Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a393030313a3a2f34382d3438203d3e20323731303134.roa
File:                     323830343a373466343a393030313a3a2f34382d3438203d3e20323731303134.roa (raw, json)
Hash identifier:          XqfJkLlDgnEsEQdv2XXQa6dcgWY+Y+q6rqzqD4Gn7Kc=
Subject key identifier:   22:EF:E7:C4:22:D7:79:E8:3A:BF:AB:7F:AE:EA:87:A1:14:3E:F9:1D
Certificate issuer:       /CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
Certificate serial:       12D9523009084662D62281100A47CC84FAD17EF0
Authority key identifier: 24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a393030313a3a2f34382d3438203d3e20323731303134.roa
Signing time:             Thu 08 Feb 2024 14:06:02 +0000
ROA not before:           Thu 08 Feb 2024 14:01:02 +0000
ROA not after:            Thu 06 Feb 2025 14:06:02 +0000
asID:                     271014
IP address blocks:        2804:74f4:9001::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:d9:52:30:09:08:46:62:d6:22:81:10:0a:47:cc:84:fa:d1:7e:f0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=24CAF4C14D797EE171E6A6C5C11988AEA84BC352
        Validity
            Not Before: Feb  8 14:01:02 2024 GMT
            Not After : Feb  6 14:06:02 2025 GMT
        Subject: CN=22EFE7C422D779E83ABFAB7FAEEA87A1143EF91D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:48:80:a0:5a:01:cc:5a:cd:67:f4:dd:5d:66:
                    40:a1:b4:af:90:2f:08:d8:f9:49:f3:d5:37:4c:52:
                    f2:f0:ee:6d:ea:a4:e9:ca:d6:f5:ba:a9:4b:3d:ba:
                    e0:95:cf:1b:4c:ea:4b:06:4d:00:3f:3a:f6:15:f7:
                    3c:69:81:bf:1b:34:c6:1f:61:2f:ff:39:21:4e:a3:
                    d8:52:82:33:3e:52:3a:bb:f1:7e:75:1d:5d:95:5c:
                    04:0e:28:db:1f:68:89:b2:b6:6b:cb:d1:32:c9:76:
                    88:07:cc:d3:49:e6:2a:7a:d8:93:09:4d:83:c7:87:
                    1d:2f:de:65:a9:88:39:68:e1:44:c3:c2:46:43:75:
                    f2:90:78:29:ed:c7:76:0a:a3:25:f8:ee:61:a0:e5:
                    fb:03:6e:65:cc:e7:6d:c5:55:30:f8:a8:f5:d2:e2:
                    c2:a8:4a:07:10:8e:85:2a:17:13:ce:f4:b5:cd:20:
                    a9:1d:d9:f1:70:35:03:09:20:aa:17:95:a1:16:bb:
                    18:f7:90:0d:7d:15:c4:3d:b7:4a:0a:28:35:39:5d:
                    9e:a0:10:67:1f:1b:fa:5e:2a:4d:a4:87:8d:32:ce:
                    c3:c5:16:c0:12:1b:56:94:2f:77:e0:89:66:52:fa:
                    84:2d:c6:02:f1:ba:16:39:f6:71:41:9e:7b:73:0c:
                    4a:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:EF:E7:C4:22:D7:79:E8:3A:BF:AB:7F:AE:EA:87:A1:14:3E:F9:1D
            X509v3 Authority Key Identifier:
                keyid:24:CA:F4:C1:4D:79:7E:E1:71:E6:A6:C5:C1:19:88:AE:A8:4B:C3:52

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/24CAF4C14D797EE171E6A6C5C11988AEA84BC352.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/E43GdbmixcPX87xiAS3ytWjff4subBukg6tocUDLGgDw/0/323830343a373466343a393030313a3a2f34382d3438203d3e20323731303134.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:74f4:9001::/48

    Signature Algorithm: sha256WithRSAEncryption
         23:38:a9:b1:ed:49:e5:78:e7:6f:f0:db:40:78:4d:92:95:f3:
         4b:dc:dc:b2:2a:5b:27:44:93:85:35:89:5c:9e:a8:ef:46:cb:
         3b:55:42:cb:f5:30:02:2a:77:27:e4:fa:1f:2b:2c:95:fa:b4:
         92:bc:27:9e:e8:e1:17:04:b5:e4:9b:cb:d1:8f:0a:db:ea:48:
         10:6b:24:de:50:8f:24:cc:cc:71:66:f8:f5:43:5e:c2:e3:2f:
         c7:f6:c8:cf:03:46:2d:9f:36:eb:62:6d:b6:3b:75:c4:85:d5:
         34:ef:a5:36:a3:da:0b:03:33:ba:e2:c3:24:66:ac:b7:4b:ab:
         ab:a7:c9:64:79:4c:80:d0:8f:22:55:ee:cc:6a:1e:2d:e0:a4:
         7e:b9:f2:1b:36:17:3c:42:de:2c:a9:de:66:c1:40:b6:50:55:
         19:fa:25:76:d7:4a:99:b0:72:50:2e:48:58:3c:bc:7c:7f:6b:
         59:b3:0c:20:41:0d:43:e3:49:64:19:71:f4:37:ba:2a:3b:3e:
         68:81:3c:16:d7:57:a8:de:5b:f6:ec:3a:02:c5:2d:66:dd:b5:
         80:a9:0d:6f:03:bd:55:a5:d8:68:bd:1d:51:16:d8:30:77:0a:
         02:60:31:b9:b8:3d:44:bf:eb:ce:2a:f7:b2:3f:46:83:2b:00:
         f5:d2:c2:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:36 2024 by rpki-client on console-fra.rpki-client.org