Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/323830343a373033303a343030303a3a2f33342d3334203d3e20323730373131.roa
File:                     323830343a373033303a343030303a3a2f33342d3334203d3e20323730373131.roa (raw, json)
Hash identifier:          2N+TEXPHT9lgpeaIj9AIGNhwM737hLBw+DygyNuN7IY=
Subject key identifier:   58:A8:CB:F0:A3:46:D7:5F:A0:7C:3A:7F:91:8E:30:EA:E5:8B:F6:75
Certificate issuer:       /CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
Certificate serial:       48A0B4C3B4BC1626CE7521883D6BED529DAA0330
Authority key identifier: E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/323830343a373033303a343030303a3a2f33342d3334203d3e20323730373131.roa
Signing time:             Thu 04 Apr 2024 12:08:35 +0000
ROA not before:           Thu 04 Apr 2024 12:03:35 +0000
ROA not after:            Thu 03 Apr 2025 12:08:35 +0000
asID:                     270711
IP address blocks:        2804:7030:4000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a0:b4:c3:b4:bc:16:26:ce:75:21:88:3d:6b:ed:52:9d:aa:03:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
        Validity
            Not Before: Apr  4 12:03:35 2024 GMT
            Not After : Apr  3 12:08:35 2025 GMT
        Subject: CN=58A8CBF0A346D75FA07C3A7F918E30EAE58BF675
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:3b:d8:5c:8a:5c:ee:7f:ea:29:46:b9:ce:d4:
                    b3:15:b1:5a:f5:89:6b:bb:9a:41:ae:ca:ce:59:15:
                    2c:d8:e3:55:44:70:24:28:2a:da:25:6a:81:1b:6c:
                    6d:8d:fb:53:44:66:6f:8b:8f:a3:da:8f:ad:de:70:
                    af:07:87:c0:3e:18:4d:a0:c9:65:0f:9e:f1:ba:d3:
                    78:eb:f0:b9:77:bb:40:9e:6e:bd:36:f3:d0:e8:fc:
                    ac:f8:43:60:a1:f9:c0:0d:f3:3c:8c:05:29:35:92:
                    8c:7c:cc:e8:0a:7a:c8:71:d8:21:50:29:60:a8:0a:
                    c0:9c:62:ba:48:05:b5:7a:55:89:8e:b8:8d:f3:8c:
                    1f:49:f4:7a:76:9a:fc:ab:85:26:e3:a6:63:95:dd:
                    0e:d6:78:43:cc:bd:6f:f5:d0:5c:30:18:f2:ed:97:
                    9d:55:22:4f:56:50:3b:79:60:74:a4:6d:41:63:65:
                    bd:4d:7d:d0:b7:5f:54:7b:d6:8f:99:fa:89:50:28:
                    9c:b6:58:9a:84:92:46:b8:fe:cb:a6:ea:00:ba:64:
                    26:01:93:57:e7:fb:6f:15:df:dc:1a:fd:be:4b:87:
                    8e:24:ed:e7:5d:35:1c:de:04:b0:6c:6c:bd:7c:3a:
                    ee:54:14:34:66:e5:b5:7a:45:94:08:d7:00:ca:37:
                    e5:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                58:A8:CB:F0:A3:46:D7:5F:A0:7C:3A:7F:91:8E:30:EA:E5:8B:F6:75
            X509v3 Authority Key Identifier:
                keyid:E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/323830343a373033303a343030303a3a2f33342d3334203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7030:4000::/34

    Signature Algorithm: sha256WithRSAEncryption
         17:c2:2f:4d:ff:bb:90:2f:12:f3:2a:b7:41:e9:b4:4e:0f:c5:
         0b:7d:de:d5:7e:2f:7a:58:f3:d4:ce:3c:ce:a0:f8:e4:3b:80:
         8b:8e:2c:85:fa:1e:da:ea:4a:30:ec:bf:68:28:99:8d:07:ec:
         e5:e0:92:c8:79:8b:df:03:b0:92:29:8a:a2:65:9f:ad:14:15:
         d9:85:0f:ff:2d:5b:20:05:77:f4:52:43:9b:40:16:83:0f:d0:
         2f:6a:0b:90:e0:52:b6:68:94:d0:8d:c9:9a:84:c9:75:b8:f0:
         52:e7:24:c6:61:a8:00:19:03:25:f5:b6:15:8d:06:90:8d:af:
         cc:48:27:0e:67:f0:25:9c:d9:81:f2:f0:47:0f:8a:2d:5f:59:
         d4:d7:a4:26:89:df:d8:9e:22:39:8f:8a:a6:52:a8:f6:33:b1:
         82:6b:12:70:df:24:06:de:50:1d:46:81:2e:35:bf:55:b6:5c:
         a6:29:30:97:07:fd:ca:97:80:33:6e:e6:41:69:34:8e:84:21:
         10:37:22:c2:f5:8a:f5:0d:fb:9f:01:94:b5:b2:1d:7a:a2:ce:
         47:48:4a:2f:9d:7a:0f:4b:cf:0b:af:ca:6f:99:df:8f:e7:3e:
         86:a1:f5:9c:4a:03:51:06:73:c1:91:ea:9d:5e:db:1c:01:16:
         57:d7:ae:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org