Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a383030303a3a2f33332d3333203d3e20323633363631.roa
File:                     323830343a313132383a383030303a3a2f33332d3333203d3e20323633363631.roa (raw, json)
Hash identifier:          j5DaWECOeqCuIoXAdTfyATepYi4lkT77E18YnoG7MaU=
Subject key identifier:   9E:97:5D:EE:5A:BA:B6:A6:66:0B:37:98:1E:DD:45:BB:2B:D3:2A:50
Certificate issuer:       /CN=1F461E0163E83106F84ADF1433865326051B09F5
Certificate serial:       04D08C81AEDC65239D589EB3AF3A8A0B11F80FEC
Authority key identifier: 1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a383030303a3a2f33332d3333203d3e20323633363631.roa
Signing time:             Thu 28 Mar 2024 18:44:59 +0000
ROA not before:           Thu 28 Mar 2024 18:39:59 +0000
ROA not after:            Thu 27 Mar 2025 18:44:59 +0000
asID:                     263661
IP address blocks:        2804:1128:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            04:d0:8c:81:ae:dc:65:23:9d:58:9e:b3:af:3a:8a:0b:11:f8:0f:ec
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F461E0163E83106F84ADF1433865326051B09F5
        Validity
            Not Before: Mar 28 18:39:59 2024 GMT
            Not After : Mar 27 18:44:59 2025 GMT
        Subject: CN=9E975DEE5ABAB6A6660B37981EDD45BB2BD32A50
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ab:a0:72:f4:33:79:c3:3f:dc:b9:f4:b4:22:e9:
                    d0:05:35:bf:e8:2e:6a:46:fe:83:2b:d8:5a:ec:c5:
                    3d:c0:e0:2f:fd:ba:9b:ee:5e:74:a7:e0:68:c5:2d:
                    12:a0:9d:3a:52:63:97:6a:9b:20:fe:a0:8a:6c:c5:
                    42:8d:dd:fa:f9:c2:30:7c:75:2b:1d:02:aa:38:fd:
                    ed:a7:19:05:8d:06:96:01:cb:24:5c:df:94:d0:8a:
                    ad:46:b0:c8:46:68:ca:7d:53:54:fe:a8:cb:77:14:
                    df:18:a8:58:13:71:e4:23:5a:ff:f7:16:e2:f6:2e:
                    68:29:aa:df:a1:53:dd:ec:a9:bf:78:81:99:76:90:
                    ef:22:06:9d:3f:d8:60:1c:79:43:4d:0a:82:d0:af:
                    1f:cf:c7:de:43:33:9b:04:d6:ad:f8:97:1a:a0:9a:
                    70:9c:b6:21:3c:30:61:43:9b:f6:30:4b:92:67:dc:
                    3e:c4:4b:d6:94:12:a6:c9:1d:12:73:e5:7c:d0:a9:
                    dd:5a:fb:81:7f:05:1c:6b:fd:27:b8:41:48:a3:b5:
                    25:c4:7d:75:04:08:e7:1b:b5:b3:3f:d0:ec:e7:d2:
                    c8:a0:18:59:77:8a:00:23:63:e1:cd:b2:0c:22:04:
                    9d:24:76:45:bd:4a:86:00:70:13:4e:79:4e:86:2b:
                    20:ed
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                9E:97:5D:EE:5A:BA:B6:A6:66:0B:37:98:1E:DD:45:BB:2B:D3:2A:50
            X509v3 Authority Key Identifier:
                keyid:1F:46:1E:01:63:E8:31:06:F8:4A:DF:14:33:86:53:26:05:1B:09:F5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/1F461E0163E83106F84ADF1433865326051B09F5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F461E0163E83106F84ADF1433865326051B09F5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EZmzhFfk5kKaw1Kp7LmJB1G3y8zZp8iJ6w766Myeanuj/1/323830343a313132383a383030303a3a2f33332d3333203d3e20323633363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1128:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         30:27:d9:e6:72:57:3e:87:d3:e5:41:d7:cc:ca:2e:5a:9d:6f:
         73:fc:95:64:6a:31:5a:ee:48:56:2c:66:21:7b:32:92:db:62:
         f9:53:a0:c0:04:36:f1:8f:38:5b:64:8e:35:26:bd:c2:de:d0:
         69:97:55:6c:51:c5:1b:27:b5:c5:2e:ae:a1:ab:8f:26:d1:a3:
         3e:4f:2c:77:3c:a1:7d:82:38:f9:d1:59:6b:e3:c5:7b:3a:87:
         c9:c1:52:f9:9e:12:b0:df:bd:cf:52:8c:04:e2:b7:42:b5:f8:
         f6:d6:f2:d0:cf:4f:ff:0f:c8:76:83:fb:ca:4f:38:24:d0:c2:
         75:4c:b9:f0:80:a6:8d:12:cf:73:3d:c7:8f:c0:7c:0f:f7:40:
         94:44:15:08:05:90:94:c9:94:d9:a9:3e:d3:13:02:3c:17:d1:
         fd:2b:5a:4c:c0:b4:bc:74:99:0f:65:77:63:b3:f7:97:15:ac:
         67:28:00:e6:3c:96:36:95:71:f7:10:4a:ee:b5:82:58:49:6e:
         64:77:6f:3a:fa:19:83:a0:85:9d:39:ce:28:fd:c9:78:41:4b:
         cf:9c:c5:fc:c4:d3:10:67:1b:28:d3:24:78:8a:3c:ab:e1:c2:
         35:97:34:fc:cc:75:68:d7:6a:ce:1f:37:f1:16:7c:46:db:03:
         85:c5:0d:83
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:39 2024 by rpki-client on console-fra.rpki-client.org