Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/323830343a373134343a3a2f33322d3332203d3e20323730373738.roa
File:                     323830343a373134343a3a2f33322d3332203d3e20323730373738.roa (raw, json)
Hash identifier:          rf50O9n/gjmLFfuLjYxrTIbi/FaoXhhW9hYKf+C1Vvw=
Subject key identifier:   B4:53:15:43:01:9D:08:C7:0A:21:29:12:FC:9C:AA:CD:2D:A5:C2:93
Certificate issuer:       /CN=D95469442C3ED3E11B9EEA259D4A0049C3748D03
Certificate serial:       08E48B0364849E976F5A96A250A1C7800CFA8066
Authority key identifier: D9:54:69:44:2C:3E:D3:E1:1B:9E:EA:25:9D:4A:00:49:C3:74:8D:03
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95469442C3ED3E11B9EEA259D4A0049C3748D03.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/323830343a373134343a3a2f33322d3332203d3e20323730373738.roa
Signing time:             Thu 04 Apr 2024 11:28:08 +0000
ROA not before:           Thu 04 Apr 2024 11:23:08 +0000
ROA not after:            Thu 03 Apr 2025 11:28:08 +0000
asID:                     270778
IP address blocks:        2804:7144::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            08:e4:8b:03:64:84:9e:97:6f:5a:96:a2:50:a1:c7:80:0c:fa:80:66
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D95469442C3ED3E11B9EEA259D4A0049C3748D03
        Validity
            Not Before: Apr  4 11:23:08 2024 GMT
            Not After : Apr  3 11:28:08 2025 GMT
        Subject: CN=B4531543019D08C70A212912FC9CAACD2DA5C293
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9c:2e:cb:4f:4e:8c:10:76:d5:59:20:4f:7d:0b:
                    47:0b:e4:50:b2:6b:96:9f:b7:fd:dc:13:43:91:cd:
                    af:ab:dd:ad:ad:3b:e3:88:8f:e0:f8:78:b8:6e:09:
                    9c:2a:47:42:d0:c9:1e:18:57:00:bf:06:8e:85:99:
                    f2:18:77:91:6b:b2:74:9b:cc:32:3a:07:df:0c:ca:
                    99:f9:67:a0:51:0a:c2:a6:93:85:6c:be:3d:6d:ba:
                    d0:c3:0f:2d:72:b4:9f:8d:8f:a6:9f:a3:e5:7f:78:
                    6d:10:2a:16:48:c0:b6:c4:b0:6d:f9:0f:e2:4f:61:
                    98:95:e2:a9:12:2f:f1:04:14:ab:81:c2:15:93:dc:
                    17:72:9c:62:14:60:05:ff:a3:61:27:1e:9e:43:fb:
                    31:97:95:8f:0d:3d:ac:8c:a5:16:18:ad:36:59:51:
                    35:b2:83:74:e7:f6:89:18:be:9c:9f:f5:26:94:19:
                    d6:9e:f3:35:d4:7e:3f:02:cd:72:78:1f:4f:c3:c0:
                    cb:89:78:10:ef:44:3c:28:7b:d3:3c:4f:76:a3:d7:
                    76:6b:16:a4:12:a4:c0:b1:5e:b1:c1:fb:99:a9:86:
                    98:da:e2:5e:99:d9:05:2f:4e:1d:6d:1e:a6:e7:e1:
                    aa:67:ae:98:f1:80:23:ce:6e:d8:74:28:44:db:0d:
                    93:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B4:53:15:43:01:9D:08:C7:0A:21:29:12:FC:9C:AA:CD:2D:A5:C2:93
            X509v3 Authority Key Identifier:
                keyid:D9:54:69:44:2C:3E:D3:E1:1B:9E:EA:25:9D:4A:00:49:C3:74:8D:03

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/D95469442C3ED3E11B9EEA259D4A0049C3748D03.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D95469442C3ED3E11B9EEA259D4A0049C3748D03.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DMf3AoLGmxohuTuNpSJL5qRWLWYggX4ewDdWRfnsVBFm/1/323830343a373134343a3a2f33322d3332203d3e20323730373738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7144::/32

    Signature Algorithm: sha256WithRSAEncryption
         90:e3:66:fb:89:b1:e3:8f:68:84:9e:d0:9a:40:6e:22:b8:95:
         e8:2e:6b:65:a9:04:a9:4c:29:3e:4d:f3:5c:da:31:df:06:17:
         23:35:9f:57:36:d4:5a:34:16:d5:ab:4a:8b:0b:55:2c:7a:d2:
         9c:66:d9:8d:3c:8c:d1:91:87:b1:48:93:4c:2a:c1:32:9a:d9:
         e7:42:52:c1:8e:13:a6:d9:46:3d:2e:6d:10:0d:ea:d5:51:38:
         0d:aa:3c:25:f2:eb:a5:7a:57:e4:9e:b1:91:03:5d:35:1a:9c:
         ef:56:8c:d3:c2:bd:f7:d9:95:b9:80:43:68:29:fe:e3:4a:e0:
         00:00:b7:b2:8d:10:a0:ef:6c:e4:48:98:5a:ab:62:93:3c:2e:
         7b:31:d1:6c:2f:b2:1a:e8:23:e8:0b:29:51:33:26:88:ca:50:
         32:2b:82:f6:b1:38:9d:26:c0:47:6a:48:6e:50:ad:c5:b2:79:
         0e:3d:f7:96:31:d0:3a:c3:e5:ce:bf:25:9b:a4:78:81:e6:a8:
         03:d2:35:5d:0f:7f:ef:94:24:ea:17:f2:dd:4d:78:ff:b5:83:
         b7:a6:f1:e7:6e:54:c3:de:30:cd:26:fb:64:59:f5:ce:0e:d3:
         45:3e:b3:3c:db:01:88:0e:29:60:91:16:3d:a0:75:da:31:c8:
         bf:0e:f5:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:25 2024 by rpki-client on console-ams.rpki-client.org