Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/323830343a336438303a3a2f33322d3438203d3e20323636353335.roa
File:                     323830343a336438303a3a2f33322d3438203d3e20323636353335.roa (raw, json)
Hash identifier:          Bccm75O2gzxW/knoKk0fvuU9NNndEbeadKcbbufWIhM=
Subject key identifier:   33:6B:D5:9F:F3:02:E1:C5:AF:C0:06:36:DC:55:65:61:A3:7E:77:1A
Certificate issuer:       /CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
Certificate serial:       714FFCAABDAB686FE574D8DB92CC8693A3CC3AB4
Authority key identifier: 41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/323830343a336438303a3a2f33322d3438203d3e20323636353335.roa
Signing time:             Fri 15 Sep 2023 08:00:01 +0000
ROA not before:           Fri 15 Sep 2023 07:55:01 +0000
ROA not after:            Fri 13 Sep 2024 08:00:01 +0000
asID:                     266535
IP address blocks:        2804:3d80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:4f:fc:aa:bd:ab:68:6f:e5:74:d8:db:92:cc:86:93:a3:cc:3a:b4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=414FA748DA84D421B71DC3765DBDDDF7039CA686
        Validity
            Not Before: Sep 15 07:55:01 2023 GMT
            Not After : Sep 13 08:00:01 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:ab:47:b7:7c:5c:2e:ed:3f:0a:9d:b8:73:9c:
                    67:91:fa:77:a3:ea:de:a7:66:24:9f:29:65:c3:72:
                    10:c2:17:cd:e9:11:ee:95:06:fa:53:5b:84:30:79:
                    aa:53:b5:04:17:b8:88:59:9e:5b:1a:fb:93:a4:57:
                    21:82:33:17:77:8c:4f:10:53:21:b4:eb:af:e9:a5:
                    e0:48:f8:f2:93:5f:41:59:a0:bb:10:20:1d:37:8b:
                    a2:f6:ff:1b:ee:7c:cf:b7:90:c4:69:86:05:8c:fc:
                    36:b7:ae:72:d4:c7:b7:ca:a8:6a:4c:26:3e:f7:b4:
                    42:2e:b1:97:38:93:e0:91:ce:ec:b5:63:25:7a:ff:
                    46:ee:54:10:23:ad:cd:c6:c9:fd:5b:7f:76:cd:ac:
                    78:82:30:6d:47:38:c0:5b:dd:bd:e4:fe:a5:c2:19:
                    e0:e8:6d:ce:e1:1b:77:e2:ad:cc:02:dc:86:9b:6e:
                    75:bc:69:b0:01:68:c2:72:8f:54:ff:10:b3:4c:20:
                    71:4d:e6:29:03:8c:24:57:1d:89:ce:dd:9f:1d:01:
                    02:5f:33:f7:f1:69:8c:52:0e:b3:c9:ab:55:af:af:
                    89:62:24:ce:c6:6a:5e:15:4c:09:c3:5c:3c:2c:7e:
                    74:f1:91:de:92:9a:b6:83:b9:ef:f1:36:2d:15:7d:
                    72:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                33:6B:D5:9F:F3:02:E1:C5:AF:C0:06:36:DC:55:65:61:A3:7E:77:1A
            X509v3 Authority Key Identifier:
                keyid:41:4F:A7:48:DA:84:D4:21:B7:1D:C3:76:5D:BD:DD:F7:03:9C:A6:86

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/414FA748DA84D421B71DC3765DBDDDF7039CA686.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/ERmzEvzbu1eMi8EvHTHWikkAxPAT8JZAjcocc2dLjRLy/0/323830343a336438303a3a2f33322d3438203d3e20323636353335.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         cd:3d:6c:13:b1:3b:94:39:88:2d:8c:3e:16:61:38:78:47:91:
         24:da:b9:ae:8b:14:23:10:59:08:ad:38:06:50:68:c0:aa:6c:
         a4:88:9d:b6:f6:df:65:e0:d9:02:48:9f:38:5d:ab:58:5d:37:
         16:a1:d5:b1:ec:05:ac:b4:50:a1:0c:4f:e7:dc:c4:68:e8:4c:
         ad:9a:a9:88:ac:72:da:0e:03:2d:8d:c3:5f:6f:9d:11:4f:51:
         9e:e8:f1:32:99:cc:1d:16:f8:5a:ab:ec:b1:52:cb:99:29:b7:
         7c:d0:65:b0:b3:f0:c7:07:c6:9b:5b:7b:c5:d9:6d:6c:0a:2d:
         41:32:de:0c:2a:de:19:d3:4b:e9:72:63:6b:67:02:78:c1:a4:
         bc:38:3e:80:b9:a6:2a:5b:1a:0b:73:d8:7c:21:39:10:ba:9a:
         c6:36:bb:7d:e9:4a:33:d6:86:fd:00:5c:ff:5e:5b:5c:86:c8:
         12:87:79:fa:88:02:d8:f3:56:c4:45:3d:c4:35:6f:64:b9:31:
         7e:61:ae:3d:60:c6:56:a2:e6:63:c6:18:23:de:31:23:8c:9b:
         58:45:f8:0c:20:82:16:e3:9d:4b:be:89:2f:d6:9a:14:b7:7f:
         6d:37:f6:24:52:65:b5:5f:86:2d:1b:0b:b4:58:e8:46:3c:fe:
         e1:68:b1:e8
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:46 2024 by rpki-client on console-ams.rpki-client.org