Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/1/323830343a323332343a3a2f33322d3438203d3e20323632383833.roa
File:                     323830343a323332343a3a2f33322d3438203d3e20323632383833.roa (raw, json)
Hash identifier:          ne3ASDEKFs58JY+0kNQ1M1R5U3hIrsiZPJl/2x3oVgQ=
Subject key identifier:   71:4B:E8:C9:D9:6F:FE:B5:97:DC:A5:D8:2F:9E:13:A0:18:E6:99:75
Certificate issuer:       /CN=C0666B85EB799EFE40A697CD29B3B3FA730FF545
Certificate serial:       4BFF1A416705E5C1676D7B3702157B1B65C3647D
Authority key identifier: C0:66:6B:85:EB:79:9E:FE:40:A6:97:CD:29:B3:B3:FA:73:0F:F5:45
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0666B85EB799EFE40A697CD29B3B3FA730FF545.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/1/323830343a323332343a3a2f33322d3438203d3e20323632383833.roa
Signing time:             Wed 03 Apr 2024 18:30:43 +0000
ROA not before:           Wed 03 Apr 2024 18:25:43 +0000
ROA not after:            Wed 02 Apr 2025 18:30:43 +0000
asID:                     262883
IP address blocks:        2804:2324::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4b:ff:1a:41:67:05:e5:c1:67:6d:7b:37:02:15:7b:1b:65:c3:64:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0666B85EB799EFE40A697CD29B3B3FA730FF545
        Validity
            Not Before: Apr  3 18:25:43 2024 GMT
            Not After : Apr  2 18:30:43 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:68:6d:f5:2b:aa:ef:0c:d6:fa:db:90:ff:37:
                    9c:83:c1:aa:9a:9d:90:0d:3d:e1:e8:94:4e:56:54:
                    53:40:57:d4:4e:5d:27:82:69:3d:34:c2:0f:6c:f7:
                    16:ae:aa:80:7c:9f:4b:a7:07:18:b7:dc:e5:09:5f:
                    8e:3f:f3:99:df:a3:a5:06:b2:b0:a3:fc:db:c6:5f:
                    01:d6:25:dc:63:ba:a2:d0:e5:52:83:a0:42:47:17:
                    4f:cb:b2:8c:9c:72:75:42:6c:24:f5:cd:85:b2:ff:
                    f6:7a:87:b7:80:c1:1d:06:63:84:94:77:17:38:7a:
                    ef:21:b7:49:df:9e:71:60:8e:6d:93:9d:d4:0a:a8:
                    7e:51:d5:6d:6b:df:02:e5:8d:49:04:f1:46:75:6c:
                    75:34:b1:30:f9:d5:39:ae:45:0f:f4:9a:86:ea:14:
                    a3:e0:7a:94:23:5f:2f:4e:aa:68:9e:20:b2:ad:25:
                    f2:4f:ac:c6:e0:a8:61:38:73:d3:99:df:64:1b:09:
                    75:c2:8a:2d:59:f3:87:a6:7d:89:6d:d7:e8:91:54:
                    08:0e:b7:e7:eb:d5:7c:ca:1c:e3:06:f9:61:fd:31:
                    68:b9:dc:df:32:56:5d:8f:37:d0:25:0f:ed:97:ab:
                    56:29:2f:43:36:e6:36:52:b7:4b:66:f2:12:27:b5:
                    c6:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                71:4B:E8:C9:D9:6F:FE:B5:97:DC:A5:D8:2F:9E:13:A0:18:E6:99:75
            X509v3 Authority Key Identifier:
                keyid:C0:66:6B:85:EB:79:9E:FE:40:A6:97:CD:29:B3:B3:FA:73:0F:F5:45

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/1/C0666B85EB799EFE40A697CD29B3B3FA730FF545.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0666B85EB799EFE40A697CD29B3B3FA730FF545.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DNfqTdFJM8U5AXTyP46n5HD5Y5X1qpy8eBT3CsEQMvw4/1/323830343a323332343a3a2f33322d3438203d3e20323632383833.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2324::/32

    Signature Algorithm: sha256WithRSAEncryption
         75:bb:13:51:c1:87:99:c5:27:fd:8e:7d:fe:85:09:76:ad:2d:
         ed:e6:a6:05:a6:65:4c:94:81:45:f0:77:4c:c6:f4:30:75:53:
         81:e7:23:ce:e8:8f:1f:5a:dc:5a:9d:18:7d:ba:4a:2b:cb:2e:
         fd:20:fc:c1:ed:ff:5e:25:79:f0:ab:ff:e4:5c:d8:fc:97:b2:
         2f:b7:69:ba:68:2c:c6:b3:eb:71:e8:31:8f:7b:27:e9:4d:67:
         e0:a7:be:cf:4e:f5:7d:ab:fa:7e:f7:5c:64:26:f4:69:9e:d1:
         d5:01:c1:97:57:e9:57:f0:05:4b:54:b1:9a:b9:c1:b0:52:b9:
         07:b8:ef:f6:fb:12:a6:da:83:a8:91:a7:2a:12:6f:71:de:34:
         b1:08:5f:22:b0:8e:ce:8b:fb:9f:1e:a4:16:6b:ef:fb:02:f5:
         ae:5e:51:07:8f:e6:2c:3b:28:e8:e9:64:a8:85:9e:9f:04:40:
         f8:52:e3:54:dd:09:1f:91:01:77:93:e0:c6:40:b9:59:52:17:
         b1:98:11:88:27:b2:a2:64:7d:82:2b:8d:6b:f1:34:30:66:f0:
         5e:9d:fa:26:97:e1:c6:37:c6:e1:b2:cf:85:10:ce:b9:ca:1a:
         d4:32:76:b6:ef:68:fd:40:26:b4:c3:2f:01:d6:89:9b:5b:91:
         d0:71:11:b8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:26 2024 by rpki-client on console-ams.rpki-client.org