Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/323830343a3231383a3a2f33322d313238203d3e203237373135.roa
File:                     323830343a3231383a3a2f33322d313238203d3e203237373135.roa (raw, json)
Hash identifier:          XPYyr6BJ+tFhBNqKHTDVimllyNtOS8cJQctcxRULo0Q=
Subject key identifier:   A4:90:47:A7:A7:53:16:35:08:62:35:CF:AD:54:7B:2B:FA:6F:F2:1D
Certificate issuer:       /CN=E18B3E88FEB8431A1C130BD5E2B9012A3C41145E
Certificate serial:       503C9FD2E6BFFA7C1358DE8E9697999DDB2B3552
Authority key identifier: E1:8B:3E:88:FE:B8:43:1A:1C:13:0B:D5:E2:B9:01:2A:3C:41:14:5E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/323830343a3231383a3a2f33322d313238203d3e203237373135.roa
Signing time:             Fri 01 Mar 2024 20:13:04 +0000
ROA not before:           Fri 01 Mar 2024 20:08:04 +0000
ROA not after:            Fri 28 Feb 2025 20:13:04 +0000
asID:                     27715
IP address blocks:        2804:218::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            50:3c:9f:d2:e6:bf:fa:7c:13:58:de:8e:96:97:99:9d:db:2b:35:52
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=E18B3E88FEB8431A1C130BD5E2B9012A3C41145E
        Validity
            Not Before: Mar  1 20:08:04 2024 GMT
            Not After : Feb 28 20:13:04 2025 GMT
        Subject: CN=A49047A7A7531635086235CFAD547B2BFA6FF21D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:93:86:57:ba:f5:66:6b:7f:cf:aa:96:c4:23:
                    f1:9e:92:f9:3f:a3:32:40:c1:36:b4:13:8d:37:6e:
                    7e:b9:46:66:bd:1e:27:86:30:ba:05:d7:ba:35:c5:
                    ac:b0:e8:b5:a8:36:e1:15:bb:0d:67:bb:ba:67:46:
                    d3:c2:58:c1:4e:d5:79:72:cd:f3:4d:fe:9b:16:5b:
                    a6:84:a1:f9:3c:c9:c1:78:5f:78:09:2e:47:53:1b:
                    17:fd:09:c4:d2:b4:38:ef:e1:cd:5e:81:75:1c:10:
                    93:8f:91:96:e4:72:ca:b6:00:ca:91:7e:59:b4:4b:
                    12:0a:fa:54:10:b4:67:06:f4:c2:16:d2:46:8d:f3:
                    58:49:ae:41:f6:6c:29:17:18:51:3a:5c:9b:da:34:
                    5b:b3:7b:f8:35:09:5d:52:ec:22:67:4c:c8:98:b9:
                    37:e3:02:22:3b:b3:9d:e5:c7:03:79:6c:5b:57:3d:
                    c3:ee:75:a8:17:da:4e:6a:e4:1a:93:eb:d6:09:92:
                    87:46:6b:20:68:48:db:8a:da:bb:f4:e6:77:9a:23:
                    db:06:2e:1f:6a:1b:e5:08:7f:dc:70:9c:91:ca:21:
                    f1:d8:58:7c:69:2f:10:46:cf:f7:e2:87:63:d9:a8:
                    c6:ee:f0:88:e8:c0:fd:ad:e9:06:e4:10:ef:1c:f8:
                    31:91
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A4:90:47:A7:A7:53:16:35:08:62:35:CF:AD:54:7B:2B:FA:6F:F2:1D
            X509v3 Authority Key Identifier:
                keyid:E1:8B:3E:88:FE:B8:43:1A:1C:13:0B:D5:E2:B9:01:2A:3C:41:14:5E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/E18B3E88FEB8431A1C130BD5E2B9012A3C41145E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GC97oELCzW28EyugJaAVHUqhNeoN1YmvMQyHTM3Da7Qg/0/323830343a3231383a3a2f33322d313238203d3e203237373135.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:218::/32

    Signature Algorithm: sha256WithRSAEncryption
         3d:8e:6a:9e:0d:09:47:5a:8b:d6:10:1c:de:0f:9a:ef:41:91:
         01:f3:5b:ea:67:7a:88:15:0f:92:59:5d:dd:f1:72:10:2b:ce:
         fb:49:02:5f:15:fd:3b:19:2c:a4:23:70:19:97:a5:c5:33:6c:
         1c:62:ea:46:e2:c5:0e:6a:27:7d:1f:43:3a:e3:e2:9a:cf:73:
         2d:e3:1f:b9:ee:18:21:cf:5b:3a:c8:f3:71:5f:51:68:06:f3:
         96:ab:32:c1:1f:3f:84:24:1f:9d:ea:07:8f:cf:3c:a5:77:3b:
         eb:eb:ed:53:76:ab:3e:d8:59:65:9e:0e:28:b4:4d:62:05:0b:
         eb:b5:93:5f:6a:ea:a9:c8:a5:60:16:39:6f:f3:b8:dd:3b:b8:
         6d:05:9b:f0:a9:a0:54:3d:2b:7b:bb:7b:f4:d8:ef:4b:59:80:
         c5:7f:c6:0f:0c:f2:3d:f2:84:49:60:55:2e:9e:dc:a3:8b:8d:
         ac:c0:ab:2d:c4:bb:6f:af:e1:c0:09:bf:e3:55:f3:b9:24:54:
         c8:3e:56:23:0b:0d:c4:9e:ae:35:79:ca:cd:30:09:09:a8:6f:
         f6:29:27:e7:0f:23:c7:07:6f:3e:27:1f:80:13:de:bd:57:a9:
         78:cb:a8:2a:e2:04:f4:43:6a:1b:ec:46:3d:99:c3:e1:c6:0c:
         d8:e5:06:cf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:49 2024 by rpki-client on console-fra.rpki-client.org