Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/0/323830343a366162343a3a2f33322d313238203d3e20323730333534.roa
File:                     323830343a366162343a3a2f33322d313238203d3e20323730333534.roa (raw, json)
Hash identifier:          PimxtXP55zZzmvA4KfVfXGFbFcsO6MLm2jqpDfqULbc=
Subject key identifier:   3D:DC:FA:A0:CC:EF:E4:C6:1E:1B:CA:D3:3C:05:00:7A:56:86:42:95
Certificate issuer:       /CN=38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5
Certificate serial:       4316538EE1E7DBC91F50922CB9F5644E74ACEB57
Authority key identifier: 38:AE:3F:6E:8F:9B:50:02:E3:5A:BB:64:2B:85:3C:AF:21:FD:53:D5
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/0/323830343a366162343a3a2f33322d313238203d3e20323730333534.roa
Signing time:             Tue 09 Apr 2024 13:08:21 +0000
ROA not before:           Tue 09 Apr 2024 13:03:21 +0000
ROA not after:            Tue 08 Apr 2025 13:08:21 +0000
asID:                     270354
IP address blocks:        2804:6ab4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            43:16:53:8e:e1:e7:db:c9:1f:50:92:2c:b9:f5:64:4e:74:ac:eb:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5
        Validity
            Not Before: Apr  9 13:03:21 2024 GMT
            Not After : Apr  8 13:08:21 2025 GMT
        Subject: CN=3DDCFAA0CCEFE4C61E1BCAD33C05007A56864295
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e7:b5:93:65:48:ac:c5:22:f9:05:50:2c:01:ad:
                    97:e4:84:e9:c8:73:87:07:72:99:45:67:ef:b4:36:
                    5c:35:7e:c6:f0:79:53:27:bb:19:7a:de:29:1e:4d:
                    4c:45:08:8b:12:e0:bc:34:8d:21:1b:ea:7e:ec:df:
                    2b:8b:80:14:8b:80:4a:5f:26:ef:30:c8:26:8e:e6:
                    45:38:c5:78:3b:ed:fc:3b:24:c8:f5:e9:28:2b:4b:
                    c4:53:40:90:29:e5:b9:b3:72:05:22:b1:3d:00:22:
                    28:08:17:69:d1:eb:61:1f:85:40:95:d1:5e:d5:26:
                    b6:9d:3c:a1:21:ba:15:ba:ce:a6:3f:12:f2:61:76:
                    b1:bc:09:50:5d:c3:c8:67:ac:0f:74:82:e2:ef:97:
                    c2:98:55:e8:da:b7:b7:c7:37:4b:30:27:71:3b:cc:
                    81:40:b8:50:31:85:13:ad:a3:2b:22:f9:85:69:a2:
                    c8:29:dc:fb:d2:73:61:7a:0f:6a:ae:1d:5b:15:2a:
                    de:5c:97:f9:42:ae:ab:ca:71:7d:2e:8a:b1:04:f2:
                    56:92:2b:2f:4d:ae:5a:7b:fb:bd:ae:b2:7f:3d:fc:
                    e5:a2:76:19:11:cd:7d:5b:28:3f:27:66:d6:31:bd:
                    e4:2b:94:cb:b9:1c:48:74:ff:39:df:c9:3a:59:18:
                    62:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3D:DC:FA:A0:CC:EF:E4:C6:1E:1B:CA:D3:3C:05:00:7A:56:86:42:95
            X509v3 Authority Key Identifier:
                keyid:38:AE:3F:6E:8F:9B:50:02:E3:5A:BB:64:2B:85:3C:AF:21:FD:53:D5

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/0/38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/38AE3F6E8F9B5002E35ABB642B853CAF21FD53D5.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GnSx9siF1X4RztCY1H5YjGHCYEm8AtiXM56u8itbab8J/0/323830343a366162343a3a2f33322d313238203d3e20323730333534.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6ab4::/32

    Signature Algorithm: sha256WithRSAEncryption
         a4:47:51:3d:60:06:d6:44:2c:5f:c8:01:ff:8b:f1:ce:76:16:
         d6:c6:7f:1b:06:57:64:03:f9:f8:5a:98:b4:ba:da:24:db:8a:
         dc:30:1d:69:58:ab:72:f3:cd:8e:64:aa:5f:9e:f8:e1:d3:1a:
         37:d0:75:a1:95:c1:f2:6e:70:44:1a:17:75:af:4c:bc:77:b4:
         30:66:ff:65:0d:a8:42:01:52:e5:19:61:f5:90:cb:8b:74:cd:
         49:89:73:f9:99:e9:3b:27:5a:9e:5a:10:e4:3b:d5:09:1a:e4:
         53:3f:00:cf:a1:6c:a3:e8:94:ea:22:6e:c4:05:bb:9d:6c:65:
         c6:a7:c9:5e:cb:44:b5:3f:24:c2:c6:c3:d7:67:26:df:b3:1d:
         45:d9:b2:58:c6:2d:20:d4:8e:40:8b:bf:1b:8f:3e:53:c2:fd:
         a6:e3:f7:bd:9f:d4:50:46:da:bd:f0:de:75:bf:e1:b9:36:3d:
         c0:16:8c:39:cc:0c:a2:64:6a:41:13:e6:0e:1d:00:bf:a9:83:
         31:38:5a:ae:97:2f:6c:0a:c8:50:ce:30:ef:59:ee:f5:83:cb:
         fc:f8:5e:3a:bb:7c:43:80:73:23:9a:e5:bf:de:f6:e3:9e:00:
         85:68:ee:96:19:c6:94:1a:97:0c:25:aa:ef:29:89:e6:6b:30:
         a5:84:d5:51
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org