Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/323830343a373230383a3a2f33362d3336203d3e20323730383238.roa
File:                     323830343a373230383a3a2f33362d3336203d3e20323730383238.roa (raw, json)
Hash identifier:          OC9cECR2n06WU6vkEPsZJpxu8+a+MYHKwolP0MUOjNA=
Subject key identifier:   18:4C:6C:FA:7F:C3:A1:BF:ED:00:B6:06:A3:73:60:B8:00:0C:F2:DA
Certificate issuer:       /CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
Certificate serial:       2B318F9F387A084E50D514112C56822BC2871E11
Authority key identifier: 11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/323830343a373230383a3a2f33362d3336203d3e20323730383238.roa
Signing time:             Mon 08 Apr 2024 16:54:00 +0000
ROA not before:           Mon 08 Apr 2024 16:49:00 +0000
ROA not after:            Mon 07 Apr 2025 16:54:00 +0000
asID:                     270828
IP address blocks:        2804:7208::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2b:31:8f:9f:38:7a:08:4e:50:d5:14:11:2c:56:82:2b:c2:87:1e:11
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=11A59D7FC58DD93FD839E36B666F0A5295F98E5F
        Validity
            Not Before: Apr  8 16:49:00 2024 GMT
            Not After : Apr  7 16:54:00 2025 GMT
        Subject: CN=184C6CFA7FC3A1BFED00B606A37360B8000CF2DA
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:91:38:16:b0:d5:ac:ae:3d:5c:7c:fd:33:b6:9b:
                    7f:58:a7:dc:e9:06:7f:37:05:be:cb:bf:dc:c5:2d:
                    d2:ef:de:da:60:c2:89:50:6b:63:db:72:cf:2b:7e:
                    74:37:51:9b:52:04:73:87:0d:83:26:c1:6b:71:e8:
                    41:b2:40:ce:01:9e:3b:a2:6a:7e:84:47:e7:96:9d:
                    20:69:13:62:37:1f:b4:0b:51:74:e3:4a:43:ed:d4:
                    ec:f5:56:32:82:49:fb:89:d6:02:d1:23:d4:25:cf:
                    26:f7:77:b8:26:8a:a6:4d:fe:bd:b4:b2:f6:b4:bf:
                    28:65:fe:d5:79:89:9d:1f:74:f6:ed:97:ae:d6:92:
                    f8:c3:4e:99:ee:c5:2c:a3:46:ef:5e:bd:00:24:ea:
                    8d:60:25:1a:13:25:52:99:3d:fb:98:9e:5e:8e:35:
                    9c:a7:f0:7a:30:96:29:9b:a5:5a:09:3e:64:0e:a4:
                    c8:7c:6e:93:bb:ac:a1:6c:43:59:89:20:19:7e:16:
                    79:e2:c8:be:fe:f1:c5:1d:5e:31:00:99:f6:c9:6d:
                    e4:73:38:d7:98:42:a2:d0:7e:c7:a5:fe:76:e3:86:
                    36:18:9d:98:13:47:ce:a7:15:f1:7c:0c:20:7f:63:
                    42:15:d7:59:16:9e:6c:10:85:1e:4e:0d:fa:2f:76:
                    e8:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                18:4C:6C:FA:7F:C3:A1:BF:ED:00:B6:06:A3:73:60:B8:00:0C:F2:DA
            X509v3 Authority Key Identifier:
                keyid:11:A5:9D:7F:C5:8D:D9:3F:D8:39:E3:6B:66:6F:0A:52:95:F9:8E:5F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/11A59D7FC58DD93FD839E36B666F0A5295F98E5F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/0/323830343a373230383a3a2f33362d3336203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7208::/36

    Signature Algorithm: sha256WithRSAEncryption
         38:b1:07:c5:a1:2d:fa:2b:08:b7:0c:35:3e:bc:b0:6f:f8:07:
         4b:fb:bf:31:49:a8:5c:30:af:ab:35:21:37:b1:bc:2b:95:15:
         c1:95:8c:b4:1b:a2:98:7c:bb:0a:8d:83:5e:d2:b9:b7:80:9a:
         a6:91:e2:93:db:97:80:e7:e5:37:46:7a:c3:85:4c:62:35:8b:
         84:97:8a:10:e7:f4:8d:e3:87:94:4e:c2:c0:df:df:eb:d6:70:
         ab:70:d9:52:fa:23:c2:3c:92:da:b6:9f:98:77:3b:73:fd:5a:
         5a:2d:60:0b:71:0a:09:75:68:22:66:47:fd:82:c5:13:6c:6e:
         1d:fa:f9:71:e2:f4:36:28:90:8e:9e:cc:6c:18:8e:60:cb:14:
         36:86:53:4f:2c:ab:8e:ea:1c:3a:f3:f4:83:4a:18:74:3f:ed:
         60:8a:85:45:cb:7c:33:b0:56:2e:8d:9c:61:6b:9d:3e:3e:a9:
         16:83:7c:32:57:7b:da:19:71:fa:a1:88:3a:70:d8:c1:88:4a:
         38:d9:a9:36:c2:c6:90:eb:f4:58:0d:46:e7:f9:ad:40:9b:7b:
         d8:ab:ed:06:ff:0b:c9:be:e4:44:84:da:94:25:db:6a:02:54:
         5b:6e:a8:e5:55:34:cf:88:0a:73:7d:38:cd:74:f3:91:5c:74:
         ed:d0:1d:34
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 15:28:04 2024 by rpki-client on console-fra.rpki-client.org