Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/323830343a3738383a3a2f33322d3333203d3e20323632333030.roa
File:                     323830343a3738383a3a2f33322d3333203d3e20323632333030.roa (raw, json)
Hash identifier:          2iRGAAgkXj7mxXllzF5RCObLKT86JMVgNhYFD9tbCbs=
Subject key identifier:   0A:47:1D:9D:78:E1:83:76:1E:88:4D:03:27:70:D5:57:90:37:85:E1
Certificate issuer:       /CN=0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40
Certificate serial:       33223D6047105B6D67935348A1F05DB268BE2A96
Authority key identifier: 0C:41:1B:1D:C2:8D:14:EC:9C:2D:6D:35:F8:EC:D2:23:AB:78:ED:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/323830343a3738383a3a2f33322d3333203d3e20323632333030.roa
Signing time:             Sun 13 Mar 2022 02:46:19 +0000
ROA not before:           Sun 13 Mar 2022 02:41:19 +0000
ROA not after:            Sun 12 Mar 2023 02:46:19 +0000
asID:                     262300
IP address blocks:        2804:788::/32 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            33:22:3d:60:47:10:5b:6d:67:93:53:48:a1:f0:5d:b2:68:be:2a:96
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40
        Validity
            Not Before: Mar 13 02:41:19 2022 GMT
            Not After : Mar 12 02:46:19 2023 GMT
        Subject: CN=0A471D9D78E183761E884D032770D557903785E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:93:1f:d0:3e:73:09:0f:16:95:02:32:93:4e:06:
                    b7:41:d8:6c:77:3c:49:6e:fe:ec:b5:a2:d0:84:fc:
                    4d:19:92:99:c6:92:ea:16:2e:96:64:e7:9f:bb:8d:
                    64:d5:51:a9:c1:67:c0:67:40:be:02:b6:2e:6b:6b:
                    bd:73:71:12:6f:5d:9e:5a:c2:4c:66:5a:d8:e5:05:
                    13:40:20:0c:49:de:8f:7d:5b:e9:c2:09:fb:31:ca:
                    e9:e9:31:4c:b3:0f:c7:2c:44:2e:d7:1b:76:37:b5:
                    83:3b:2b:e9:48:a8:65:db:39:d7:44:7c:58:59:17:
                    59:d7:18:ac:fb:28:91:5e:1f:d2:80:e6:14:39:66:
                    5c:87:7d:b2:cd:ba:29:0c:7d:89:4d:9d:be:37:c2:
                    2d:d9:d8:7a:45:6f:3f:0b:0e:13:21:d5:e7:c0:aa:
                    cf:6e:1b:f8:b7:d2:88:df:87:c0:d3:43:20:3a:10:
                    45:27:d0:f8:01:f8:60:6f:b8:af:e4:06:15:21:3e:
                    b8:a8:5f:0b:f4:d6:3d:7f:76:ce:fb:70:8e:8b:ac:
                    21:9c:ff:2b:95:a8:7b:34:7c:c5:3d:33:49:eb:18:
                    d8:08:34:2b:92:50:9e:85:b4:c1:66:48:3c:b5:03:
                    3b:ed:2d:62:0e:bc:c0:a4:4d:1e:44:8c:ed:56:c2:
                    f2:7b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0A:47:1D:9D:78:E1:83:76:1E:88:4D:03:27:70:D5:57:90:37:85:E1
            X509v3 Authority Key Identifier:
                keyid:0C:41:1B:1D:C2:8D:14:EC:9C:2D:6D:35:F8:EC:D2:23:AB:78:ED:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0C411B1DC28D14EC9C2D6D35F8ECD223AB78ED40.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/Dq4RCL7mUJmgUtRDKjjB8Y4Nzpds4nTwiTh7G8eNgXN3/0/323830343a3738383a3a2f33322d3333203d3e20323632333030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:788::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:74:43:c9:68:58:17:6d:2b:75:1d:d8:59:50:26:a0:84:02:
         d7:dd:8d:a1:6e:1f:19:a9:ea:6b:31:41:4d:4e:46:8e:f0:a8:
         40:4e:c5:b6:1a:ce:bf:f9:d6:da:26:be:16:20:76:d0:10:ae:
         19:13:f2:9b:0f:45:70:eb:db:e7:af:e7:d9:70:ad:98:51:18:
         fb:12:46:dc:68:7b:b8:04:d4:93:dc:ce:06:7d:20:54:f2:99:
         d2:b6:3c:40:b2:23:7c:f6:4a:c4:b8:ba:39:6b:f5:68:d9:b3:
         a2:eb:c1:64:02:b7:9c:e2:b4:94:bd:1b:00:5f:3a:4f:c9:ae:
         1f:d1:18:0d:24:6e:52:07:25:8c:43:19:e3:05:43:cd:76:c2:
         10:d9:ce:fa:c5:ca:61:f6:dc:ca:ec:79:6b:2f:d2:fd:6b:15:
         65:a4:68:62:9a:12:9f:ef:77:1f:90:2d:f7:08:d5:24:84:5e:
         26:ae:2f:02:21:8e:ee:9e:10:fb:e3:c4:58:3d:9a:4e:93:fc:
         80:e9:0a:71:c7:46:58:95:68:d5:4e:e0:76:06:13:49:e5:e6:
         6b:64:e5:a1:77:0c:c3:7b:70:22:00:76:bf:b9:b4:c3:de:7d:
         45:9e:78:41:7e:0a:62:32:d9:4f:b2:bf:03:cc:61:90:64:3d:
         92:92:7d:06
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org