Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a353a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a353a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          kAJGZCAbd5cHEVEITNIk2KJfw5QU6SbSJxvMLY1lhKE=
Subject key identifier:   5D:A6:09:9C:32:9C:2A:D0:49:84:C8:2D:96:4E:F0:A5:67:68:34:F4
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       0C58A3FE979B9FDD153F9C2729FBE7983C82DB61
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a353a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:50 +0000
ROA not before:           Thu 09 Mar 2023 20:12:50 +0000
ROA not after:            Thu 07 Mar 2024 20:17:50 +0000
asID:                     28260
IP address blocks:        2804:28e4:5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0c:58:a3:fe:97:9b:9f:dd:15:3f:9c:27:29:fb:e7:98:3c:82:db:61
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:50 2023 GMT
            Not After : Mar  7 20:17:50 2024 GMT
        Subject: CN=5DA6099C329C2AD04984C82D964EF0A5676834F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d2:07:c1:b4:de:85:32:7d:41:b2:56:05:fc:96:
                    ef:8b:13:f5:e1:59:a5:25:b6:72:09:c1:34:2a:62:
                    e8:5a:8f:1d:60:4f:48:73:93:63:12:bc:b5:12:07:
                    15:75:6a:7b:7b:e2:47:af:f7:82:81:4d:6d:82:2a:
                    99:07:a0:a3:23:c2:02:f1:e7:f0:88:ad:1d:ad:5e:
                    f0:90:59:45:47:88:70:df:cb:c1:bb:48:96:70:ac:
                    0e:30:c9:a5:fe:5b:35:43:60:d9:cd:ab:81:f7:ca:
                    b2:d9:e5:6a:db:65:12:c2:59:a8:2b:76:59:cf:f6:
                    fe:0c:8d:f8:55:fb:f7:dd:d9:b4:e0:d9:0d:86:79:
                    aa:79:dc:53:e3:ce:35:c9:81:b2:56:9e:dd:57:fb:
                    d3:93:b1:66:87:e9:73:30:50:93:98:17:74:52:17:
                    18:60:3a:a3:c4:8d:5c:f3:e3:90:2d:44:b1:ee:a6:
                    65:05:bf:eb:b6:71:28:bd:b4:a2:43:70:60:30:e0:
                    f6:25:2a:2d:a8:73:b7:32:23:19:de:3a:78:85:1e:
                    01:9a:7e:a5:11:cd:85:87:75:31:30:e3:1f:9b:00:
                    d7:e3:c7:03:57:54:ea:2a:b1:9e:27:da:d8:6a:67:
                    0e:33:e1:6f:0f:7d:e5:d0:0f:70:7c:a2:05:b3:cf:
                    4e:57
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                5D:A6:09:9C:32:9C:2A:D0:49:84:C8:2D:96:4E:F0:A5:67:68:34:F4
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a353a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:5::/48

    Signature Algorithm: sha256WithRSAEncryption
         03:53:c0:ab:1c:ab:69:a8:99:9c:c7:58:ae:0d:6b:b5:96:a7:
         df:a3:19:6c:71:67:a3:31:68:b7:ef:b0:3c:82:5e:8d:e0:9b:
         e9:8a:e8:11:9c:c0:fc:9e:2b:5d:c6:00:da:a2:26:5c:4d:64:
         96:8f:46:87:a8:a5:f3:ad:ab:81:18:f8:29:6d:cc:f0:33:e1:
         6b:3a:4b:b9:27:f4:67:bf:1f:7c:f5:7a:1b:53:62:7d:ed:97:
         02:d3:ac:9b:ff:3c:92:16:01:47:02:ca:08:c5:40:f9:af:9d:
         f8:52:15:56:6a:5d:fc:45:de:f7:19:a7:74:ac:f9:d2:b1:41:
         0b:41:5b:a5:47:bd:08:cf:b3:65:ac:56:6a:33:d3:12:f1:dd:
         54:a9:c8:df:8c:43:25:d5:0a:d3:1e:a9:09:47:3d:3f:08:03:
         fc:d2:da:56:76:9f:18:c8:eb:3e:0f:62:f2:8f:61:e8:7c:b0:
         a0:b2:4b:ed:d1:a7:77:ce:c1:6e:50:5a:43:04:dc:ab:3e:18:
         e5:a4:bf:20:4a:0d:e9:ef:15:9a:da:d2:68:8b:1b:07:84:6e:
         9d:4b:be:b4:73:4d:de:5f:0b:e9:2d:8a:07:86:45:3c:0f:ab:
         2b:d9:d1:75:9c:54:e5:8a:98:4d:a3:ee:8f:92:aa:f4:ed:9e:
         28:09:b8:bb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org