Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/1/323830343a373634303a3a2f33322d3438203d3e20323731303939.roa
File:                     323830343a373634303a3a2f33322d3438203d3e20323731303939.roa (raw, json)
Hash identifier:          hhRKgOi8R5vM+C16ZRyv6JLEYwtA/Wefledkbi0PF1U=
Subject key identifier:   4F:49:3F:A8:18:D1:86:02:BF:C5:7A:D1:8F:4A:E4:C1:D9:8F:C7:AC
Certificate issuer:       /CN=E9F0E9149697E204B319ECD5E47A1C12DAB46AE1
Certificate serial:       095A25793696242B257829A373EA980282743944
Authority key identifier: E9:F0:E9:14:96:97:E2:04:B3:19:EC:D5:E4:7A:1C:12:DA:B4:6A:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9F0E9149697E204B319ECD5E47A1C12DAB46AE1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/1/323830343a373634303a3a2f33322d3438203d3e20323731303939.roa
Signing time:             Wed 03 Apr 2024 21:20:09 +0000
ROA not before:           Wed 03 Apr 2024 21:15:09 +0000
ROA not after:            Wed 02 Apr 2025 21:20:09 +0000
asID:                     271099
IP address blocks:        2804:7640::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:5a:25:79:36:96:24:2b:25:78:29:a3:73:ea:98:02:82:74:39:44
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E9F0E9149697E204B319ECD5E47A1C12DAB46AE1
        Validity
            Not Before: Apr  3 21:15:09 2024 GMT
            Not After : Apr  2 21:20:09 2025 GMT
        Subject: CN=4F493FA818D18602BFC57AD18F4AE4C1D98FC7AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:db:92:4d:fc:4e:4a:04:cc:a6:0b:b8:30:fd:cf:
                    3e:61:d0:15:d3:31:65:36:29:dc:af:4f:67:5b:b9:
                    b1:66:7a:63:2b:f1:8c:13:2e:b7:a1:38:e4:e6:34:
                    08:dd:4c:3a:cd:1d:4b:c9:02:96:ec:26:bc:4f:72:
                    d7:54:a2:bc:f3:4f:09:d2:0c:50:36:79:93:aa:56:
                    22:c6:c4:c8:34:a2:01:11:46:1d:19:da:04:86:b9:
                    2c:ba:cb:06:e4:d6:7e:8a:5b:d6:86:91:f7:44:da:
                    9a:76:76:95:2d:25:1d:c9:35:f3:3b:38:e0:64:61:
                    18:4f:35:8c:0f:10:b9:3b:11:10:da:5d:04:8f:c4:
                    7f:59:c0:d4:97:25:bf:84:01:d5:41:47:3a:f1:69:
                    2a:1b:d7:5a:e4:55:68:73:c6:5d:75:7b:9b:30:3d:
                    07:a4:43:6a:25:91:f7:ac:79:58:28:8d:51:8a:3b:
                    c1:0b:58:b4:7d:49:b7:2f:f5:4b:dd:7b:c7:5d:1a:
                    20:14:fc:d3:40:ef:05:3c:a3:bd:a2:20:41:a2:c7:
                    bd:27:0e:af:a3:27:ff:39:c3:7c:04:a7:49:64:28:
                    15:34:aa:29:a0:6d:d1:1c:e6:1c:a2:84:86:01:77:
                    2a:66:bd:75:40:e8:ea:57:43:2c:3b:0f:27:4c:3a:
                    7f:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4F:49:3F:A8:18:D1:86:02:BF:C5:7A:D1:8F:4A:E4:C1:D9:8F:C7:AC
            X509v3 Authority Key Identifier:
                keyid:E9:F0:E9:14:96:97:E2:04:B3:19:EC:D5:E4:7A:1C:12:DA:B4:6A:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/1/E9F0E9149697E204B319ECD5E47A1C12DAB46AE1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E9F0E9149697E204B319ECD5E47A1C12DAB46AE1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EezVR7XjEMBSAMptYa9pq8izQDZ1xxuKssTE8i4nUdBn/1/323830343a373634303a3a2f33322d3438203d3e20323731303939.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7640::/32

    Signature Algorithm: sha256WithRSAEncryption
         b0:60:e2:bb:af:0c:7a:6f:51:c6:20:61:b2:3d:55:1d:2d:93:
         6a:d6:e5:82:2a:e7:fd:37:f9:93:fd:e0:36:e6:dc:b7:11:36:
         40:38:35:36:e5:ed:0c:13:36:bb:42:53:27:bc:15:d7:c8:6a:
         33:8b:f8:7f:61:3d:bb:a4:a5:61:e5:2b:e3:52:d6:5d:de:fe:
         da:f5:d7:c2:b4:de:a3:b5:15:ae:91:eb:01:bb:e3:6c:02:90:
         50:0a:2d:5f:c9:a1:31:8a:48:6f:9d:1f:e2:83:c2:67:34:47:
         54:76:2a:2e:e4:aa:4d:3e:89:75:4a:f8:ca:a3:eb:c1:ec:04:
         6a:0b:23:da:65:22:ca:46:ab:53:b2:96:56:e9:8c:ae:6f:20:
         21:f3:92:96:8c:1b:07:c7:ed:ed:38:33:b6:74:bf:77:ca:3e:
         e2:6b:7d:c0:41:b3:f3:b1:93:89:02:31:d2:cc:61:18:e4:e8:
         2f:91:6f:6d:d9:84:d3:86:af:c7:4f:6c:46:d8:15:20:ac:07:
         cb:da:eb:d8:3b:9a:7e:57:83:59:6c:ec:72:cf:f1:29:4c:82:
         42:2f:d9:de:83:6b:cd:97:0e:15:23:37:de:8e:41:0b:e6:f7:
         db:23:73:de:47:3d:88:0d:c4:b8:7b:da:45:df:cc:71:3a:ce:
         ed:89:db:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:47 2024 by rpki-client on console-ams.rpki-client.org