Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/323830343a373033303a3a2f33322d3332203d3e20323730373131.roa
File:                     323830343a373033303a3a2f33322d3332203d3e20323730373131.roa (raw, json)
Hash identifier:          ouhlVXIWpo/cksEYwBbEZLYgSGnEZkUClf9008FLMSA=
Subject key identifier:   52:50:18:DB:19:6B:BD:A1:C9:0F:58:B5:42:A1:A2:92:07:A2:B3:70
Certificate issuer:       /CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
Certificate serial:       09645F93073101F7567E7C17CA4E4599284708EF
Authority key identifier: E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/323830343a373033303a3a2f33322d3332203d3e20323730373131.roa
Signing time:             Thu 04 Apr 2024 12:08:33 +0000
ROA not before:           Thu 04 Apr 2024 12:03:33 +0000
ROA not after:            Thu 03 Apr 2025 12:08:33 +0000
asID:                     270711
IP address blocks:        2804:7030::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            09:64:5f:93:07:31:01:f7:56:7e:7c:17:ca:4e:45:99:28:47:08:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E923DDB3DD9712C542BA91C049C0F7EDADD5B331
        Validity
            Not Before: Apr  4 12:03:33 2024 GMT
            Not After : Apr  3 12:08:33 2025 GMT
        Subject: CN=525018DB196BBDA1C90F58B542A1A29207A2B370
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:4a:c4:d1:74:fd:ae:9a:a9:f2:04:35:00:e2:
                    ec:3a:27:f1:69:01:90:d8:56:21:a0:b4:3a:65:88:
                    36:97:a9:89:b5:b2:33:11:2e:57:fb:24:33:f8:50:
                    e5:65:5e:90:89:d0:85:1f:01:ea:7f:be:a5:b2:4b:
                    c0:d2:ef:52:24:72:ba:55:7c:cd:10:7c:94:79:7e:
                    e2:96:be:c7:5c:af:fe:7b:24:a8:b1:a8:c2:72:75:
                    88:89:cf:76:df:a0:b6:a7:4d:9e:b8:79:d6:26:9c:
                    03:53:8d:25:35:75:47:78:ca:0d:df:ff:23:71:2d:
                    13:d2:1a:cc:bd:86:23:c5:51:9a:80:83:00:03:dc:
                    e9:51:52:58:24:ca:7b:bc:b4:f0:40:6b:6d:a9:f4:
                    2e:e2:14:ae:e7:45:00:9d:49:64:0f:6b:34:62:a8:
                    4e:8b:64:90:e1:6b:ff:3b:fd:6f:5f:74:0f:c4:8e:
                    7a:ba:dc:b9:57:f4:83:74:fa:86:0c:32:6f:26:b4:
                    83:07:ba:0c:8a:a5:21:c0:3e:ee:03:1d:79:d0:5b:
                    31:f4:6e:b5:c8:13:6b:6e:3e:1e:a9:65:4b:aa:8e:
                    fa:a8:80:54:89:1c:f1:b6:28:05:ef:1d:02:e8:53:
                    80:42:30:a0:fe:40:40:f3:7f:b5:ec:79:01:0f:7d:
                    60:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:50:18:DB:19:6B:BD:A1:C9:0F:58:B5:42:A1:A2:92:07:A2:B3:70
            X509v3 Authority Key Identifier:
                keyid:E9:23:DD:B3:DD:97:12:C5:42:BA:91:C0:49:C0:F7:ED:AD:D5:B3:31

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/E923DDB3DD9712C542BA91C049C0F7EDADD5B331.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F4xtWxcF8soWuL2xRia3WY2fakP9RACnRSGufumDRWfi/1/323830343a373033303a3a2f33322d3332203d3e20323730373131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7030::/32

    Signature Algorithm: sha256WithRSAEncryption
         83:23:b6:38:3e:5b:eb:71:df:a7:7f:2f:df:5a:cd:ce:c6:f3:
         39:9c:2c:e2:9c:89:3e:86:2a:16:dc:c7:17:df:a8:b8:7e:20:
         ea:ae:01:d8:7e:c7:1b:81:3b:cf:2c:2f:6c:02:e7:24:41:a5:
         23:a7:79:2a:6d:21:73:58:e3:a4:bc:a3:20:24:b3:10:94:80:
         36:33:71:7c:4e:0b:79:b3:5c:4a:30:86:9d:58:36:4f:c8:b6:
         1b:05:cb:c0:c0:33:1d:00:1f:8c:27:c1:8c:de:08:ed:44:79:
         90:e8:1f:7a:95:0e:17:32:0b:5d:2f:a8:d0:63:2b:c5:c9:d3:
         fa:00:7b:12:da:5d:8c:90:41:3d:a0:ba:5f:b0:3e:1d:34:cb:
         55:04:32:8d:20:96:83:44:81:e0:87:b8:2a:00:9d:17:b4:bf:
         9d:40:90:12:36:58:23:18:4f:6a:20:e4:89:4f:64:e6:07:e9:
         03:dc:1e:a1:db:58:92:35:e2:84:d6:cb:9e:5c:52:1f:a5:64:
         2d:72:dc:0b:05:ad:9b:10:ea:7d:ae:42:8e:ee:e9:ef:29:95:
         d7:31:30:41:3f:67:1d:1d:65:ed:86:ff:98:55:2d:5d:13:b7:
         ce:f3:4a:ea:16:03:b7:37:1c:41:a8:28:40:2d:8a:56:3c:d1:
         45:76:e7:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:43 2024 by rpki-client on console-fra.rpki-client.org