Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/323830343a333135383a3a2f33322d3332203d3e20323635303038.roa
File:                     323830343a333135383a3a2f33322d3332203d3e20323635303038.roa (raw, json)
Hash identifier:          q78NyU5cxcM0TwJ2ILXNRa/RkXkrswI+9CFDgB6L6O8=
Subject key identifier:   4C:E9:B3:82:40:BC:31:B7:35:43:2B:EF:32:1E:2F:55:C0:06:29:0D
Certificate issuer:       /CN=F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E
Certificate serial:       19BE09925839AE37DCC85CFE8D25F0A28350B213
Authority key identifier: F1:CA:65:BC:26:29:E2:24:66:DB:31:FF:1E:0C:90:58:7A:1C:7C:1E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/323830343a333135383a3a2f33322d3332203d3e20323635303038.roa
Signing time:             Fri 15 Mar 2024 17:58:49 +0000
ROA not before:           Fri 15 Mar 2024 17:53:49 +0000
ROA not after:            Fri 14 Mar 2025 17:58:49 +0000
asID:                     265008
IP address blocks:        2804:3158::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            19:be:09:92:58:39:ae:37:dc:c8:5c:fe:8d:25:f0:a2:83:50:b2:13
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E
        Validity
            Not Before: Mar 15 17:53:49 2024 GMT
            Not After : Mar 14 17:58:49 2025 GMT
        Subject: CN=4CE9B38240BC31B735432BEF321E2F55C006290D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b7:50:e9:1c:00:43:1d:46:0b:32:3a:b1:01:65:
                    3b:f2:46:46:1a:7c:1b:00:30:ab:62:5f:d9:44:e1:
                    43:0c:46:df:f2:a4:ef:80:eb:07:0f:5a:5d:4e:31:
                    18:e5:36:20:e1:57:b3:01:1d:8e:35:60:68:eb:ee:
                    36:54:7e:af:a4:5e:a1:7d:8b:59:e1:19:4f:d0:80:
                    f3:30:1b:39:1b:0b:6b:f3:91:04:a8:79:80:bf:bc:
                    87:66:0c:eb:03:71:d0:46:6f:4b:5b:94:70:4d:ac:
                    ab:78:92:f1:2c:34:d5:a8:e3:78:97:c3:80:63:c3:
                    78:bf:cd:a4:b9:e5:ec:46:e7:8b:8e:76:7d:76:e4:
                    19:35:95:0a:df:90:2d:38:b0:33:f9:7f:91:80:75:
                    cb:f5:a1:99:79:61:63:ac:13:a4:2e:cf:1c:7b:89:
                    1d:c5:ca:b1:f7:c9:e3:d1:3d:9e:98:25:b6:d0:0c:
                    7c:ce:c3:fc:e7:79:7d:dd:11:71:10:a2:14:36:b3:
                    1d:64:27:aa:54:ac:1a:51:13:7a:22:aa:70:2c:f1:
                    0b:24:de:48:2d:a4:5d:3a:45:9d:19:34:90:75:f6:
                    c0:66:53:64:f9:6b:2a:4e:b2:7f:9a:2b:6b:45:98:
                    52:21:f5:37:d1:99:c6:fb:66:0f:99:6b:db:41:11:
                    b1:cd
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4C:E9:B3:82:40:BC:31:B7:35:43:2B:EF:32:1E:2F:55:C0:06:29:0D
            X509v3 Authority Key Identifier:
                keyid:F1:CA:65:BC:26:29:E2:24:66:DB:31:FF:1E:0C:90:58:7A:1C:7C:1E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F1CA65BC2629E22466DB31FF1E0C90587A1C7C1E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DV9LSaaW6h116m925RuEXAqko9mUrLs4gP5p79JaVhE8/0/323830343a333135383a3a2f33322d3332203d3e20323635303038.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3158::/32

    Signature Algorithm: sha256WithRSAEncryption
         9b:05:ad:d3:27:cd:46:9c:28:97:96:92:88:cd:5b:42:66:6a:
         e2:b9:93:ee:af:94:b9:29:ec:ab:e4:b8:2c:9f:dc:5c:d5:ad:
         94:0d:79:0b:c3:72:bc:d6:eb:2f:8a:db:d0:81:25:a9:31:de:
         65:98:2f:07:af:20:d0:40:ce:2e:d8:dd:fd:f1:59:39:30:37:
         67:f3:7e:b5:f1:c4:8d:0a:97:83:09:3e:54:bc:26:c5:a6:70:
         da:d7:3e:6d:84:c0:ca:ab:83:c9:d5:7b:ec:bb:d3:59:2b:a9:
         a6:e0:ab:a7:54:c6:d6:db:0e:24:a8:72:3f:bb:a6:51:aa:30:
         8e:a9:42:ac:1a:e1:11:76:55:31:6f:75:cd:81:40:8a:05:3f:
         ae:2a:d2:a8:36:22:8f:fa:98:1d:a9:c9:07:93:73:81:0a:02:
         a4:7e:67:d6:0c:9b:e6:21:44:1a:f4:59:77:d4:bc:9b:fc:96:
         a4:8e:f3:b3:a2:52:08:32:25:d1:26:a6:f3:1a:16:7c:d1:fd:
         29:46:ce:2d:59:3a:a6:da:08:9e:96:91:f6:42:ba:d1:6c:1b:
         3f:cb:d7:61:62:ef:9a:8d:ef:a8:b0:39:1a:41:57:e0:46:bf:
         0d:c8:6e:a5:88:9f:09:08:d7:49:26:fd:20:3d:e8:3c:3a:2a:
         db:d0:6a:40
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:31 2024 by rpki-client on console-fra.rpki-client.org