Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/323830343a6166343a3a2f33322d313238203d3e203532393330.roa
File:                     323830343a6166343a3a2f33322d313238203d3e203532393330.roa (raw, json)
Hash identifier:          XDksuwy9IzoUFEqUDKREoeF8FTmwIldqE33r7mfmHB0=
Subject key identifier:   45:AA:8C:EF:E9:7F:A5:DB:9F:C5:2D:A7:AC:BE:80:94:43:6E:F3:48
Certificate issuer:       /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial:       3B23F781F9BBF32AB7A61E78D574C4CA1D9B4D9A
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/323830343a6166343a3a2f33322d313238203d3e203532393330.roa
Signing time:             Wed 10 Apr 2024 15:50:35 +0000
ROA not before:           Wed 10 Apr 2024 15:45:35 +0000
ROA not after:            Wed 09 Apr 2025 15:50:35 +0000
asID:                     52930
IP address blocks:        2804:af4::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:23:f7:81:f9:bb:f3:2a:b7:a6:1e:78:d5:74:c4:ca:1d:9b:4d:9a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Validity
            Not Before: Apr 10 15:45:35 2024 GMT
            Not After : Apr  9 15:50:35 2025 GMT
        Subject: CN=45AA8CEFE97FA5DB9FC52DA7ACBE8094436EF348
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:97:ac:8b:de:cb:aa:52:e6:63:12:a5:d9:27:52:
                    c6:0d:08:68:b3:cb:9d:a3:79:01:f3:ea:cf:b2:40:
                    5e:b9:66:93:4e:96:22:74:50:fd:bf:b0:9f:0d:04:
                    11:f2:fe:ea:40:db:44:3c:07:4d:98:3a:05:1d:7c:
                    af:2c:3b:e8:c2:a9:de:6a:45:38:fb:55:50:b9:b1:
                    a9:4f:53:3b:34:46:78:9f:57:d2:52:ac:0b:f3:1a:
                    7d:5c:d6:4c:37:40:92:b8:dd:e2:e4:85:49:ba:76:
                    0d:b3:87:53:a5:7d:bd:bd:8c:78:12:8b:9d:fd:fc:
                    d9:b1:9f:ff:5d:07:56:e0:91:ea:0f:b9:23:4f:29:
                    48:ff:85:09:90:0e:c6:19:d6:22:fa:36:c3:55:4e:
                    5c:63:cf:2a:95:36:fb:24:ed:47:cd:83:72:ca:ce:
                    85:32:6b:20:6b:48:8f:3e:56:79:a6:71:14:5a:56:
                    66:63:5c:3c:bf:d7:b1:eb:f2:b3:97:37:01:cc:15:
                    04:21:12:e6:36:87:7f:90:b6:a9:09:75:6c:88:fe:
                    32:8c:31:cb:71:df:85:73:9e:48:ca:ac:55:3d:4c:
                    e3:4b:89:6f:75:e4:60:ab:19:3c:a2:39:11:eb:7a:
                    e5:22:3e:17:e5:a8:be:7a:71:91:58:71:18:8a:08:
                    ae:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:AA:8C:EF:E9:7F:A5:DB:9F:C5:2D:A7:AC:BE:80:94:43:6E:F3:48
            X509v3 Authority Key Identifier:
                keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/323830343a6166343a3a2f33322d313238203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:af4::/32

    Signature Algorithm: sha256WithRSAEncryption
         33:56:7a:9b:d5:92:dc:88:9d:f7:79:5a:e5:57:c1:1a:48:c7:
         ec:e4:97:5a:80:2b:4b:2a:df:fe:82:ed:3f:fe:bb:9b:ad:ef:
         36:10:5f:0a:5d:ff:b0:77:90:27:82:fe:b9:d1:43:39:3b:fd:
         90:65:57:d5:a3:48:93:97:0a:f3:f3:02:42:50:b6:a1:f3:21:
         55:7a:0d:d6:19:33:cd:fa:a3:31:56:ae:0f:1c:ec:f7:57:e5:
         02:3b:d2:8e:3f:06:79:8d:b6:78:63:d1:aa:a6:d2:61:14:bb:
         2e:7b:58:02:d7:bf:5d:4f:f4:e4:e5:69:1c:59:7c:03:9e:5c:
         b6:7f:cb:43:76:11:75:42:1e:31:42:ce:22:d1:7f:82:3b:be:
         0b:e5:8b:08:66:65:b0:27:f8:49:52:af:c1:e9:e4:51:da:0d:
         1d:12:f3:05:3c:a1:c4:34:f1:81:dc:96:b5:2d:8a:40:c1:bc:
         a2:40:6e:70:82:77:ee:16:d2:c2:e4:8f:d9:b1:7b:29:9e:76:
         12:e9:d6:aa:a0:85:12:92:cf:8a:af:4f:09:af:4d:06:15:81:
         cf:f0:58:a3:4a:9c:79:56:a0:ef:e1:61:8b:4c:84:c0:1f:67:
         5b:d5:1d:d6:e5:98:c8:58:cf:57:60:c0:a0:22:31:85:d0:6b:
         5a:03:97:8d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:43:55 2024 by rpki-client on console-ams.rpki-client.org