Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a633030303a3a2f33342d3334203d3e20323637333330.roa
File:                     323830343a346263633a633030303a3a2f33342d3334203d3e20323637333330.roa (raw, json)
Hash identifier:          kjpi/xBZoekGKeAb4aXdT13+ntDlfAMYnC8dkN5qPTo=
Subject key identifier:   9E:AB:11:2D:4F:E5:14:24:19:00:A3:8F:AA:E7:57:8F:FA:8F:96:0B
Certificate issuer:       /CN=D1522A5217E184CA7B071011FCF96A20332AF33F
Certificate serial:       4A485FEC99AB368265B8E2A3928B021F334F4077
Authority key identifier: D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a633030303a3a2f33342d3334203d3e20323637333330.roa
Signing time:             Wed 03 Apr 2024 21:51:57 +0000
ROA not before:           Wed 03 Apr 2024 21:46:57 +0000
ROA not after:            Wed 02 Apr 2025 21:51:57 +0000
asID:                     267330
IP address blocks:        2804:4bcc:c000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:48:5f:ec:99:ab:36:82:65:b8:e2:a3:92:8b:02:1f:33:4f:40:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D1522A5217E184CA7B071011FCF96A20332AF33F
        Validity
            Not Before: Apr  3 21:46:57 2024 GMT
            Not After : Apr  2 21:51:57 2025 GMT
        Subject: CN=9EAB112D4FE514241900A38FAAE7578FFA8F960B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:29:13:ef:d2:e7:8b:82:ec:25:91:59:77:34:
                    9b:73:a4:2b:c2:8d:61:89:e1:c1:f5:e1:a8:39:71:
                    9b:de:90:b9:1f:8f:d1:b5:cd:b2:b5:0b:ab:d8:7a:
                    18:e4:94:ff:b1:9f:27:9b:91:85:5c:ef:87:f1:e7:
                    42:21:5f:e6:04:b0:14:01:97:7f:86:fd:72:51:51:
                    4d:01:e6:f5:0a:a7:b2:a6:67:3c:76:19:04:55:3a:
                    28:20:ab:69:93:06:33:e3:64:09:bc:7a:50:53:f7:
                    c5:b7:d6:98:04:9d:68:bc:53:a4:ca:75:1a:b8:28:
                    1f:89:59:a1:55:b7:7a:33:8f:7b:cd:88:0a:88:af:
                    20:e4:00:e1:8a:18:9a:25:d0:64:43:cd:46:14:87:
                    ca:c7:a5:3c:b0:b4:53:1f:d4:38:96:d4:22:53:17:
                    c3:5e:df:a1:29:cc:00:2e:2c:f5:da:da:53:5c:03:
                    d7:a5:11:7d:cb:8b:18:bb:22:93:22:56:bb:e9:2a:
                    70:1c:53:3c:a6:a7:8f:be:de:fb:37:33:79:68:98:
                    97:f7:ed:db:99:74:46:d4:4e:f4:7b:be:5e:e4:de:
                    b4:80:2b:96:11:9e:f5:31:07:79:4b:8e:97:49:b1:
                    b7:e5:93:40:72:47:93:82:cd:1b:db:3f:75:1e:91:
                    87:89
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:AB:11:2D:4F:E5:14:24:19:00:A3:8F:AA:E7:57:8F:FA:8F:96:0B
            X509v3 Authority Key Identifier:
                keyid:D1:52:2A:52:17:E1:84:CA:7B:07:10:11:FC:F9:6A:20:33:2A:F3:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/D1522A5217E184CA7B071011FCF96A20332AF33F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D1522A5217E184CA7B071011FCF96A20332AF33F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DQ1svLaooAzooDnkgpsj3J38FLvuxpkrEu6byws8ZCLh/1/323830343a346263633a633030303a3a2f33342d3334203d3e20323637333330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bcc:c000::/34

    Signature Algorithm: sha256WithRSAEncryption
         3e:40:d8:97:5a:87:8a:4d:40:e3:f7:12:d2:74:c4:94:24:36:
         73:5a:29:1c:4d:90:f7:9c:89:56:61:b7:57:ff:ef:d8:a7:68:
         68:de:9e:3f:5a:92:bb:0c:b4:a7:54:40:d9:06:08:4e:83:2b:
         a6:28:e3:7c:a1:c8:1e:95:af:35:bd:70:d7:8a:c2:1b:a6:af:
         40:d5:a6:56:14:c3:0f:99:e7:ea:55:28:f5:0f:18:08:83:bb:
         98:8e:78:45:65:2a:06:4a:2f:ea:3a:b7:5a:f9:e0:dd:6e:1f:
         21:18:1b:86:2b:a4:ae:ec:06:07:af:2d:91:d9:77:c7:13:68:
         5b:4f:8c:6f:7c:47:8f:77:93:28:cf:a3:25:24:7d:c0:5f:7c:
         11:c6:5a:5b:ff:cf:73:e2:c3:7e:aa:00:5b:c5:2d:0c:7c:bd:
         1e:0d:f8:4f:68:44:31:c6:87:b3:48:64:db:02:28:76:ce:03:
         c7:70:b1:f7:7c:83:25:5b:13:4b:54:2d:00:b1:23:31:f4:2c:
         f8:e2:31:89:05:fd:ee:2d:ba:91:d4:53:e1:c1:7b:60:d4:0d:
         46:aa:9b:fd:ac:51:28:84:15:4b:04:0e:30:91:85:d2:e9:94:
         aa:46:c3:fb:85:48:b0:af:42:03:09:ba:3a:86:ca:2c:f1:d5:
         6e:1d:2e:da
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:30 2024 by rpki-client on console-fra.rpki-client.org