Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/0/323830343a383664633a3a2f33342d3334203d3e20323732363731.roa
File:                     323830343a383664633a3a2f33342d3334203d3e20323732363731.roa (raw, json)
Hash identifier:          XqIE2tX6+UrVPl6mZrS7u+/UAPM9GLoPe1a4Ifb4qP4=
Subject key identifier:   C2:CD:73:97:80:0F:24:1A:DA:6F:3C:7B:AE:99:B8:CB:FA:5F:C3:DF
Certificate issuer:       /CN=7ACFA602B537E683CB031FA3447049A7F776E6C5
Certificate serial:       55869EC942ACD3BF793E5EE71610A6762DAF06B1
Authority key identifier: 7A:CF:A6:02:B5:37:E6:83:CB:03:1F:A3:44:70:49:A7:F7:76:E6:C5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ACFA602B537E683CB031FA3447049A7F776E6C5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/0/323830343a383664633a3a2f33342d3334203d3e20323732363731.roa
Signing time:             Thu 14 Mar 2024 19:32:47 +0000
ROA not before:           Thu 14 Mar 2024 19:27:47 +0000
ROA not after:            Thu 13 Mar 2025 19:32:47 +0000
asID:                     272671
IP address blocks:        2804:86dc::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:86:9e:c9:42:ac:d3:bf:79:3e:5e:e7:16:10:a6:76:2d:af:06:b1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ACFA602B537E683CB031FA3447049A7F776E6C5
        Validity
            Not Before: Mar 14 19:27:47 2024 GMT
            Not After : Mar 13 19:32:47 2025 GMT
        Subject: CN=C2CD7397800F241ADA6F3C7BAE99B8CBFA5FC3DF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ea:ef:0c:ff:76:f9:07:eb:bc:d3:e3:b0:86:c8:
                    7b:6b:0b:37:e6:7a:3d:4a:85:bf:65:30:11:5b:1f:
                    59:8a:a5:d4:25:ac:38:e9:4b:b7:7b:8b:a4:82:30:
                    9b:36:cb:9d:9b:09:74:90:f4:0a:37:48:49:7b:9d:
                    84:44:a9:9c:66:07:cf:b3:6c:e9:a5:0f:49:49:25:
                    41:ca:10:4d:06:8a:67:24:fb:c6:3e:ac:09:7c:3d:
                    17:87:ef:70:99:86:d6:4c:0a:ec:bc:f9:a0:96:9a:
                    bb:a0:aa:2f:01:3a:9d:3a:cf:62:59:d2:3f:b8:e4:
                    06:08:b4:31:db:8b:30:40:69:2d:22:78:19:9b:80:
                    c2:52:b9:c2:1c:3d:82:08:d2:63:44:f3:c5:49:aa:
                    28:b1:ad:1f:a2:19:5f:ba:ed:0f:68:ad:6f:1f:09:
                    e5:09:26:f5:53:9b:8e:96:3f:0b:6b:89:76:a7:04:
                    37:0e:25:ba:1e:ef:4a:ef:7f:4b:3a:a0:41:ee:c0:
                    69:74:fb:87:a1:47:c7:e5:53:ea:35:76:e5:93:ed:
                    e4:69:3f:ca:ae:82:a3:d5:1e:8f:b3:32:7e:c9:75:
                    fc:23:6d:e0:1e:0b:91:6a:07:a2:12:1b:f1:bb:c3:
                    c0:63:2a:7a:63:18:d4:6f:01:b1:03:af:f8:b0:69:
                    e3:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:CD:73:97:80:0F:24:1A:DA:6F:3C:7B:AE:99:B8:CB:FA:5F:C3:DF
            X509v3 Authority Key Identifier:
                keyid:7A:CF:A6:02:B5:37:E6:83:CB:03:1F:A3:44:70:49:A7:F7:76:E6:C5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/0/7ACFA602B537E683CB031FA3447049A7F776E6C5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ACFA602B537E683CB031FA3447049A7F776E6C5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DiaNQcRQK7kn7mBWRCceTNyjpNJX6SjKwJxZoWgxAk1M/0/323830343a383664633a3a2f33342d3334203d3e20323732363731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:86dc::/34

    Signature Algorithm: sha256WithRSAEncryption
         03:99:07:1a:28:1f:ac:a0:43:9c:5d:38:58:d7:eb:58:da:fc:
         e4:e4:dc:fe:2f:cd:3c:8a:0e:68:f1:32:0e:98:39:2c:54:94:
         a1:06:77:60:a8:16:0b:49:e5:a1:55:97:34:8a:dc:10:2b:e3:
         0e:a7:79:44:75:6c:d3:a5:e3:b9:e4:40:27:47:5b:ea:c9:d8:
         26:3e:96:6d:a0:81:7c:a7:6b:d5:7c:18:c0:7e:3c:23:e9:b4:
         62:92:71:86:d3:20:a9:da:eb:d0:e9:32:54:a4:8e:de:ca:3a:
         1d:48:a0:27:09:d7:72:ca:28:e6:cf:76:b5:b8:49:66:76:ab:
         f1:de:ab:f7:ea:55:71:71:10:0b:a7:58:1f:fb:76:9a:bd:10:
         fd:b7:96:57:4c:26:f3:c8:30:1c:49:ab:cc:75:cd:86:a1:06:
         ed:50:b7:5a:a6:9d:92:0c:0e:85:a5:c6:cb:39:e8:e4:aa:8a:
         39:31:7f:88:9a:f2:4f:f1:72:0e:69:24:2f:6e:70:f1:29:8b:
         02:b4:db:a3:7d:9e:a1:da:ed:a3:9d:4c:76:ad:3a:95:56:70:
         0c:20:18:1f:8e:2a:bd:fc:dd:c6:66:68:91:cf:37:ba:94:29:
         23:c1:9c:86:6e:c3:36:51:97:d6:57:9e:b5:d1:3b:75:80:1f:
         37:2f:07:61
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:29 2024 by rpki-client on console-ams.rpki-client.org