Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a31303a3a2f34342d3434203d3e203238323630.roa
File:                     323830343a323865343a31303a3a2f34342d3434203d3e203238323630.roa (raw, json)
Hash identifier:          +Vp7uz5IBYmbDvIXrBnfvxZcoIdaK/o+hsASLvtpQHY=
Subject key identifier:   F6:99:95:F9:38:97:23:25:83:4E:B2:36:77:19:80:8A:35:5C:34:17
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       3B8C680607B8047476A0FD843E2D06FF4D92B585
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a31303a3a2f34342d3434203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:51 +0000
ROA not before:           Thu 09 Mar 2023 20:12:51 +0000
ROA not after:            Thu 07 Mar 2024 20:17:51 +0000
asID:                     28260
IP address blocks:        2804:28e4:10::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:8c:68:06:07:b8:04:74:76:a0:fd:84:3e:2d:06:ff:4d:92:b5:85
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:51 2023 GMT
            Not After : Mar  7 20:17:51 2024 GMT
        Subject: CN=F69995F938972325834EB2367719808A355C3417
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:9c:d6:81:8f:95:8a:fc:08:c1:e6:0f:a3:79:
                    eb:2b:a0:2d:9a:9e:95:1a:0d:31:fc:e8:65:27:9d:
                    48:f4:4c:b7:35:c7:02:9b:b8:49:c7:90:a2:a8:c4:
                    90:10:40:b3:d9:0a:84:03:25:67:25:b7:44:c1:b4:
                    84:d8:94:e4:1e:bd:a5:f3:4c:33:02:d7:18:8a:a7:
                    96:c4:76:fe:6e:cf:8b:31:a3:96:a9:ab:7d:ac:39:
                    36:1e:9c:c9:b0:ff:73:82:fb:c9:db:e9:27:6c:b2:
                    ab:62:d6:a1:c7:76:fc:69:90:9b:d3:50:cb:44:b2:
                    3c:57:15:19:4f:52:0e:8e:79:88:3c:dd:75:58:e2:
                    32:78:72:48:93:b7:11:f8:4f:80:a6:5b:c9:f7:36:
                    54:c4:15:58:9e:08:d3:cb:63:a5:80:66:01:20:99:
                    25:b1:05:8b:ef:0c:61:e9:50:1a:07:79:fb:34:ae:
                    2a:f1:64:42:60:0f:27:03:99:12:3b:56:79:ab:a6:
                    ee:c8:30:f8:99:a2:43:1a:58:52:4e:d6:1c:d3:aa:
                    24:0d:fc:0e:4a:05:f7:d9:88:6e:c0:0d:e1:2d:37:
                    f6:d4:ad:f2:e8:ca:2b:cf:0a:7f:6d:69:c0:e8:65:
                    b4:f2:42:d9:0d:bf:d8:2b:85:57:39:30:2f:79:35:
                    4f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F6:99:95:F9:38:97:23:25:83:4E:B2:36:77:19:80:8A:35:5C:34:17
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a31303a3a2f34342d3434203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:10::/44

    Signature Algorithm: sha256WithRSAEncryption
         4f:87:c1:bb:c9:d9:1d:28:25:00:41:56:41:78:cc:c1:1f:30:
         90:67:ce:e9:e6:b3:eb:ec:3d:33:82:e0:b4:05:4e:57:09:2e:
         c1:43:7f:ac:36:db:b6:c6:73:08:39:48:e9:16:bd:5b:3a:6a:
         ab:2f:ff:0c:01:d4:4b:b6:45:e4:06:da:1e:1d:2c:0a:28:00:
         a9:15:ca:04:ea:ca:20:a0:b8:56:1b:ca:f8:c8:39:3d:83:79:
         64:69:da:2d:cf:25:b2:31:93:2d:43:52:3d:ff:d6:77:8f:b1:
         dc:50:7b:68:4b:3b:7b:20:61:19:ca:27:3a:3c:85:3e:bd:23:
         fd:67:c9:5f:50:88:b5:dd:1f:29:ed:fe:e5:38:91:b1:37:53:
         1b:2f:3d:87:fc:ac:0b:e6:d6:b4:4b:e6:be:7b:74:0e:78:d8:
         4f:6b:4d:43:b5:b2:85:86:af:b9:52:ba:74:2a:9a:ef:cc:61:
         ca:7c:27:2b:0e:e3:bd:99:4f:cd:31:c7:b8:d2:e9:e4:f7:3f:
         67:12:3f:7f:9f:5e:e7:c2:34:71:ea:37:6d:df:f5:97:f3:6b:
         b5:cf:6d:11:1e:1a:b9:d7:ea:1e:c2:93:94:60:69:a6:b6:dd:
         f7:2a:0a:01:a1:98:bc:0c:58:48:b8:ae:72:de:7b:f1:72:31:
         28:94:fd:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org