Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/323830343a363763303a3a2f33322d3438203d3e20323639363438.roa
File:                     323830343a363763303a3a2f33322d3438203d3e20323639363438.roa (raw, json)
Hash identifier:          DELgbBNYbHuh1rvdhiqvlq3Xe9fl2tXyfyaGVuR6yOo=
Subject key identifier:   4D:98:56:92:F6:28:EA:A7:9E:41:86:BC:2D:A9:D8:C3:1A:B4:00:D5
Certificate issuer:       /CN=94479532E36E2E4A46856F1FFC4E21FEF7910DA0
Certificate serial:       411B78715A5608DEC813151ABF349F085A76CA90
Authority key identifier: 94:47:95:32:E3:6E:2E:4A:46:85:6F:1F:FC:4E:21:FE:F7:91:0D:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94479532E36E2E4A46856F1FFC4E21FEF7910DA0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/323830343a363763303a3a2f33322d3438203d3e20323639363438.roa
Signing time:             Fri 17 Nov 2023 18:15:01 +0000
ROA not before:           Fri 17 Nov 2023 18:10:01 +0000
ROA not after:            Fri 15 Nov 2024 18:15:01 +0000
asID:                     269648
IP address blocks:        2804:67c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            41:1b:78:71:5a:56:08:de:c8:13:15:1a:bf:34:9f:08:5a:76:ca:90
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=94479532E36E2E4A46856F1FFC4E21FEF7910DA0
        Validity
            Not Before: Nov 17 18:10:01 2023 GMT
            Not After : Nov 15 18:15:01 2024 GMT
        Subject: CN=4D985692F628EAA79E4186BC2DA9D8C31AB400D5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e0:28:27:f9:cf:c0:35:f6:ec:58:7e:66:31:9a:
                    93:c4:43:77:75:82:7e:ac:d8:ff:0d:43:c4:13:b4:
                    ca:56:e6:55:f6:d3:ea:f6:08:e5:dd:2b:15:d5:a1:
                    ec:3d:e5:19:af:4c:5d:c6:17:97:4a:85:c0:6b:26:
                    34:3a:9a:aa:1a:b1:03:84:ca:cf:c4:84:93:cb:13:
                    31:b5:c4:49:22:c9:1a:49:01:36:a8:2d:14:52:70:
                    f2:53:bb:9f:34:b2:7e:00:b5:c3:ae:43:10:fa:e7:
                    b9:ea:57:62:6d:1c:ce:16:8a:94:19:e5:c7:14:42:
                    7d:82:94:2c:8c:40:77:13:f2:cd:de:0b:ef:b8:e2:
                    8d:be:54:23:d9:f3:72:1c:3c:1a:58:20:6a:7a:88:
                    85:99:6b:af:c4:09:de:b0:12:90:7d:fb:f0:a2:eb:
                    73:5b:0f:51:cd:1b:cf:93:2d:81:5c:50:4e:bc:af:
                    2b:b1:f5:fe:cc:98:f9:24:df:d7:af:a8:d9:85:b3:
                    8c:98:77:e0:68:16:1f:12:92:8a:f6:f2:ca:e5:ef:
                    67:ff:4f:9c:47:66:6f:4d:48:f4:d1:4a:3f:58:c7:
                    22:49:a8:91:df:10:7a:11:03:d7:65:f6:23:51:f1:
                    ce:dc:40:dd:d6:94:8e:6d:fd:3f:86:09:f8:e2:b7:
                    38:27
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                4D:98:56:92:F6:28:EA:A7:9E:41:86:BC:2D:A9:D8:C3:1A:B4:00:D5
            X509v3 Authority Key Identifier:
                keyid:94:47:95:32:E3:6E:2E:4A:46:85:6F:1F:FC:4E:21:FE:F7:91:0D:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/94479532E36E2E4A46856F1FFC4E21FEF7910DA0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/94479532E36E2E4A46856F1FFC4E21FEF7910DA0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GNn5b7WYYBmJwYa2pDmNbAxqGhsZ5hB4ZSWt25do23Dg/0/323830343a363763303a3a2f33322d3438203d3e20323639363438.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4e:8e:3f:dc:a1:b9:3b:7d:a4:67:0f:ab:97:83:e1:e4:82:32:
         b4:bd:90:94:a3:10:b7:a9:ae:aa:5e:c8:a4:8b:f7:a5:2b:cb:
         cd:04:37:b9:d8:8d:b8:d5:23:07:a5:13:d0:8b:66:23:c9:dd:
         4b:a6:a2:f0:7a:19:14:56:4f:54:23:97:ab:d7:87:92:66:26:
         67:3e:1f:ef:93:97:cb:34:d4:9f:37:b9:16:31:8c:5c:81:95:
         45:8a:36:4a:bf:16:3f:06:74:c2:41:0b:13:8c:e2:47:ef:52:
         34:20:9c:22:dc:92:cb:5b:e8:c1:87:3b:4d:ed:80:39:10:d5:
         49:36:3c:3d:fc:e0:9a:1a:af:fd:ed:a0:bb:ea:bb:23:13:d7:
         b2:bd:54:79:32:f1:e2:a2:e5:45:6b:d1:21:28:73:8b:f2:32:
         23:52:1f:8b:86:a4:69:c2:c3:90:37:f9:c0:fb:85:8e:c2:33:
         8f:17:31:94:6f:7b:33:71:a4:c8:09:13:8f:91:04:a9:8e:21:
         95:87:13:04:7b:7d:07:f4:2b:ea:3e:14:2b:93:e1:8d:dd:6f:
         5e:ec:8c:dd:bc:18:54:6c:6d:56:2a:95:2b:dc:bb:47:9c:0f:
         f3:a4:04:80:32:03:e8:ea:ad:8d:15:4b:33:e4:80:99:28:61:
         4a:6b:99:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org