Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a383030303a3a2f33332d3333203d3e203631373834.roa
File:                     323830343a313934383a383030303a3a2f33332d3333203d3e203631373834.roa (raw, json)
Hash identifier:          N1kAiUiEK0/ZKI0HveF9j03NOPOD0mVa5NpvHPaCIlk=
Subject key identifier:   46:58:E0:50:50:A0:AE:A9:C3:DD:CB:D3:13:3F:56:2D:53:BC:0D:32
Certificate issuer:       /CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
Certificate serial:       4AE18F04FB89F5EDDACAFB401A3ECBE8F8621C34
Authority key identifier: 1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a383030303a3a2f33332d3333203d3e203631373834.roa
Signing time:             Thu 11 Jan 2024 16:12:33 +0000
ROA not before:           Thu 11 Jan 2024 16:07:33 +0000
ROA not after:            Thu 09 Jan 2025 16:12:33 +0000
asID:                     61784
IP address blocks:        2804:1948:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:e1:8f:04:fb:89:f5:ed:da:ca:fb:40:1a:3e:cb:e8:f8:62:1c:34
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BDBB5DFA9C54F2972A81E74C4904512B468E0F8
        Validity
            Not Before: Jan 11 16:07:33 2024 GMT
            Not After : Jan  9 16:12:33 2025 GMT
        Subject: CN=4658E05050A0AEA9C3DDCBD3133F562D53BC0D32
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ce:44:fd:a2:e2:45:d3:e0:94:df:a8:5f:cc:a9:
                    9f:7d:e1:b7:c9:ba:af:5e:f4:c1:d5:b2:24:fc:a6:
                    ec:d7:d4:96:33:30:2d:61:ad:5a:df:b6:79:23:a4:
                    3b:05:03:f4:27:bf:32:c3:9d:2c:23:3a:7c:d5:0d:
                    6d:4b:fc:39:a6:4d:b4:59:e0:a0:41:87:79:45:91:
                    79:08:99:3a:6b:53:c7:86:bc:43:6b:d0:8a:8d:f1:
                    42:ad:2a:ea:33:95:3c:21:a1:97:df:0c:76:8b:3c:
                    96:50:da:72:ab:9a:25:0d:1b:f4:af:ed:aa:f9:45:
                    af:d8:4d:29:6a:ed:db:73:df:51:01:63:63:96:e6:
                    df:57:0a:28:f0:62:77:81:03:70:41:a9:50:25:e1:
                    31:b3:70:c6:2a:d9:b2:1b:b0:77:fb:91:88:06:f4:
                    88:ae:4f:45:e7:cf:be:42:e9:53:98:d9:75:52:cb:
                    be:e5:90:9c:17:31:ee:e6:af:80:cb:16:6a:a9:91:
                    1a:ee:c4:27:7e:d1:15:a4:29:99:09:6f:85:17:0a:
                    83:3f:92:76:cc:46:42:0d:1c:97:ab:73:d4:ed:c0:
                    9b:79:50:aa:7f:07:95:57:03:8e:ca:2e:d3:fe:37:
                    97:15:ca:06:80:8a:98:09:10:14:3c:f8:57:a6:e4:
                    9a:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                46:58:E0:50:50:A0:AE:A9:C3:DD:CB:D3:13:3F:56:2D:53:BC:0D:32
            X509v3 Authority Key Identifier:
                keyid:1B:DB:B5:DF:A9:C5:4F:29:72:A8:1E:74:C4:90:45:12:B4:68:E0:F8

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1BDBB5DFA9C54F2972A81E74C4904512B468E0F8.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D4EWTXXGUioBpaS38bWUGP31w1pGhEVLqDdRbUbZ2TUR/0/323830343a313934383a383030303a3a2f33332d3333203d3e203631373834.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1948:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         28:4c:ce:0b:e0:8e:21:5d:c3:b9:fd:93:cd:b5:b3:fb:05:0c:
         78:cb:f4:a6:d5:8e:e1:45:7a:61:2c:17:f3:bd:03:4d:31:ed:
         f7:86:78:a8:a7:6a:28:cb:59:6f:17:01:cd:3f:8a:5f:bb:59:
         e4:bb:72:84:c1:d2:77:59:4d:e8:c6:08:3e:99:26:0c:07:15:
         b0:64:b0:51:da:a2:28:93:fa:ff:8f:12:2f:ad:40:c0:b4:05:
         b1:e7:d1:71:65:e5:0d:24:47:08:6b:8a:18:f0:1a:e4:9f:a2:
         3c:52:25:25:aa:95:74:9a:f4:68:a1:2d:75:3c:ba:04:7a:87:
         7d:0e:e8:90:f5:63:89:92:cf:72:b5:bf:3b:d4:a2:5f:5d:57:
         07:5a:74:a7:76:72:96:70:20:b9:b0:00:82:18:d9:cb:ee:20:
         ed:80:46:5e:8a:47:ab:f4:1e:3b:a0:c9:23:ba:e8:2f:32:8c:
         21:97:5c:16:38:8c:66:4c:a6:10:39:b4:b1:98:a0:e0:40:b4:
         04:45:20:53:e1:16:d4:95:fd:49:52:fb:29:c8:ab:75:73:c3:
         fd:38:56:2c:27:12:82:84:21:e9:13:8d:f3:5c:26:e9:d7:dd:
         b9:0e:bb:a3:48:79:0e:8a:c0:26:7b:83:98:48:6d:c7:56:25:
         4b:4e:79:14
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:00 2024 by rpki-client on console-fra.rpki-client.org