Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/323830343a373230383a3a2f33362d3336203d3e20323730383238.roa
File:                     323830343a373230383a3a2f33362d3336203d3e20323730383238.roa (raw, json)
Hash identifier:          QnkD1Z+DkbhJYBayYp6mZr56euO9WK1OSkowO4Q1Biw=
Subject key identifier:   11:9C:B2:45:AE:72:82:F6:31:30:B5:C5:F2:85:FB:9F:9E:96:D5:AC
Certificate issuer:       /CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
Certificate serial:       5C74FEE29F307B6F689D0935A3DA03C382C82577
Authority key identifier: 95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/323830343a373230383a3a2f33362d3336203d3e20323730383238.roa
Signing time:             Mon 08 Apr 2024 16:54:00 +0000
ROA not before:           Mon 08 Apr 2024 16:49:00 +0000
ROA not after:            Mon 07 Apr 2025 16:54:00 +0000
asID:                     270828
IP address blocks:        2804:7208::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5c:74:fe:e2:9f:30:7b:6f:68:9d:09:35:a3:da:03:c3:82:c8:25:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=9524EE8472B5FC7B7954627809F56CFEB45E6323
        Validity
            Not Before: Apr  8 16:49:00 2024 GMT
            Not After : Apr  7 16:54:00 2025 GMT
        Subject: CN=119CB245AE7282F63130B5C5F285FB9F9E96D5AC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c3:52:fe:82:99:ca:cf:05:34:e5:04:8c:32:f1:
                    3c:be:40:16:46:5f:4f:e2:1e:ed:7a:19:b8:72:fe:
                    a4:e9:8f:d1:c0:07:d1:9a:98:41:0d:39:57:78:44:
                    ce:7a:20:bb:5d:ad:f6:e6:2e:67:86:c7:8b:d0:07:
                    35:6c:16:4f:c7:f6:20:3c:a6:2b:d9:e9:0f:3b:0c:
                    7d:49:89:02:4f:8b:31:fe:3f:ab:fc:81:0e:bf:71:
                    c5:36:f4:1c:85:8b:08:c9:bd:6f:93:c9:02:01:cd:
                    1f:7a:b6:a2:36:27:a9:f4:bb:e7:d9:c8:76:41:77:
                    5a:b5:1d:d8:94:2a:a2:a2:ca:0f:20:0d:d9:60:20:
                    e5:73:fb:8d:ac:89:85:2d:c9:53:44:a9:94:12:a3:
                    3d:37:82:11:6d:c5:62:e4:6e:76:f8:dc:f5:3c:d7:
                    4b:19:4f:f1:74:d0:ca:76:4c:be:93:55:59:2f:5a:
                    2d:c0:f3:fb:67:c2:a7:6d:52:18:44:b4:02:0c:fd:
                    f1:b8:42:b5:74:5a:77:7d:ff:2f:b0:35:68:6f:e8:
                    82:2e:99:50:27:c3:39:41:49:f4:0a:ae:f0:4e:75:
                    b0:32:e6:b1:93:be:d9:7b:5a:6e:b8:ce:4b:9b:15:
                    fc:8d:21:f3:9a:53:72:84:db:e8:e0:db:f7:88:07:
                    44:f5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:9C:B2:45:AE:72:82:F6:31:30:B5:C5:F2:85:FB:9F:9E:96:D5:AC
            X509v3 Authority Key Identifier:
                keyid:95:24:EE:84:72:B5:FC:7B:79:54:62:78:09:F5:6C:FE:B4:5E:63:23

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/9524EE8472B5FC7B7954627809F56CFEB45E6323.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/F8VnUTWxxKNJnukZfKwz6JVWZjXyC6uRwxsmShFn6FfG/1/323830343a373230383a3a2f33362d3336203d3e20323730383238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7208::/36

    Signature Algorithm: sha256WithRSAEncryption
         22:85:29:ab:82:b4:99:0f:e0:21:2b:70:46:f9:89:cd:c6:cb:
         9b:5f:da:d5:e6:54:7b:79:33:1d:83:93:54:f9:65:87:bf:17:
         30:a5:5a:44:8b:3c:98:21:86:81:0d:53:7b:27:98:a9:1c:95:
         37:b7:83:34:d9:1c:2b:88:50:95:d9:b6:99:2e:51:15:8b:ff:
         fb:ce:84:9b:33:6a:84:8d:fb:a8:2b:fa:f8:1e:46:c2:1b:17:
         6b:d1:93:e7:df:61:fa:55:49:bd:76:3f:95:bb:22:4a:de:a0:
         63:d7:9f:7c:f0:51:ae:06:00:8f:96:d3:35:8f:7a:35:9c:87:
         7e:72:3e:a8:bd:af:bc:ee:18:dd:fa:93:9b:de:6a:b2:46:de:
         98:c4:c0:af:e7:7e:c0:e0:8d:a3:ca:9e:16:23:42:d3:55:54:
         34:8c:37:a7:be:77:a1:df:6f:0e:aa:b4:74:81:4a:27:2a:41:
         bf:2f:c1:fe:e1:33:74:6f:42:ad:c5:31:d8:f4:fe:cc:c8:bf:
         5f:2c:d0:21:43:d0:08:bf:b6:bb:ad:38:98:a5:99:02:b6:61:
         80:e2:46:e9:78:01:2b:16:8a:34:2f:b7:3f:ff:bd:45:16:24:
         44:07:1e:ec:d4:e5:f0:99:a2:cc:dc:8f:f3:58:39:f0:72:ec:
         e6:fe:10:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:01 2024 by rpki-client on console-ams.rpki-client.org