Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/323830343a313434383a3a2f33322d3334203d3e20323633333234.roa
File:                     323830343a313434383a3a2f33322d3334203d3e20323633333234.roa (raw, json)
Hash identifier:          koOf3Kgqw7rLfsyg9wYTcqC/RQFgSv3k/FOLmrE51/s=
Subject key identifier:   DD:09:A0:2A:24:88:FA:4F:D2:65:17:B1:08:43:9E:98:4E:AA:DF:77
Certificate issuer:       /CN=A14CE50B38F120E4E5858C18F51C0958AE6D29CA
Certificate serial:       65FAB701248DFBE74ABAD34A2F9A6CF8BF97ED30
Authority key identifier: A1:4C:E5:0B:38:F1:20:E4:E5:85:8C:18:F5:1C:09:58:AE:6D:29:CA
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14CE50B38F120E4E5858C18F51C0958AE6D29CA.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/323830343a313434383a3a2f33322d3334203d3e20323633333234.roa
Signing time:             Thu 14 Mar 2024 18:56:04 +0000
ROA not before:           Thu 14 Mar 2024 18:51:04 +0000
ROA not after:            Thu 13 Mar 2025 18:56:04 +0000
asID:                     263324
IP address blocks:        2804:1448::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            65:fa:b7:01:24:8d:fb:e7:4a:ba:d3:4a:2f:9a:6c:f8:bf:97:ed:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14CE50B38F120E4E5858C18F51C0958AE6D29CA
        Validity
            Not Before: Mar 14 18:51:04 2024 GMT
            Not After : Mar 13 18:56:04 2025 GMT
        Subject: CN=DD09A02A2488FA4FD26517B108439E984EAADF77
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:ae:5c:d5:5f:ce:53:f3:a6:f1:16:42:85:73:
                    fa:6a:35:7c:f7:0c:bd:1a:9b:cd:50:f8:fd:fe:21:
                    5f:40:12:d0:67:7b:a7:81:21:c7:b7:16:b2:df:1a:
                    f4:fb:fa:17:ee:36:24:76:a2:ef:de:eb:66:e6:4e:
                    d6:4e:3f:c4:c7:9a:ea:0e:01:d6:e1:5d:bf:fd:63:
                    7f:bb:59:c8:71:2e:02:9a:c5:fa:3b:9a:c5:c8:c6:
                    54:10:96:0c:bd:a2:42:b3:1f:e6:09:f1:0d:2b:f3:
                    30:2e:04:b1:58:ca:d4:57:b1:e1:61:9a:19:e8:d0:
                    49:0d:58:4f:4b:e2:20:50:4d:47:fa:81:5e:54:a0:
                    2b:87:75:d1:e9:12:ff:71:92:9c:66:82:e9:12:28:
                    35:bd:9f:90:3b:f6:bf:c4:fb:43:66:9f:98:08:10:
                    97:86:f3:d4:35:e7:a4:3f:d2:89:18:b3:ad:7f:ad:
                    73:85:4f:c5:b1:87:3d:b3:fe:32:48:ce:a5:56:e3:
                    09:d7:b0:65:6b:01:f9:c8:5b:f3:34:0b:93:80:2f:
                    a5:ba:22:e2:75:21:b2:00:de:67:c0:0a:7f:75:73:
                    32:e7:74:fb:43:92:71:6d:c9:98:fc:9b:3e:83:a5:
                    1b:d3:12:d8:be:57:d3:81:b7:76:39:ea:78:48:b4:
                    bd:45
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                DD:09:A0:2A:24:88:FA:4F:D2:65:17:B1:08:43:9E:98:4E:AA:DF:77
            X509v3 Authority Key Identifier:
                keyid:A1:4C:E5:0B:38:F1:20:E4:E5:85:8C:18:F5:1C:09:58:AE:6D:29:CA

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/A14CE50B38F120E4E5858C18F51C0958AE6D29CA.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14CE50B38F120E4E5858C18F51C0958AE6D29CA.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/GujjTRro7qdVF6yV7tihAQzasd7FX7xwk24YseuGSJrY/0/323830343a313434383a3a2f33322d3334203d3e20323633333234.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1448::/32

    Signature Algorithm: sha256WithRSAEncryption
         39:ad:98:b3:41:e0:5c:d0:87:aa:f7:be:f7:43:2a:e2:a4:42:
         d8:fd:3c:44:60:a8:07:44:d7:39:6a:d6:28:a6:b9:bb:87:31:
         a8:e2:7d:a6:93:c7:36:35:f9:70:63:85:48:3b:37:96:c3:6a:
         ed:b7:51:3d:dc:32:d1:19:d2:40:b3:21:06:c8:e9:2d:86:fc:
         6a:af:a1:29:18:dc:83:c9:ba:16:87:cc:9d:c6:2b:a8:e8:e4:
         a6:9a:46:4e:03:72:a5:50:fe:9c:e7:ec:1e:53:be:83:3e:57:
         9c:56:39:f6:cd:7c:28:21:06:f9:a5:58:9e:73:76:12:32:6e:
         e5:80:28:be:df:9a:66:9b:5c:e3:93:03:08:b1:d7:ad:0e:d3:
         e7:1c:23:28:c8:1a:c0:a1:b1:9e:d1:53:bb:04:90:aa:a9:71:
         a4:49:40:5c:d3:33:99:fd:ad:11:f4:2d:77:a3:7c:6b:d8:11:
         3a:66:60:d0:70:49:a5:38:18:ae:cf:91:1f:a1:74:4b:2b:0f:
         23:c0:d3:ca:4d:1c:4b:e0:fb:72:a7:6a:55:db:c6:e6:f0:5c:
         f8:3e:1e:6c:74:ee:36:c2:fa:fc:8d:1b:d8:96:cf:6d:98:43:
         1d:f4:67:c0:be:87:59:7e:5e:b6:39:ab:0e:78:7a:0f:86:eb:
         4c:44:2a:15
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:55 2024 by rpki-client on console-fra.rpki-client.org