:92:fd:e7:72:6d:c0:6e:6f:0a:5a:f7:d4:3e:ad:
                    30:80:94:2b:94:ed:cd:28:f9:57:14:b2:62:1c:16:
                    42:d6:45:8a:cf:a9:90:4e:ce:a6:19:ff:f6:24:5d:
                    c8:da:32:1e:69:95:d0:26:93:92:05:cb:d5:b1:4b:
                    55:e2:0a:2a:9f:68:fc:ec:fd:b3:d8:fc:8c:6a:b3:
                    0f:ec:d6:6c:36:5b:a3:7b:38:8b:f6:3a:19:88:5c:
                    d7:cf:63:51:9f:c6:44:f5:08:b3:c5:3a:11:5a:b5:
                    36:1b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D4:8B:3F:61:05:B2:3C:2D:EC:2A:CE:9D:04:D5:55:1A:4D:25:E5:DF
            X509v3 Authority Key Identifier:
                keyid:2B:0E:37:CE:5F:21:EE:8A:D5:F2:86:A8:2A:5B:F9:E4:5B:30:BE:0F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/2B0E37CE5F21EE8AD5F286A82A5BF9E45B30BE0F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D3x4pwrjkHv82m1gxTKnpv8J5x4SCJfMbUKyNWiPdxTf/1/323830343a323539633a383030303a3a2f33342d3334203d3e203532373732.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:259c:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         49:06:c0:00:a2:6d:7f:1b:1a:79:2a:08:13:ed:2a:97:70:65:
         a5:cd:d0:53:5f:0e:26:b4:c1:ee:da:a4:f9:bb:72:89:a2:d1:
         e8:ee:6a:2d:1f:7d:b1:92:c0:59:f2:ab:fe:bc:45:e1:42:ff:
         23:6b:b5:36:b1:77:85:9e:11:a4:33:16:4e:4c:da:4d:2b:bf:
         cd:53:0e:cf:e5:e8:8d:1c:71:a2:02:3f:6b:fd:07:d4:d0:2c:
         b1:ef:00:56:75:d2:33:4b:5c:b4:ab:d3:dd:ef:10:10:2d:05:
         15:ab:83:a3:29:0b:6d:b5:40:2b:ac:4b:57:e3:dd:72:39:f1:
         ca:be:8e:f2:0c:ab:bf:5a:e4:34:e3:7e:5d:17:2b:95:47:4f:
         fe:64:b5:c9:c4:66:30:84:7b:82:11:cb:40:e7:3e:13:14:e1:
         df:21:fc:17:91:14:fa:1a:61:7f:c5:85:ff:22:ab:9f:61:d8:
         b1:4b:50:98:51:4b:57:a7:27:2d:1e:b9:3b:ef:c4:d3:ed:c0:
         ff:a4:95:43:24:ca:2f:17:5c:cf:b7:cf:ac:07:15:5f:b6:1e:
         47:18:2c:68:1e:1b:ea:e7:77:11:d4:f1:8a:72:6f:58:1d:8f:
         a4:75:dd:5a:00:de:28:8b:72:34:a7:72:92:08:dc:be:01:4e:
         a1:3c:6f:5a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 12 01:59:44 2024 by rpki-client on console-ams.rpki-client.org