Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/323830343a323431343a3a2f33322d3332203d3e20323634323030.roa
File:                     323830343a323431343a3a2f33322d3332203d3e20323634323030.roa (raw, json)
Hash identifier:          Pv9FSGOdzq41a3C4a1wBB8ScZdOcwijJ+4tKD5XRKwU=
Subject key identifier:   8B:E1:C0:0F:DA:F7:B6:9B:52:68:1E:AD:7E:D3:F5:95:CB:56:CF:8D
Certificate issuer:       /CN=033609031B0420779371AF91BEBAD9539C676491
Certificate serial:       12E5AF77DFFAE730ED7673A735AE548D16F8317E
Authority key identifier: 03:36:09:03:1B:04:20:77:93:71:AF:91:BE:BA:D9:53:9C:67:64:91
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/033609031B0420779371AF91BEBAD9539C676491.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/323830343a323431343a3a2f33322d3332203d3e20323634323030.roa
Signing time:             Fri 12 Jan 2024 01:55:44 +0000
ROA not before:           Fri 12 Jan 2024 01:50:44 +0000
ROA not after:            Fri 10 Jan 2025 01:55:44 +0000
asID:                     264200
IP address blocks:        2804:2414::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            12:e5:af:77:df:fa:e7:30:ed:76:73:a7:35:ae:54:8d:16:f8:31:7e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=033609031B0420779371AF91BEBAD9539C676491
        Validity
            Not Before: Jan 12 01:50:44 2024 GMT
            Not After : Jan 10 01:55:44 2025 GMT
        Subject: CN=8BE1C00FDAF7B69B52681EAD7ED3F595CB56CF8D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b0:6b:7a:00:9a:27:c9:21:38:ac:b8:18:2d:d6:
                    51:37:4c:ad:c1:59:5c:5a:65:c1:25:61:f8:b4:13:
                    42:55:fb:1d:90:c2:c9:1e:94:1c:68:5d:9e:42:8c:
                    de:2f:a7:68:ed:fa:13:49:49:45:63:97:26:b7:93:
                    49:ac:cb:d4:db:72:21:d2:fb:5c:a1:c6:d4:79:7b:
                    8a:31:c7:c9:7c:42:0b:c5:46:22:88:99:01:ea:f1:
                    5c:c7:2c:5a:b0:ff:d9:1e:9d:10:2e:92:7a:f2:de:
                    23:cc:89:63:5c:82:d0:5a:92:c6:cf:19:53:53:5b:
                    00:0d:71:30:26:a8:d6:df:93:de:6b:94:ac:b5:f7:
                    d8:2a:e3:f0:95:3f:c0:bb:ff:51:80:97:0d:31:0c:
                    5f:a7:cc:13:b7:0a:21:62:8b:3f:69:cc:f3:bc:ae:
                    19:6b:db:91:eb:96:f9:53:03:69:28:df:d0:22:13:
                    68:22:7e:2d:69:37:8f:0e:55:6e:d8:b9:3f:ef:51:
                    d1:34:b3:70:c5:95:de:6b:14:24:a1:44:28:e9:d1:
                    82:44:fb:c2:08:93:d8:34:b3:c2:c4:0c:a2:2c:c9:
                    36:22:df:0f:c1:ad:e7:5c:6c:a6:9f:e7:c2:80:0d:
                    3e:36:b0:a3:bd:f1:55:33:f5:72:1c:c5:a9:6a:bc:
                    9b:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8B:E1:C0:0F:DA:F7:B6:9B:52:68:1E:AD:7E:D3:F5:95:CB:56:CF:8D
            X509v3 Authority Key Identifier:
                keyid:03:36:09:03:1B:04:20:77:93:71:AF:91:BE:BA:D9:53:9C:67:64:91

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/033609031B0420779371AF91BEBAD9539C676491.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/033609031B0420779371AF91BEBAD9539C676491.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GPMNTSaYGYiszUjrWPofxes87Fqbce6XK4EdaaHHsNJa/0/323830343a323431343a3a2f33322d3332203d3e20323634323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2414::/32

    Signature Algorithm: sha256WithRSAEncryption
         62:b7:7a:fd:78:f7:7e:8c:aa:3f:ca:60:da:89:e2:cd:86:90:
         e2:0b:c0:e6:eb:c1:95:fc:54:b4:0e:70:99:48:6a:fb:39:3f:
         5f:2f:e9:7f:99:69:55:a8:8c:2f:2f:50:68:9b:7c:32:6f:67:
         e2:61:44:fc:19:a1:aa:4a:c3:b6:97:e2:fa:04:07:8a:d3:b3:
         e4:3d:ee:7c:eb:f3:12:30:7d:60:d3:c4:35:a9:cd:91:c8:ff:
         71:63:bc:7c:47:87:44:49:e6:75:19:f3:df:76:e1:b2:bd:b4:
         1b:76:cc:2a:09:f7:ad:af:86:88:57:9a:88:29:45:37:c3:77:
         7f:31:ca:b6:0c:78:da:a2:c8:dd:06:d3:3c:bd:c4:a5:2d:2f:
         e3:aa:50:68:2e:0b:c9:bf:21:57:46:fb:86:eb:38:cb:d8:78:
         e2:0f:c4:80:d8:5d:9a:09:f8:e4:56:b1:df:f1:e5:8e:11:ab:
         89:1a:67:8c:ff:21:0f:1b:a8:8b:17:1b:14:e9:94:88:a0:cc:
         a1:97:9e:b0:00:49:e5:43:bf:2f:af:04:ab:f8:1e:50:7c:cb:
         5c:a7:c0:81:4e:ab:bd:b5:c8:54:b5:4b:93:e7:b1:26:41:78:
         67:e5:1d:a2:c0:ab:c0:b2:4e:0b:5e:88:c0:08:c0:10:15:92:
         53:89:53:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:52 2024 by rpki-client on console-fra.rpki-client.org