Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/2/323830343a373933633a3a2f33322d3438203d3e20323731323933.roa
File:                     323830343a373933633a3a2f33322d3438203d3e20323731323933.roa (raw, json)
Hash identifier:          4q1dacLIaUMf8+fNfEzxwqp9++qCOeC01FlLzMVGk80=
Subject key identifier:   B1:06:02:2D:0D:72:EB:77:33:82:59:F6:A1:99:65:45:02:48:F6:34
Certificate issuer:       /CN=1BD3EE40DABA0B97635B081F90825C8429926014
Certificate serial:       737A8BAD2DD5CFC746E63A62DAFD7199EB3DBABD
Authority key identifier: 1B:D3:EE:40:DA:BA:0B:97:63:5B:08:1F:90:82:5C:84:29:92:60:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD3EE40DABA0B97635B081F90825C8429926014.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/2/323830343a373933633a3a2f33322d3438203d3e20323731323933.roa
Signing time:             Fri 05 Apr 2024 04:19:19 +0000
ROA not before:           Fri 05 Apr 2024 04:14:19 +0000
ROA not after:            Fri 04 Apr 2025 04:19:19 +0000
asID:                     271293
IP address blocks:        2804:793c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            73:7a:8b:ad:2d:d5:cf:c7:46:e6:3a:62:da:fd:71:99:eb:3d:ba:bd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1BD3EE40DABA0B97635B081F90825C8429926014
        Validity
            Not Before: Apr  5 04:14:19 2024 GMT
            Not After : Apr  4 04:19:19 2025 GMT
        Subject: CN=B106022D0D72EB77338259F6A19965450248F634
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c9:b7:b1:a7:c1:c1:bd:7b:cf:50:5b:ee:fc:c2:
                    1a:30:ad:62:f3:b3:0d:93:bf:eb:dc:86:2e:cb:84:
                    ff:cc:2d:b3:3a:18:b1:ef:3d:d5:50:32:92:1a:b2:
                    76:76:62:d2:f3:ca:d8:42:ee:51:58:7b:0f:ea:62:
                    fc:37:da:a7:1f:c8:53:b7:e2:61:82:ee:15:b3:d8:
                    69:94:a8:cd:cb:e3:57:36:8b:0f:be:50:40:c9:cd:
                    42:ca:69:e9:fe:76:35:a7:18:3e:31:02:51:37:99:
                    cd:8e:e7:2a:b8:70:a8:33:3f:ac:13:58:53:f1:f9:
                    38:1b:2a:c3:b0:b1:85:1f:fd:4d:0f:a2:96:3c:9c:
                    9b:52:97:46:19:61:c9:13:0a:9f:54:2b:50:e6:6e:
                    42:56:05:22:f0:0a:5e:2a:ce:4a:1d:c9:e2:b7:c4:
                    47:2d:41:f2:3a:01:4d:3c:ea:e7:cf:12:16:46:b3:
                    1c:8b:53:67:95:52:a0:9d:59:e2:b1:af:d3:f3:32:
                    8e:56:b2:0a:a5:4b:6a:3e:1a:db:09:5e:d3:25:71:
                    7a:a3:ce:d9:67:8a:62:13:a2:1f:24:67:60:ca:b8:
                    4f:4a:33:79:de:b6:5e:9c:67:43:32:63:b8:23:77:
                    ea:6b:d3:fb:a7:7a:33:5c:2d:98:0d:7b:01:95:68:
                    90:07
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B1:06:02:2D:0D:72:EB:77:33:82:59:F6:A1:99:65:45:02:48:F6:34
            X509v3 Authority Key Identifier:
                keyid:1B:D3:EE:40:DA:BA:0B:97:63:5B:08:1F:90:82:5C:84:29:92:60:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/2/1BD3EE40DABA0B97635B081F90825C8429926014.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/1BD3EE40DABA0B97635B081F90825C8429926014.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EppTdjP3fvSCTtyJYNeuPpTaUr2g23AUHxo4w32gucX8/2/323830343a373933633a3a2f33322d3438203d3e20323731323933.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:793c::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:fa:43:85:9e:c3:c7:c1:de:48:31:57:5c:12:64:8e:02:97:
         ab:54:16:a9:f1:dc:41:20:56:f8:16:42:84:83:7d:7e:29:fe:
         1b:e8:b6:62:9b:aa:2b:e4:f6:77:7e:6e:68:d4:f4:fb:f0:6f:
         f0:6b:82:01:52:c8:12:29:1b:7b:b1:3d:33:0b:46:a7:f2:cf:
         f9:4d:d0:23:33:26:e0:03:69:17:7d:af:d2:5d:75:29:7d:24:
         b0:1e:df:bf:00:ca:3d:d4:5a:f9:6e:42:c5:af:87:51:8a:0f:
         1a:a4:60:51:e2:11:08:82:dd:b7:b1:61:63:5a:bc:a7:76:91:
         29:f0:4d:9f:35:dc:cd:38:34:89:ee:39:c9:87:f8:8a:32:67:
         99:82:36:7b:c8:95:8d:bb:5d:c2:5e:a3:11:16:ff:0c:2c:62:
         3a:d1:ba:04:cc:cf:84:e9:be:34:c0:4b:1a:c4:8d:45:67:e1:
         09:4c:08:d4:84:6c:04:be:ac:33:14:86:76:c7:1d:9f:c5:9a:
         79:71:6e:5c:2a:12:d0:e7:83:b4:d4:1f:74:01:9e:bd:85:db:
         ed:33:e6:ea:86:2d:25:65:4d:7f:d5:83:53:e8:15:ef:ee:13:
         94:c4:16:15:40:a5:27:08:f6:3f:b0:91:b2:b2:64:3e:c5:86:
         5a:32:4d:58
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:40 2024 by rpki-client on console-fra.rpki-client.org