Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/323830343a313564633a3a2f33322d3438203d3e20323633343135.roa
File:                     323830343a313564633a3a2f33322d3438203d3e20323633343135.roa (raw, json)
Hash identifier:          pG3pXkrwpFVrFQgqQk0RtRu1p2HHe9Z6OTiC6HpP6/Y=
Subject key identifier:   F8:64:6D:2B:C6:3B:DF:80:EE:72:1B:BB:F2:9A:58:6B:C3:1F:FA:9D
Certificate issuer:       /CN=F4541E2A6F60F729616D190FDE1F3C42C0F65514
Certificate serial:       1AB9B738E507DE9F18DA4B37743E4C25173B9F3E
Authority key identifier: F4:54:1E:2A:6F:60:F7:29:61:6D:19:0F:DE:1F:3C:42:C0:F6:55:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4541E2A6F60F729616D190FDE1F3C42C0F65514.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/323830343a313564633a3a2f33322d3438203d3e20323633343135.roa
Signing time:             Fri 12 May 2023 13:01:18 +0000
ROA not before:           Fri 12 May 2023 12:56:18 +0000
ROA not after:            Fri 10 May 2024 13:01:18 +0000
asID:                     263415
IP address blocks:        2804:15dc::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1a:b9:b7:38:e5:07:de:9f:18:da:4b:37:74:3e:4c:25:17:3b:9f:3e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F4541E2A6F60F729616D190FDE1F3C42C0F65514
        Validity
            Not Before: May 12 12:56:18 2023 GMT
            Not After : May 10 13:01:18 2024 GMT
        Subject: CN=F8646D2BC63BDF80EE721BBBF29A586BC31FFA9D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c4:77:fd:85:20:0d:25:f0:c6:ee:99:29:c0:4d:
                    51:e3:4f:c6:bf:29:84:07:75:a9:95:4d:1e:97:44:
                    69:93:87:85:a6:8d:29:31:0c:0b:e5:95:f3:82:56:
                    4a:9a:da:cd:1d:7f:3d:d5:d3:e4:ad:41:a7:1a:f6:
                    34:a6:a8:90:20:25:5e:a6:a3:2f:55:b2:da:c3:cc:
                    97:86:a5:36:f4:39:52:ff:5b:41:ed:f6:2a:56:4f:
                    3a:a8:4b:9e:9b:a5:65:64:11:53:a7:fa:25:5d:36:
                    7e:cd:55:6e:7b:bd:87:9d:28:57:bc:41:8f:1d:ee:
                    b9:3e:45:a8:00:89:04:d9:e3:f3:0b:df:f5:94:a3:
                    ce:8a:6c:28:50:ed:95:ca:0f:aa:6e:03:c4:8b:ad:
                    99:1a:08:28:7e:11:fb:4a:d7:a3:0d:6b:5c:cc:e7:
                    f9:ad:82:35:d2:1d:53:04:96:d3:ab:00:3b:d5:ca:
                    21:27:19:9e:98:3c:58:b9:fd:bd:46:3c:93:85:68:
                    3b:4f:26:dd:42:27:bf:e6:29:ca:34:c9:88:2e:2d:
                    36:d8:6f:38:ec:27:a3:7f:2d:55:dc:b1:4b:6e:ef:
                    f0:a5:ff:e4:6f:c7:0e:11:f1:33:b9:65:88:9c:ce:
                    b8:07:16:df:f3:ff:08:7c:62:a1:b1:d9:1d:b6:29:
                    37:a1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F8:64:6D:2B:C6:3B:DF:80:EE:72:1B:BB:F2:9A:58:6B:C3:1F:FA:9D
            X509v3 Authority Key Identifier:
                keyid:F4:54:1E:2A:6F:60:F7:29:61:6D:19:0F:DE:1F:3C:42:C0:F6:55:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/F4541E2A6F60F729616D190FDE1F3C42C0F65514.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/F4541E2A6F60F729616D190FDE1F3C42C0F65514.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/EszSqXU6su93trtn878XarKoRMGuTgTSwkRxVzm8xiu2/0/323830343a313564633a3a2f33322d3438203d3e20323633343135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:15dc::/32

    Signature Algorithm: sha256WithRSAEncryption
         9d:8d:85:e0:71:be:9f:ef:91:f1:21:d9:8c:69:4e:22:41:cb:
         40:4f:fd:f5:44:38:5e:9a:33:88:5e:d2:2f:cc:8e:96:69:f1:
         84:6a:44:f0:bd:19:09:01:4f:47:92:90:a3:c3:05:46:69:92:
         4a:f8:3c:2e:c5:5a:db:f9:db:17:8a:29:1a:eb:65:f8:7a:00:
         11:93:c9:a8:b9:6d:20:d9:25:22:f6:29:41:3f:58:15:07:9f:
         75:7d:fc:fc:22:f1:00:c7:df:ad:79:10:ba:3d:a4:78:f0:b7:
         11:ad:ce:2b:bf:45:0a:cb:b0:ac:4a:f9:78:fe:02:81:b2:f9:
         0c:7e:99:9e:67:26:f9:5a:ed:ad:e2:e4:36:b4:8b:92:1f:a7:
         a1:28:5c:83:40:d9:2d:07:72:e6:e7:3c:61:5c:62:42:3c:c4:
         7a:97:34:43:ae:3a:de:08:6a:17:de:aa:e9:cd:e9:72:01:51:
         f5:f5:74:cf:53:66:b2:0a:09:70:0a:e1:e1:24:81:98:dc:c7:
         de:e4:ba:e4:64:4d:1d:be:83:4d:07:36:40:83:fd:80:24:fd:
         19:d5:d5:46:33:e6:ed:75:43:1f:24:91:98:bd:1c:83:b4:a9:
         f8:52:7d:05:aa:9f:4a:50:d2:c7:b4:83:c5:46:39:55:d1:8b:
         fe:f1:52:a9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:42:52 2024 by rpki-client on console-ams.rpki-client.org