Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/323830343a366139633a3a2f33322d3438203d3e20323730333437.roa
File:                     323830343a366139633a3a2f33322d3438203d3e20323730333437.roa (raw, json)
Hash identifier:          2v4M4Hx1J54lo/AXWYq1ZDVTMgbIFqKUiFxwSluhW2g=
Subject key identifier:   B9:C1:1C:8D:2D:6D:E5:28:DD:40:32:E0:73:D7:DC:05:25:6D:43:38
Certificate issuer:       /CN=786B5546151D25951A0101333307AA41E9175AFB
Certificate serial:       1424017DB4ED0F7C3B736EC8321C5B837C49EF4A
Authority key identifier: 78:6B:55:46:15:1D:25:95:1A:01:01:33:33:07:AA:41:E9:17:5A:FB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/786B5546151D25951A0101333307AA41E9175AFB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/323830343a366139633a3a2f33322d3438203d3e20323730333437.roa
Signing time:             Fri 09 Feb 2024 19:56:43 +0000
ROA not before:           Fri 09 Feb 2024 19:51:43 +0000
ROA not after:            Fri 07 Feb 2025 19:56:43 +0000
asID:                     270347
IP address blocks:        2804:6a9c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:24:01:7d:b4:ed:0f:7c:3b:73:6e:c8:32:1c:5b:83:7c:49:ef:4a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=786B5546151D25951A0101333307AA41E9175AFB
        Validity
            Not Before: Feb  9 19:51:43 2024 GMT
            Not After : Feb  7 19:56:43 2025 GMT
        Subject: CN=B9C11C8D2D6DE528DD4032E073D7DC05256D4338
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:c1:67:b7:23:94:6b:1f:63:11:4b:6b:98:f6:
                    0d:41:d9:f8:d2:8e:a2:53:18:bc:c1:38:c3:7a:ac:
                    c7:c9:37:7b:9e:66:a1:a9:5d:5e:9a:e1:61:da:c8:
                    8b:a6:ad:7e:07:e8:4b:78:f6:62:da:e3:92:38:ce:
                    f6:5b:b0:2f:a1:bb:af:17:b5:b7:42:65:08:b0:2a:
                    4a:41:ea:eb:41:aa:ed:f8:38:f3:67:1b:ef:a5:88:
                    0f:40:a9:40:8a:5f:63:83:82:50:98:90:01:e7:fd:
                    00:4f:18:07:87:03:e4:c5:c5:89:7a:e0:b4:d9:e8:
                    bc:2a:40:e6:70:64:98:44:6e:76:2f:63:89:9b:3f:
                    f6:74:77:03:de:a3:13:d6:06:84:8f:8d:6b:f1:89:
                    7e:63:7b:1b:53:c0:99:1f:42:36:b3:fe:e5:4f:72:
                    af:89:1c:f6:50:fc:e1:f0:12:fb:8a:44:29:dc:c8:
                    23:cf:a4:b7:bc:26:17:90:40:d1:fb:a5:5f:a7:92:
                    f9:18:0c:3e:73:68:02:7f:82:3f:9d:dd:bf:34:e0:
                    ca:a6:ae:b9:3b:8f:f4:fa:a2:e0:f1:4e:59:6c:9c:
                    f2:ea:d6:ed:8f:f2:6d:3f:cd:3c:81:e5:5b:16:8a:
                    50:47:78:fc:11:3a:a1:7b:cd:87:54:a6:94:f1:a4:
                    a8:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B9:C1:1C:8D:2D:6D:E5:28:DD:40:32:E0:73:D7:DC:05:25:6D:43:38
            X509v3 Authority Key Identifier:
                keyid:78:6B:55:46:15:1D:25:95:1A:01:01:33:33:07:AA:41:E9:17:5A:FB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/786B5546151D25951A0101333307AA41E9175AFB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/786B5546151D25951A0101333307AA41E9175AFB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GcrryjG6SCnccvQRWUFDsvoJu5qHadLjKSx68gS2CyFK/0/323830343a366139633a3a2f33322d3438203d3e20323730333437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6a9c::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:10:5d:7a:9c:76:cf:4f:65:87:cd:16:22:3b:a0:89:02:d6:
         5c:2f:80:92:3a:99:3b:14:70:54:25:a7:73:bd:bb:2c:47:c8:
         a8:36:e1:7e:3a:1e:15:c7:51:7f:04:68:ad:c8:b4:96:e8:38:
         d8:e0:37:d5:9b:2f:c3:0e:e4:d7:80:21:e3:b8:93:c4:5b:39:
         c9:4d:5a:b0:6b:78:59:3a:10:05:0a:95:06:3a:f5:d2:95:52:
         76:91:d7:3c:f9:6f:01:39:e4:b1:be:48:71:1b:86:aa:70:4a:
         ec:8e:cc:74:34:82:10:19:a9:b9:62:49:3d:96:8d:c1:54:65:
         82:34:7b:e4:55:d3:82:fc:d0:8b:47:94:7e:63:9f:f4:a6:db:
         38:28:b8:43:48:c1:4e:2e:ce:39:d6:b4:9b:8c:ed:17:cb:06:
         78:6d:74:cf:ff:b6:0f:67:b6:95:db:65:74:37:f2:04:57:73:
         72:2c:e0:ce:59:99:c0:08:ea:cd:a5:16:3b:2f:52:20:f7:9f:
         3d:c1:2f:9a:d6:4b:1a:85:9a:99:f2:d4:e5:b6:80:5c:ac:32:
         1c:c0:c7:9a:87:95:88:11:c0:4f:b4:3d:4a:26:43:fd:bc:96:
         3a:c1:3b:08:2a:fc:54:32:ae:be:6f:1a:6e:84:82:b9:a1:10:
         ed:db:6e:92
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:54 2024 by rpki-client on console-fra.rpki-client.org