Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/323830343a333137383a3a2f33322d3332203d3e20323635303137.roa
File:                     323830343a333137383a3a2f33322d3332203d3e20323635303137.roa (raw, json)
Hash identifier:          HkDniazeAzyYNOq061Pqm5HoMBFcVTnRGkoMNNR0FKw=
Subject key identifier:   C7:40:AB:74:7D:7A:E2:3E:41:17:2B:5C:11:1B:44:17:A9:8C:2B:AA
Certificate issuer:       /CN=D21172D11F83AF970E477D1BEC091421032D8B92
Certificate serial:       5B91F3428C3CE1F552250A235999205AC57DD122
Authority key identifier: D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/323830343a333137383a3a2f33322d3332203d3e20323635303137.roa
Signing time:             Wed 03 Apr 2024 22:10:49 +0000
ROA not before:           Wed 03 Apr 2024 22:05:49 +0000
ROA not after:            Wed 02 Apr 2025 22:10:49 +0000
asID:                     265017
IP address blocks:        2804:3178::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5b:91:f3:42:8c:3c:e1:f5:52:25:0a:23:59:99:20:5a:c5:7d:d1:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D21172D11F83AF970E477D1BEC091421032D8B92
        Validity
            Not Before: Apr  3 22:05:49 2024 GMT
            Not After : Apr  2 22:10:49 2025 GMT
        Subject: CN=C740AB747D7AE23E41172B5C111B4417A98C2BAA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8c:2b:39:1e:51:96:35:e0:1d:20:03:8f:7e:de:
                    fa:b6:2f:8a:f3:7e:37:68:2a:d3:bf:07:9f:14:1b:
                    a6:ce:6e:81:97:85:bd:7d:dc:b4:02:b4:ac:08:90:
                    7e:02:61:c8:70:e2:47:9f:78:24:b8:ac:ec:49:7c:
                    99:dd:1a:02:88:17:45:8b:d7:09:e8:c5:38:b1:d4:
                    bf:37:d8:54:4d:60:40:a9:31:d2:e0:56:a3:d7:cc:
                    79:7d:82:b4:f6:2a:be:ab:20:88:89:f2:09:bf:f7:
                    62:5b:b8:84:98:44:94:cb:99:06:67:f6:05:78:48:
                    3c:e7:17:21:66:d8:03:0f:2b:0e:b7:3f:1c:64:88:
                    6d:11:d2:1b:77:22:8b:cf:12:58:35:e1:ed:46:9f:
                    f9:e0:0a:50:f7:94:0f:74:2c:a2:04:8d:4f:44:44:
                    e7:d6:9f:6b:3a:db:be:04:22:8e:35:f4:52:86:db:
                    44:c9:8f:76:9d:4c:1d:0b:8a:56:9d:61:4b:dc:71:
                    88:6b:63:85:4e:a1:9f:a9:f3:42:fa:4b:0a:14:4f:
                    5a:d2:16:15:87:17:66:fc:df:75:40:b3:cb:b8:db:
                    8a:32:98:be:bf:93:f2:25:f5:4c:65:27:3a:0f:db:
                    23:d8:89:4d:48:21:a1:52:b2:f7:37:c6:64:5e:10:
                    5c:11
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C7:40:AB:74:7D:7A:E2:3E:41:17:2B:5C:11:1B:44:17:A9:8C:2B:AA
            X509v3 Authority Key Identifier:
                keyid:D2:11:72:D1:1F:83:AF:97:0E:47:7D:1B:EC:09:14:21:03:2D:8B:92

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/D21172D11F83AF970E477D1BEC091421032D8B92.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D21172D11F83AF970E477D1BEC091421032D8B92.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/DsENnrTFgdhvbZuB6Vq6SMYijs1uZbaDuEj7B925CvMm/1/323830343a333137383a3a2f33322d3332203d3e20323635303137.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3178::/32

    Signature Algorithm: sha256WithRSAEncryption
         17:d7:21:55:8c:1f:9c:eb:64:bb:43:c4:dd:c5:11:a5:32:6d:
         e6:61:cf:9f:aa:fb:f1:cf:31:5a:7c:11:21:6e:74:12:6b:8f:
         0c:c8:3e:a8:5e:7a:6e:bb:49:ed:b0:f4:92:3f:2e:6d:ed:41:
         c4:18:30:68:ad:f5:2d:1a:19:42:37:9e:eb:6f:d6:ef:f7:a9:
         63:6e:59:35:aa:92:e4:54:8d:33:5b:97:5d:6b:57:e0:c2:9f:
         2d:57:c1:30:8c:50:a7:fc:1f:44:3b:fa:b4:c9:1f:96:ab:22:
         26:40:69:30:db:5a:a8:9c:ac:19:76:f2:7f:13:ca:c4:d4:cd:
         a4:e4:95:29:a8:73:d5:6d:e3:8e:67:bf:04:30:a7:5f:0f:bd:
         07:c8:3d:07:2e:21:37:0d:a9:5b:04:23:cf:d8:01:7f:b7:d8:
         b5:dd:3d:14:1c:07:f6:07:8f:c9:8a:54:1b:32:f9:a8:05:b8:
         c7:f9:ee:3b:a1:c4:ce:83:6c:d9:99:00:69:05:6d:52:8f:36:
         fd:11:5c:23:cd:45:d2:1f:65:7c:5a:17:0d:08:9b:78:bf:b7:
         c8:92:1f:aa:5e:9b:0b:f5:ee:7d:1c:da:a2:ce:fb:31:3d:86:
         ed:ee:2a:cc:49:f0:5b:8e:a2:25:d7:35:92:e7:30:6a:3e:96:
         29:47:99:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:40 2024 by rpki-client on console-ams.rpki-client.org