Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653032393a3a2f34382d3438203d3e203238323630.roa
File:                     323830343a323865343a653032393a3a2f34382d3438203d3e203238323630.roa (raw, json)
Hash identifier:          paMQMCLBeMeN7GTWl3eWc38dFCadmLmDSu8+3Cs3C3w=
Subject key identifier:   B2:3D:43:3A:B6:0F:CF:3B:E3:6D:70:B7:98:83:78:B2:7A:A1:29:E6
Certificate issuer:       /CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
Certificate serial:       37974183DE78045EF9895B2DAD10B0BD65A96A5E
Authority key identifier: A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653032393a3a2f34382d3438203d3e203238323630.roa
Signing time:             Thu 09 Mar 2023 20:17:56 +0000
ROA not before:           Thu 09 Mar 2023 20:12:56 +0000
ROA not after:            Thu 07 Mar 2024 20:17:56 +0000
asID:                     28260
IP address blocks:        2804:28e4:e029::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:97:41:83:de:78:04:5e:f9:89:5b:2d:ad:10:b0:bd:65:a9:6a:5e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5
        Validity
            Not Before: Mar  9 20:12:56 2023 GMT
            Not After : Mar  7 20:17:56 2024 GMT
        Subject: CN=B23D433AB60FCF3BE36D70B7988378B27AA129E6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:c0:2d:b8:a2:86:71:94:a0:52:15:3a:5c:2c:
                    ff:14:f5:38:56:e9:09:8e:58:d1:5b:2b:07:b4:22:
                    c0:59:07:05:18:9b:34:00:a4:ba:85:1d:a9:86:a4:
                    29:9b:8c:f2:cd:86:87:ec:f3:ef:0b:e0:74:45:fd:
                    9d:22:58:cc:a5:02:6e:76:d4:5a:58:a8:aa:56:5f:
                    b6:0f:c1:71:6e:03:f0:d1:95:4d:5f:10:41:42:ad:
                    ee:ac:07:51:d9:1e:48:d4:d9:06:ba:2e:72:ce:67:
                    0e:92:e1:1c:bf:57:30:2d:7b:6a:8b:60:77:9d:07:
                    21:b5:e2:4b:54:21:4a:da:c3:8a:26:0b:34:e7:03:
                    94:95:83:2f:31:95:67:24:90:2d:87:03:74:69:00:
                    3e:85:04:08:4f:b0:52:18:79:77:cf:d1:8c:c1:ac:
                    b9:0d:eb:41:f9:fd:e9:0c:bb:9d:c1:14:d0:65:e7:
                    75:dd:ec:d5:3b:ed:22:77:fc:e5:d8:a9:4e:39:36:
                    fa:d4:41:fb:a5:d3:9c:43:dc:91:f5:a1:74:e9:e3:
                    45:e6:b6:9f:da:41:c6:07:00:54:e7:36:9e:c7:9f:
                    66:a1:ae:ce:f8:62:1f:dc:d8:b4:40:5f:60:66:8d:
                    74:b1:a0:c6:e6:84:10:1d:30:bd:d4:e2:2e:95:dd:
                    92:59
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:3D:43:3A:B6:0F:CF:3B:E3:6D:70:B7:98:83:78:B2:7A:A1:29:E6
            X509v3 Authority Key Identifier:
                keyid:A4:D8:EB:E0:76:5C:AD:F8:22:4B:44:56:43:92:E6:E6:C6:E6:AE:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A4D8EBE0765CADF8224B44564392E6E6C6E6AEF5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D81aiXpDAv5WBmgE8oEpfordjGP62otn2fHrhaL4cgby/0/323830343a323865343a653032393a3a2f34382d3438203d3e203238323630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:28e4:e029::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:c5:6d:13:11:6b:98:4e:23:76:13:b8:d7:ef:d3:46:5e:d5:
         20:29:7c:ff:f3:c7:54:a7:92:41:04:74:11:2d:fc:2a:2b:92:
         4f:11:1d:d5:dc:c8:d6:8b:85:cb:6d:3d:5b:95:8a:ce:89:b3:
         e7:32:c0:9e:48:f0:2e:42:42:30:c2:09:63:f8:14:0c:07:dc:
         7b:41:cf:23:6a:ca:4a:6a:30:ba:d8:bb:4f:cf:8e:5c:c3:1f:
         41:3c:b8:8f:84:65:61:0c:3d:aa:37:15:d2:bc:f0:dc:17:bc:
         31:33:1b:60:2d:55:1d:dd:3a:db:2a:fd:7a:8a:36:35:b7:1c:
         42:a1:86:05:3d:fd:3d:a3:e8:cf:c2:3a:63:d6:1c:e0:b9:cf:
         c0:0d:42:f3:ad:99:90:6c:ae:7d:33:5b:9e:53:5c:37:3f:78:
         83:de:7f:6d:01:06:93:b1:aa:1a:0d:cb:67:6d:3e:83:cb:07:
         79:b8:40:df:ad:3a:9b:4a:ce:fc:4d:a2:fc:a2:53:58:62:f2:
         f5:73:ed:fc:6a:05:bb:90:8f:1a:cd:ee:c7:b8:3e:aa:91:46:
         77:9e:cb:ed:66:4f:1f:a7:7b:64:23:27:6d:a2:7c:bd:2b:45:
         de:6d:a3:ce:e9:c8:5b:9e:a9:ab:45:da:a0:06:e4:2f:0f:72:
         6e:01:e7:71
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org