Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/1/323830343a64303a3a2f33322d3438203d3e203238313435.roa
File:                     323830343a64303a3a2f33322d3438203d3e203238313435.roa (raw, json)
Hash identifier:          z2ks9f3x58KdE8kOdVfgnlUugdcvO+a9xui+OMqOZAY=
Subject key identifier:   CE:86:A4:E2:80:1B:8A:E0:EF:62:56:18:0B:3D:1C:A3:77:AA:3E:DE
Certificate issuer:       /CN=31E1F1616E7FDE1677AA01660480B3498990ECA4
Certificate serial:       342176B262779C407975E247CD2FD80E6EB3E8A7
Authority key identifier: 31:E1:F1:61:6E:7F:DE:16:77:AA:01:66:04:80:B3:49:89:90:EC:A4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31E1F1616E7FDE1677AA01660480B3498990ECA4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/1/323830343a64303a3a2f33322d3438203d3e203238313435.roa
Signing time:             Thu 04 Apr 2024 17:54:54 +0000
ROA not before:           Thu 04 Apr 2024 17:49:54 +0000
ROA not after:            Thu 03 Apr 2025 17:54:54 +0000
asID:                     28145
IP address blocks:        2804:d0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            34:21:76:b2:62:77:9c:40:79:75:e2:47:cd:2f:d8:0e:6e:b3:e8:a7
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=31E1F1616E7FDE1677AA01660480B3498990ECA4
        Validity
            Not Before: Apr  4 17:49:54 2024 GMT
            Not After : Apr  3 17:54:54 2025 GMT
        Subject: CN=CE86A4E2801B8AE0EF6256180B3D1CA377AA3EDE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e1:db:00:d4:20:a8:85:cf:28:d3:69:6a:6c:81:
                    42:27:65:d1:1a:24:fb:27:3f:26:99:31:2c:09:76:
                    16:0c:e7:b1:d6:1b:6d:f6:d3:7d:fd:a2:8c:ee:b3:
                    22:9a:a1:68:fa:49:99:9b:23:a5:a2:c6:64:e5:df:
                    4c:6d:99:f6:64:8f:d0:23:da:9d:76:61:ef:89:ff:
                    a0:75:69:51:a1:af:44:3e:11:db:36:9f:f4:e1:99:
                    e4:8a:f8:b4:f8:c2:73:f3:b7:eb:cd:d8:bd:1d:d0:
                    86:eb:12:68:a1:5c:46:72:9e:d3:ae:12:d8:e6:d1:
                    89:4c:93:fb:90:c7:1b:86:44:2f:04:a9:9e:73:81:
                    a5:94:4d:6f:0f:e6:1e:33:40:1e:a5:de:63:98:c6:
                    a7:1d:e6:56:2b:19:0c:66:f9:7c:ac:ef:55:ee:26:
                    a2:2b:53:f7:2a:b5:d5:19:24:ad:f5:c6:01:db:b3:
                    89:02:c2:40:06:1f:f0:b1:cf:2a:39:93:71:a7:2e:
                    df:e9:e4:16:ef:ec:30:dc:8d:b3:04:57:7a:cb:be:
                    6f:59:8a:b5:81:12:95:e0:df:8e:53:cd:bd:ac:eb:
                    12:f3:ae:fb:32:30:52:0f:70:52:ba:b6:ad:fe:71:
                    ea:6a:98:fa:b1:43:51:62:30:25:9c:e2:60:b8:29:
                    9f:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CE:86:A4:E2:80:1B:8A:E0:EF:62:56:18:0B:3D:1C:A3:77:AA:3E:DE
            X509v3 Authority Key Identifier:
                keyid:31:E1:F1:61:6E:7F:DE:16:77:AA:01:66:04:80:B3:49:89:90:EC:A4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/1/31E1F1616E7FDE1677AA01660480B3498990ECA4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/31E1F1616E7FDE1677AA01660480B3498990ECA4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GWFhm7hMijuz3DZkQ2Rt45fmenCX424bj9nNPZ2wL1EU/1/323830343a64303a3a2f33322d3438203d3e203238313435.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:d0::/32

    Signature Algorithm: sha256WithRSAEncryption
         11:6f:3c:d0:89:06:45:b0:13:60:38:c4:02:2a:5d:47:1e:49:
         68:3c:71:9a:5d:27:97:b7:1c:5a:f4:d3:31:d1:f9:82:36:3e:
         37:16:59:d3:c4:d1:3f:6e:72:4d:52:eb:dc:26:cd:f2:fc:70:
         76:95:f1:6c:d6:85:04:e5:b4:03:42:77:9e:78:3c:56:40:03:
         32:c8:1a:1a:29:a5:b4:9f:db:7d:c8:be:04:c8:86:84:61:5a:
         6b:32:6d:4d:38:14:70:a4:a2:4a:b8:00:aa:75:2f:b5:0e:05:
         b9:d5:39:e3:e0:78:f3:39:92:b1:59:8b:fe:d4:81:47:a5:83:
         36:45:92:19:eb:e3:04:0b:d5:b6:ef:3d:fa:10:ee:9e:66:a7:
         79:a5:1f:c4:50:5b:51:c9:76:a0:45:60:00:12:60:5d:09:14:
         1d:f1:e9:b4:9f:bc:6e:25:05:83:fa:25:bc:42:6e:8c:2a:36:
         28:9e:10:e8:25:67:df:67:1e:f2:da:52:86:eb:70:45:c5:46:
         81:32:43:0c:5c:34:30:ef:80:32:6b:4d:71:02:a5:a5:f7:b1:
         7f:e8:16:15:ba:ca:80:71:47:da:60:3e:84:b8:3e:39:d5:56:
         8d:44:3d:7d:fe:0d:10:32:c4:9b:45:e9:33:87:e4:4d:31:c8:
         c1:91:67:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:25 2024 by rpki-client on console-ams.rpki-client.org