Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/323830343a323732383a3a2f33322d3438203d3e20323633383830.roa
File:                     323830343a323732383a3a2f33322d3438203d3e20323633383830.roa (raw, json)
Hash identifier:          rALRl8UeO0K8b770hZmGNGsCUcqilB4T7m28FVW+jnU=
Subject key identifier:   0F:AF:D4:48:DD:5A:B9:27:10:1B:6F:76:6C:EE:94:39:BC:9E:1D:1D
Certificate issuer:       /CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
Certificate serial:       3D2EFC50ECBDE907EDC2A670FB4C0DA0DCC583A9
Authority key identifier: 4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/323830343a323732383a3a2f33322d3438203d3e20323633383830.roa
Signing time:             Wed 12 Jul 2023 20:54:59 +0000
ROA not before:           Wed 12 Jul 2023 20:49:59 +0000
ROA not after:            Wed 10 Jul 2024 20:54:59 +0000
asID:                     263880
IP address blocks:        2804:2728::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3d:2e:fc:50:ec:bd:e9:07:ed:c2:a6:70:fb:4c:0d:a0:dc:c5:83:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3
        Validity
            Not Before: Jul 12 20:49:59 2023 GMT
            Not After : Jul 10 20:54:59 2024 GMT
        Subject: CN=0FAFD448DD5AB927101B6F766CEE9439BC9E1D1D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:7d:9a:47:6c:16:27:12:d3:6b:23:dc:cc:c7:
                    c8:36:46:cc:47:c6:38:d1:57:0c:8c:4b:e3:13:c4:
                    9d:75:5d:ac:31:fe:c4:9e:20:c3:32:cb:eb:e1:f7:
                    70:fa:a9:86:39:a0:a5:dd:7d:96:1c:d4:1a:0e:58:
                    0b:77:c1:c9:ed:e8:7e:94:59:26:e1:55:74:df:6b:
                    45:69:9f:ec:8e:53:25:a9:a3:a6:d8:46:f3:cb:54:
                    02:29:84:e6:22:6d:d2:06:ab:6b:21:71:6b:9f:c5:
                    71:54:63:8a:80:d6:4e:d9:a2:f3:55:ea:da:7a:8b:
                    ab:1d:98:29:23:45:5d:1d:fe:51:c7:fc:3c:c4:fa:
                    e2:bf:3e:31:58:2a:39:09:7f:b5:21:07:8b:18:6a:
                    48:fa:62:28:f2:be:ef:88:dd:3b:18:c4:ba:32:f5:
                    55:c8:10:1d:20:15:16:61:13:92:78:23:d4:20:1e:
                    39:eb:d5:5f:ad:57:47:25:88:ff:dc:50:3f:bf:0a:
                    fc:17:31:97:7e:90:f8:91:90:df:ff:e1:a1:da:d4:
                    40:63:3c:2c:10:f9:68:69:76:19:05:0d:48:01:6b:
                    95:2d:52:6b:33:18:43:22:14:7d:dd:38:da:cd:f9:
                    99:19:27:b4:26:29:2c:1a:27:91:5d:b3:d8:7b:20:
                    8a:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:AF:D4:48:DD:5A:B9:27:10:1B:6F:76:6C:EE:94:39:BC:9E:1D:1D
            X509v3 Authority Key Identifier:
                keyid:4D:00:22:D6:7F:B1:D0:1C:7A:F6:AD:91:93:16:F7:4C:6B:D6:1E:C3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4D0022D67FB1D01C7AF6AD919316F74C6BD61EC3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/D9LDBiCv9UhNdCoCgbNNTdfNYypmX4B39BpcgXQ9hJvJ/0/323830343a323732383a3a2f33322d3438203d3e20323633383830.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2728::/32

    Signature Algorithm: sha256WithRSAEncryption
         0c:1e:6e:6c:3d:dc:11:2d:7a:8a:57:95:83:ae:82:04:b2:b9:
         b3:55:f9:9d:a4:8b:7c:1f:3e:b7:b3:97:76:0d:35:04:a4:f6:
         44:73:0c:fd:a0:26:ed:0d:bb:08:d3:d0:74:59:48:4a:a9:4c:
         32:62:de:e2:82:2d:5b:72:db:b7:08:e4:c5:61:fd:5b:45:cd:
         18:f0:7c:73:38:3c:e6:c3:44:31:c1:be:05:4b:b9:56:14:d7:
         86:b7:1c:bf:47:e4:42:6d:c8:de:c6:8f:02:44:45:1c:61:d3:
         b4:81:f5:22:8a:76:c8:e7:44:ff:14:0a:f9:3c:01:0f:dc:9c:
         2e:e4:9a:a5:12:1e:6a:52:7a:86:45:68:dd:8c:22:0c:41:7c:
         14:3f:c6:0e:85:e2:06:c7:1f:23:84:24:9a:ff:40:5c:8b:a7:
         e0:20:03:90:19:42:0a:cf:28:ec:ee:59:79:1c:0e:69:c5:11:
         51:24:b3:b5:ea:e8:f7:90:49:04:82:5e:4f:62:6e:47:e2:94:
         1d:78:cb:61:c5:5d:64:ed:98:d0:3f:d6:f7:9b:dc:31:83:58:
         0d:d5:0f:58:b4:cb:6c:4c:fc:22:be:e7:95:7a:60:6d:db:3f:
         3e:ad:81:e1:29:f6:d4:ee:38:f3:bf:30:e8:53:53:dc:58:55:
         48:8e:e0:3f
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:29 2024 by rpki-client on console-fra.rpki-client.org