Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d3332203d3e20323635323639.roa
File:                     323830343a326434303a3a2f33322d3332203d3e20323635323639.roa (raw, json)
Hash identifier:          S0fyWKf7U3no27tgmgC26QzmlUPHfkFdAE7Xm5t9D4k=
Subject key identifier:   43:89:64:6E:2D:79:7A:FD:51:F8:B3:27:AA:4F:7B:0E:36:01:4A:01
Certificate issuer:       /CN=C0E7F56E436009B8C2D302AFAC79978BD913BCD2
Certificate serial:       2D5FCDD6C5B1ADF78DF2A24C2EA60272D34EB71C
Authority key identifier: C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d3332203d3e20323635323639.roa
Signing time:             Thu 09 May 2024 19:33:09 +0000
ROA not before:           Thu 09 May 2024 19:28:09 +0000
ROA not after:            Thu 08 May 2025 19:33:09 +0000
asID:                     265269
IP address blocks:        2804:2d40::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            2d:5f:cd:d6:c5:b1:ad:f7:8d:f2:a2:4c:2e:a6:02:72:d3:4e:b7:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C0E7F56E436009B8C2D302AFAC79978BD913BCD2
        Validity
            Not Before: May  9 19:28:09 2024 GMT
            Not After : May  8 19:33:09 2025 GMT
        Subject: CN=4389646E2D797AFD51F8B327AA4F7B0E36014A01
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bd:05:93:82:c1:e3:c8:bb:3d:1c:35:16:fa:07:
                    58:07:4c:4f:7f:a1:a5:50:6f:ad:2c:f3:39:76:71:
                    46:0d:ed:de:b2:34:ac:55:49:34:00:bf:ed:0d:18:
                    3e:9d:e2:58:cf:78:22:07:a1:77:20:2f:d6:62:34:
                    07:f4:dc:40:8c:99:b7:24:a5:43:cb:83:36:2f:60:
                    de:65:f1:c4:9e:b3:7e:9b:f5:81:29:7a:f0:b5:ee:
                    a4:09:12:95:1b:e6:a4:3c:96:7f:64:33:6a:1d:8c:
                    31:72:cc:d6:fb:87:e4:2f:1c:39:64:b6:95:0b:00:
                    48:8e:4c:2b:56:de:35:f0:b5:f3:e2:08:2b:dd:8d:
                    0e:53:92:e6:16:2c:d4:ed:6f:18:4c:ac:90:a2:ec:
                    c8:e7:79:c9:8f:dc:a1:dd:69:02:58:7b:5c:f9:3e:
                    a9:3e:ef:54:a2:b2:67:70:e4:01:f0:f1:23:f8:02:
                    8a:ff:04:f4:4d:61:8c:23:13:7a:1f:6b:f6:6f:fa:
                    b5:6e:00:79:9d:09:83:ec:3e:63:9b:ee:c1:14:d3:
                    5f:22:ee:26:8b:4d:47:c7:61:14:d1:e5:7f:15:86:
                    a4:df:b6:97:26:33:f5:4c:46:a9:41:91:38:d5:41:
                    ec:30:0d:b0:76:0c:57:71:18:8f:72:e1:e1:53:4c:
                    12:1f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                43:89:64:6E:2D:79:7A:FD:51:F8:B3:27:AA:4F:7B:0E:36:01:4A:01
            X509v3 Authority Key Identifier:
                keyid:C0:E7:F5:6E:43:60:09:B8:C2:D3:02:AF:AC:79:97:8B:D9:13:BC:D2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/C0E7F56E436009B8C2D302AFAC79978BD913BCD2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GrnHqfqkxJWMnb1eai4aqkrGs5kKSDijfapnJMu2XoLw/0/323830343a326434303a3a2f33322d3332203d3e20323635323639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2d40::/32

    Signature Algorithm: sha256WithRSAEncryption
         be:98:ab:95:ba:b7:46:47:67:02:c1:5b:d7:c3:de:d4:6c:3b:
         eb:01:f0:c2:79:5f:71:89:41:1c:1c:38:1e:69:ba:ab:30:cc:
         ce:20:f0:2a:41:c6:38:b6:08:66:55:ce:85:46:7c:b4:2b:4b:
         88:ae:b9:e1:54:2a:06:22:bd:e1:31:00:e9:db:c1:97:e2:c1:
         d1:f7:31:d3:0a:67:da:a5:b0:27:f7:75:f7:62:01:7e:03:92:
         7d:6e:bd:c3:d0:cd:58:1c:b1:d5:4c:ed:40:fd:70:48:ce:d7:
         5f:90:48:1e:05:1f:b3:dd:da:44:f3:e6:53:ee:0e:ee:70:6f:
         33:a2:fa:2d:fc:21:c4:bf:21:25:fa:02:61:da:da:05:4c:1b:
         4b:74:61:96:8f:9a:b4:25:d7:ed:0a:c4:5b:57:5e:ff:1d:60:
         0c:4e:6d:3d:9f:bd:41:a2:18:46:0c:4f:38:9e:d7:e3:10:1a:
         d0:f2:aa:28:6f:0d:6d:7f:0a:62:99:49:cd:2b:eb:d3:b6:33:
         1c:92:c0:5c:1a:a4:0b:9b:24:ff:7c:c0:95:34:81:a0:10:9b:
         ea:38:7d:5a:41:cb:d7:ad:0a:4e:aa:f0:4a:60:a1:ae:e9:d5:
         45:5f:5e:bf:8b:73:b8:df:1f:06:fc:b9:23:6e:ab:55:ef:8c:
         89:75:4f:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org