Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EPp5D1TPa3WPfKBN5F2JLWHeYcM3GXPrm7X47bVkdd1K/0/323830343a346234343a3a2f33322d3438203d3e20323637323934.roa
File:                     323830343a346234343a3a2f33322d3438203d3e20323637323934.roa (raw, json)
Hash identifier:          8UFpkZ+tng5y7O0vutbZatfmVAVsbortAttZbwUMk5Q=
Subject key identifier:   34:BD:49:E4:E8:A8:26:D1:35:28:22:4E:5F:E4:44:8E:D7:BC:69:2A
Certificate issuer:       /CN=3FB7873B41762305642E25A883D0E038F87AB647
Certificate serial:       4DF4E3C7B3EF9D108DE7790DC5BDBD458376965F
Authority key identifier: 3F:B7:87:3B:41:76:23:05:64:2E:25:A8:83:D0:E0:38:F8:7A:B6:47
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB7873B41762305642E25A883D0E038F87AB647.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EPp5D1TPa3WPfKBN5F2JLWHeYcM3GXPrm7X47bVkdd1K/0/323830343a346234343a3a2f33322d3438203d3e20323637323934.roa
Signing time:             Tue 07 Sep 2021 16:24:00 +0000
ROA not before:           Tue 07 Sep 2021 16:19:00 +0000
ROA not after:            Tue 06 Sep 2022 16:24:00 +0000
asID:                     267294
IP address blocks:        2804:4b44::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4d:f4:e3:c7:b3:ef:9d:10:8d:e7:79:0d:c5:bd:bd:45:83:76:96:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3FB7873B41762305642E25A883D0E038F87AB647
        Validity
            Not Before: Sep  7 16:19:00 2021 GMT
            Not After : Sep  6 16:24:00 2022 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:d4:0e:0a:3a:d4:26:c9:6a:e9:d4:d8:b5:66:
                    65:f6:f4:d4:81:ca:21:47:85:54:3b:be:24:0c:3d:
                    0a:4b:75:74:53:b3:cd:37:30:f2:65:74:8d:88:38:
                    92:70:18:4c:b2:81:e5:db:19:4c:45:c6:9b:e1:ed:
                    49:db:75:84:00:2d:9f:3f:83:97:d9:9a:19:28:5d:
                    53:bf:8b:0a:1a:4e:2a:af:59:88:89:96:72:ae:a7:
                    c6:fb:4a:28:9e:c5:44:2c:c2:e1:f1:89:31:d5:35:
                    35:de:f1:74:cf:8b:dd:7f:19:94:d8:ed:85:1d:f3:
                    17:3a:50:d3:33:6f:51:4c:75:e2:27:9a:08:75:60:
                    d8:77:68:a0:aa:02:72:3f:1d:87:91:19:73:ce:97:
                    7a:cc:b7:d6:f8:95:20:c2:a1:9e:6a:37:5b:92:3c:
                    37:1f:7f:96:52:ae:1c:2d:42:2e:77:a2:c9:66:0b:
                    1d:1d:ab:4f:76:d3:00:01:2e:31:5d:dc:9a:1b:b6:
                    cb:7a:07:36:d9:f5:3c:f9:9d:87:1a:fa:6e:08:8f:
                    a8:16:1b:83:f9:ce:8b:5e:70:19:4b:c8:84:27:43:
                    fc:b2:7a:05:10:b1:4a:73:ea:5c:f2:a0:b8:be:32:
                    97:c7:63:37:bf:c0:6e:01:a4:63:0b:b0:64:0e:2f:
                    b5:77
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:BD:49:E4:E8:A8:26:D1:35:28:22:4E:5F:E4:44:8E:D7:BC:69:2A
            X509v3 Authority Key Identifier:
                keyid:3F:B7:87:3B:41:76:23:05:64:2E:25:A8:83:D0:E0:38:F8:7A:B6:47

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EPp5D1TPa3WPfKBN5F2JLWHeYcM3GXPrm7X47bVkdd1K/0/3FB7873B41762305642E25A883D0E038F87AB647.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3FB7873B41762305642E25A883D0E038F87AB647.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EPp5D1TPa3WPfKBN5F2JLWHeYcM3GXPrm7X47bVkdd1K/0/323830343a346234343a3a2f33322d3438203d3e20323637323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4b44::/32

    Signature Algorithm: sha256WithRSAEncryption
         7c:b9:70:f6:15:ff:5f:27:7d:0b:8e:86:47:08:13:08:a3:98:
         3d:47:68:5b:7f:f7:6e:b0:ed:5c:f0:c7:dd:4b:13:1b:85:48:
         ac:e3:e4:29:f3:6c:58:62:6a:4f:12:71:70:70:28:53:03:07:
         72:8e:3f:96:8b:43:10:0f:28:c5:66:59:53:d5:15:01:d5:ef:
         51:65:f4:d6:be:33:34:b5:8e:ac:c6:cc:43:26:27:b2:97:f2:
         df:39:9e:49:85:6a:3a:15:88:43:15:e5:d5:22:a3:a8:56:7a:
         71:dd:84:bd:90:f5:a6:2e:b1:95:f1:76:09:b7:4c:8c:3f:44:
         8d:44:d6:df:f5:c8:55:f1:c6:4d:8d:dc:47:2b:81:18:b2:3e:
         60:c9:d1:74:45:5c:73:e5:10:ca:6b:97:0e:2b:79:a8:4e:69:
         7d:4a:56:a1:4c:df:22:1c:85:c4:f4:f9:36:4c:68:66:10:0a:
         9e:da:bf:e2:2e:4b:60:02:17:4e:99:a9:b1:9d:f7:40:c5:1a:
         df:4e:97:21:96:21:a0:41:25:20:95:e6:db:17:74:3f:14:11:
         ea:19:0b:58:65:c7:d6:93:58:b5:db:9e:4a:c9:1f:ac:27:c1:
         98:34:5a:08:6e:91:6d:18:f9:12:70:5f:e3:1e:95:f1:32:bf:
         15:fb:b1:ae
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:38 2024 by rpki-client on console-fra.rpki-client.org