Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/1/323830343a3261383a3a2f33322d313238203d3e20323632383330.roa
File:                     323830343a3261383a3a2f33322d313238203d3e20323632383330.roa (raw, json)
Hash identifier:          P/Kfrrex+hgrd8pqUNnaRVQzkNCovjvWH2uSNYdQdEE=
Subject key identifier:   84:87:53:F5:0D:7F:E3:4E:4A:7D:DD:EF:B3:3A:E5:78:41:C4:10:87
Certificate issuer:       /CN=D7357A5920DDE042D991790CBF01A42B93CC3D10
Certificate serial:       486354D1CFE2C40157D882CA2FA9F9764ACB4ED8
Authority key identifier: D7:35:7A:59:20:DD:E0:42:D9:91:79:0C:BF:01:A4:2B:93:CC:3D:10
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7357A5920DDE042D991790CBF01A42B93CC3D10.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/1/323830343a3261383a3a2f33322d313238203d3e20323632383330.roa
Signing time:             Wed 03 Apr 2024 20:09:59 +0000
ROA not before:           Wed 03 Apr 2024 20:04:59 +0000
ROA not after:            Wed 02 Apr 2025 20:09:59 +0000
asID:                     262830
IP address blocks:        2804:2a8::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:63:54:d1:cf:e2:c4:01:57:d8:82:ca:2f:a9:f9:76:4a:cb:4e:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D7357A5920DDE042D991790CBF01A42B93CC3D10
        Validity
            Not Before: Apr  3 20:04:59 2024 GMT
            Not After : Apr  2 20:09:59 2025 GMT
        Subject: CN=848753F50D7FE34E4A7DDDEFB33AE57841C41087
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d1:b2:22:6c:36:09:bd:c8:f3:b2:2e:31:1b:d2:
                    ce:33:60:0e:5e:69:b1:17:50:4c:10:df:9f:80:c9:
                    3b:dd:25:bd:e0:4c:d8:86:66:c4:30:99:46:70:f8:
                    61:67:38:81:1a:6f:ac:b1:ca:1f:fa:e1:20:31:d7:
                    4f:9c:1b:df:b4:c9:f4:92:f3:29:25:fc:22:2a:1e:
                    09:66:33:9a:8b:78:da:aa:66:3f:64:75:15:48:86:
                    5e:32:67:33:83:a3:3a:73:4d:20:f3:b2:30:39:3a:
                    3f:0e:de:13:4f:b7:48:e2:84:e0:0e:38:6b:05:bc:
                    58:dc:56:86:92:3c:8d:7a:cc:bf:9a:45:d0:51:e3:
                    f0:52:4b:00:b1:3c:7f:32:24:ec:21:d0:41:77:21:
                    7d:a6:48:d9:f4:ff:e7:11:90:b9:51:de:cc:8b:7c:
                    d0:a8:18:33:84:5e:3d:62:9d:07:27:b1:46:5c:d2:
                    1c:46:bb:04:c9:f2:f6:b1:8e:9a:cc:67:26:56:ed:
                    74:f8:11:0f:e2:ce:db:7d:ba:54:93:8f:dd:3a:fa:
                    4b:ee:1b:e5:24:2b:64:09:bb:27:8d:d1:d0:ef:cd:
                    5a:ae:74:3e:43:27:1c:d9:c4:a0:bf:d2:ca:ee:de:
                    ec:b3:a7:f6:5f:c8:a6:0b:08:42:61:64:61:aa:35:
                    1d:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                84:87:53:F5:0D:7F:E3:4E:4A:7D:DD:EF:B3:3A:E5:78:41:C4:10:87
            X509v3 Authority Key Identifier:
                keyid:D7:35:7A:59:20:DD:E0:42:D9:91:79:0C:BF:01:A4:2B:93:CC:3D:10

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/1/D7357A5920DDE042D991790CBF01A42B93CC3D10.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/D7357A5920DDE042D991790CBF01A42B93CC3D10.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EVn8jPty9rZiGfNjw6ZifGN5epGa4eBY4u6Zes7jJdzt/1/323830343a3261383a3a2f33322d313238203d3e20323632383330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2a8::/32

    Signature Algorithm: sha256WithRSAEncryption
         72:c9:0a:33:23:31:2e:95:67:bc:3b:26:41:f0:e3:61:49:a2:
         21:26:ec:97:52:34:24:b4:5d:7c:ed:55:ff:f3:fe:84:f6:8d:
         42:d4:1f:87:51:55:2c:31:40:64:40:fb:17:b0:03:5b:78:5b:
         eb:fb:63:f9:a8:72:60:e4:7b:2f:f2:a6:03:4f:65:b8:bc:c5:
         a3:33:0a:36:7f:ff:1a:ed:ba:25:10:a7:9c:f2:cb:cc:6a:5f:
         cd:a7:40:92:4d:b7:4d:d2:32:1a:ae:81:45:ed:d0:b8:a8:b1:
         60:b7:83:04:39:ee:e9:fc:df:27:16:4f:a4:ef:bb:9e:a0:d2:
         fc:d5:d3:12:6f:92:20:c5:ad:67:c7:31:68:13:4f:14:a7:89:
         2f:2e:f5:dd:a4:df:96:f9:dc:19:a2:ec:9b:e7:d6:3d:f2:1c:
         4f:39:65:d8:06:d1:39:b9:39:9b:88:16:0e:e2:18:8d:eb:b0:
         9f:28:76:90:7d:32:1f:d2:21:1f:8d:53:4b:04:f1:46:eb:e8:
         cc:42:4a:12:5c:dc:00:0c:7e:f0:af:a8:15:18:1e:a5:c7:e5:
         7e:61:53:88:02:cb:22:40:eb:60:67:63:24:2e:f1:2b:e8:c3:
         93:5e:e1:12:c3:de:85:ec:90:4d:f8:22:36:35:ca:e4:2a:6b:
         9f:ff:ba:a4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org