Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a333030303a3a2f33362d3336203d3e20323731303134.roa
File:                     323830343a373466343a333030303a3a2f33362d3336203d3e20323731303134.roa (raw, json)
Hash identifier:          LT7KtjMMyw2TiTFxYXnDPNVD9UxTuQCpYLBhlRT2/t8=
Subject key identifier:   EE:97:DE:C5:9F:69:42:7A:3B:81:90:57:2D:45:F7:35:42:1D:6C:1F
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       6B7B35A77778E60B9C724FBAEF4A2A2F0F9E6208
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a333030303a3a2f33362d3336203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:06:00 +0000
ROA not before:           Thu 08 Feb 2024 14:01:00 +0000
ROA not after:            Thu 06 Feb 2025 14:06:00 +0000
asID:                     271014
IP address blocks:        2804:74f4:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:7b:35:a7:77:78:e6:0b:9c:72:4f:ba:ef:4a:2a:2f:0f:9e:62:08
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:01:00 2024 GMT
            Not After : Feb  6 14:06:00 2025 GMT
        Subject: CN=EE97DEC59F69427A3B8190572D45F735421D6C1F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:9c:74:37:47:83:73:dd:b4:92:91:5b:55:fd:
                    a2:0a:ef:51:72:e7:63:0f:87:27:03:29:92:65:4e:
                    a7:13:74:3f:df:15:a3:2e:8d:fe:06:4a:56:19:78:
                    83:2e:49:b0:e6:34:9b:15:de:d1:25:36:87:74:26:
                    62:39:fc:f7:a8:8e:eb:51:72:f0:14:27:76:3f:01:
                    69:1f:b4:f6:5d:af:b8:71:d7:f0:60:5b:88:92:82:
                    d1:01:8d:bf:49:bd:30:fe:84:48:40:c7:15:33:31:
                    d3:a9:b3:8c:31:52:e9:25:92:54:d5:d5:6e:4f:87:
                    34:b7:e0:02:d2:c6:de:26:60:82:ca:14:da:46:f5:
                    f9:0e:ae:6e:66:94:89:13:3d:6f:3e:a1:e7:57:aa:
                    b2:4e:74:e0:af:32:b4:0b:2c:ff:a1:4c:c1:d4:7c:
                    3c:24:fb:97:eb:57:db:ea:a4:20:66:9a:8b:5b:fb:
                    da:b5:72:8c:89:9f:38:2b:0b:38:c2:f8:83:f8:23:
                    a4:c7:36:0a:ad:42:5b:92:60:0f:3a:c0:ec:a9:eb:
                    ee:1c:be:2b:4c:ec:21:b6:7c:ff:d0:78:d4:06:6a:
                    78:c0:c9:18:2c:6e:ae:14:db:c5:b0:52:06:63:a4:
                    68:cc:95:a3:d4:0b:49:59:63:f4:af:3d:d7:df:1d:
                    f7:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:97:DE:C5:9F:69:42:7A:3B:81:90:57:2D:45:F7:35:42:1D:6C:1F
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a333030303a3a2f33362d3336203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         82:18:bb:c6:48:db:d2:08:36:45:64:0c:f8:b1:fe:28:c1:87:
         01:6a:cb:6b:2c:c3:b8:47:93:11:d0:40:45:e8:a0:4e:32:16:
         20:16:d5:e3:7a:4e:9b:77:0e:8a:7a:28:ec:7e:1f:75:3e:fb:
         1a:6e:97:1b:56:65:00:ec:10:14:c8:f8:56:44:d2:ce:ba:c9:
         99:d2:8f:7c:9b:46:64:a4:cc:13:63:48:f7:1c:3d:f6:5d:b3:
         f0:ba:49:dc:fe:a3:b5:eb:0a:51:c3:0d:26:32:96:d8:fd:23:
         c6:5d:b8:9a:7e:26:ec:9c:fb:29:66:c1:51:59:68:aa:78:53:
         6f:30:69:49:99:cf:20:97:93:f0:55:1e:10:b3:39:43:18:ba:
         54:cf:93:54:28:da:b4:e9:7f:6c:7a:11:e9:38:88:b1:4f:94:
         0b:09:49:cd:f0:19:fa:18:d5:b7:04:b6:9d:12:79:3c:a8:96:
         e0:1d:db:14:de:95:4e:5f:98:7d:28:8c:e4:5b:b5:c5:83:62:
         14:e9:69:8a:dd:e5:92:2f:4d:91:ae:93:55:f5:8e:33:9e:57:
         b6:cb:41:4e:df:2b:2a:0b:12:81:fb:bf:f0:69:4b:dc:e6:84:
         d1:91:e8:a6:ec:9a:d4:a3:d3:ca:fe:c6:5d:23:b3:18:53:dd:
         4a:89:cb:36
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org