Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/323830343a326430343a3a2f33322d3438203d3e20323635323537.roa
File:                     323830343a326430343a3a2f33322d3438203d3e20323635323537.roa (raw, json)
Hash identifier:          lWq/i1rKOxgMfHMFJXfyvFi0lnu3cCtnJizlY3l3+z4=
Subject key identifier:   50:72:DF:4A:9A:DD:84:E6:B6:81:81:48:43:1B:4E:D6:AC:20:91:EC
Certificate issuer:       /CN=4CEBA16D103ABE5671D91473DCA22069846E1ADA
Certificate serial:       4A71D83E60ABC88002C12A1CF13211670E4807FB
Authority key identifier: 4C:EB:A1:6D:10:3A:BE:56:71:D9:14:73:DC:A2:20:69:84:6E:1A:DA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CEBA16D103ABE5671D91473DCA22069846E1ADA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/323830343a326430343a3a2f33322d3438203d3e20323635323537.roa
Signing time:             Fri 17 Nov 2023 20:15:06 +0000
ROA not before:           Fri 17 Nov 2023 20:10:06 +0000
ROA not after:            Fri 15 Nov 2024 20:15:06 +0000
asID:                     265257
IP address blocks:        2804:2d04::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:71:d8:3e:60:ab:c8:80:02:c1:2a:1c:f1:32:11:67:0e:48:07:fb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4CEBA16D103ABE5671D91473DCA22069846E1ADA
        Validity
            Not Before: Nov 17 20:10:06 2023 GMT
            Not After : Nov 15 20:15:06 2024 GMT
        Subject: CN=5072DF4A9ADD84E6B6818148431B4ED6AC2091EC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:bf:da:a5:10:6c:65:c9:a4:87:7a:55:7f:2a:
                    71:f1:64:7e:13:55:cc:9c:d7:3a:6f:1d:68:c4:41:
                    06:d8:1f:f2:50:3e:20:46:bc:b7:d8:fa:87:a5:f9:
                    c3:71:bc:f3:03:82:47:e4:bf:b9:66:9f:64:2a:64:
                    dc:1e:d7:a7:ea:b8:4c:fd:6c:21:dc:91:fa:b2:a3:
                    55:3a:04:18:a2:c8:78:11:34:c0:1e:76:a4:c8:37:
                    21:dd:23:3f:fb:95:09:16:d3:00:c2:a6:d8:bc:d5:
                    5e:1b:d1:1b:e9:8a:73:fe:f4:aa:e5:60:ee:4b:81:
                    04:af:ed:df:32:a9:34:96:c1:04:82:d1:78:61:58:
                    5b:a4:46:ec:c8:8d:41:53:8e:40:26:30:ab:5d:27:
                    d5:44:04:55:9e:b8:e5:09:df:5a:73:a9:7a:9b:0b:
                    29:89:84:71:f6:d7:da:d3:53:22:73:0e:7c:2d:b0:
                    c9:e1:8c:f0:29:1c:d6:9e:e3:79:ab:be:97:5c:76:
                    bb:59:c6:b8:4e:cc:06:c8:19:f2:fb:5a:cc:1b:f5:
                    c5:f9:a0:e4:0f:c4:b1:95:0f:0e:a8:f4:ea:32:a1:
                    96:b9:6a:84:a5:83:a5:21:28:49:aa:e9:c8:40:e6:
                    c9:e9:19:13:43:eb:7b:47:cb:99:c9:73:a5:e5:fb:
                    23:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                50:72:DF:4A:9A:DD:84:E6:B6:81:81:48:43:1B:4E:D6:AC:20:91:EC
            X509v3 Authority Key Identifier:
                keyid:4C:EB:A1:6D:10:3A:BE:56:71:D9:14:73:DC:A2:20:69:84:6E:1A:DA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/4CEBA16D103ABE5671D91473DCA22069846E1ADA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4CEBA16D103ABE5671D91473DCA22069846E1ADA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DbzfMavXRWnrB4JGUo9Wr4EN44TcgQ6VoWW1RfftCN7k/1/323830343a326430343a3a2f33322d3438203d3e20323635323537.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d04::/32

    Signature Algorithm: sha256WithRSAEncryption
         84:5a:cd:49:91:04:c0:14:1d:69:e5:85:a3:08:42:8c:c3:7d:
         1d:f9:1d:93:d1:00:e3:37:5b:c7:31:ad:19:9b:22:95:ec:5d:
         2a:07:02:7c:b2:d7:7b:0e:e5:68:25:70:fc:cb:f6:19:df:ca:
         06:eb:f3:86:f6:a5:54:b1:68:c6:29:06:d4:09:1f:d2:fc:7e:
         b0:0f:78:73:20:c3:06:f3:25:87:d5:43:7f:4d:37:30:81:29:
         8b:ce:41:cd:4a:0b:f7:9f:21:1f:dc:76:01:ed:83:50:df:c0:
         8e:32:7d:9f:a8:d1:5c:c5:9d:8a:76:02:53:ba:22:18:eb:72:
         57:2d:8b:7e:85:e0:48:51:35:33:f3:d8:02:b2:0b:b3:2c:5d:
         21:94:ae:5e:c3:15:a3:13:b6:7e:4a:3a:de:c8:d2:63:30:9f:
         11:0e:6c:e0:a8:fe:84:75:64:a9:05:f9:2f:69:fc:dc:da:84:
         ed:76:ae:28:3e:99:62:7d:3a:6d:c8:16:1b:0d:2c:6d:ee:0a:
         e4:d3:34:08:f9:5c:a7:58:6f:5f:ac:ab:7b:e6:d6:3f:16:11:
         d9:82:94:c1:6b:be:b4:e3:b6:05:37:2c:e7:49:9a:c0:19:90:
         2d:4f:83:16:fd:98:05:b6:38:ee:99:65:5a:a8:90:b6:4f:c9:
         67:8b:c4:fc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:28 2024 by rpki-client on console-ams.rpki-client.org