Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/323830343a6166343a3a2f33322d3332203d3e203532393330.roa
File:                     323830343a6166343a3a2f33322d3332203d3e203532393330.roa (raw, json)
Hash identifier:          HjXMv9MAiRC09NrCt89FDIZ0bHHq8zN6ZPk262aJ+4I=
Subject key identifier:   2B:90:84:76:18:1B:90:3B:CF:DE:A5:53:73:86:7F:27:05:CF:41:BE
Certificate issuer:       /CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
Certificate serial:       636309631D1E64738E0A9FBD59FEF92B8D3B49AC
Authority key identifier: AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/323830343a6166343a3a2f33322d3332203d3e203532393330.roa
Signing time:             Sat 06 Apr 2024 17:26:17 +0000
ROA not before:           Sat 06 Apr 2024 17:21:17 +0000
ROA not after:            Sat 05 Apr 2025 17:26:17 +0000
asID:                     52930
IP address blocks:        2804:af4::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:63:09:63:1d:1e:64:73:8e:0a:9f:bd:59:fe:f9:2b:8d:3b:49:ac
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AE58493D362ABCD98C2752F6BC5F4335A17F721D
        Validity
            Not Before: Apr  6 17:21:17 2024 GMT
            Not After : Apr  5 17:26:17 2025 GMT
        Subject: CN=2B908476181B903BCFDEA55373867F2705CF41BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9b:bd:c4:a0:10:b8:94:08:c5:99:96:07:bf:98:
                    41:1d:bc:13:df:7b:83:0d:66:2c:ea:0a:5c:84:2f:
                    fe:1b:37:be:2d:5c:71:89:32:ff:07:3e:0c:8a:c3:
                    f0:33:c1:83:18:58:17:06:5b:72:a1:09:37:44:35:
                    20:15:ad:a9:d8:42:49:67:6f:af:a6:14:fb:31:be:
                    14:27:31:55:30:17:a2:57:c4:04:fd:3f:24:de:0e:
                    28:15:32:99:c0:e2:37:41:8d:3e:f5:28:db:fb:4b:
                    05:ec:df:a1:5e:f3:cc:99:4d:07:ad:8a:15:a2:ab:
                    5d:99:da:23:34:b8:d4:bd:f1:22:a4:30:8a:31:d4:
                    a1:77:5b:88:47:e5:c9:95:23:c2:a1:14:4c:7a:a6:
                    39:d3:c2:b9:c8:ea:ec:c4:63:2b:14:57:1b:df:fb:
                    f7:2b:11:9c:ba:9b:63:5a:c6:5c:27:1d:ab:68:76:
                    c2:ec:a0:6a:f8:21:00:3b:ef:e0:b3:2a:b3:7f:64:
                    9b:bd:4d:47:81:bf:70:0f:00:f3:d5:4d:52:69:cb:
                    c9:14:5f:5b:6c:69:4b:0e:8f:ea:b4:8b:74:f3:84:
                    17:98:e7:36:f7:c9:e0:f6:ed:9b:c3:14:e8:70:8f:
                    b2:0c:63:a6:9f:f5:47:70:54:77:1e:8b:91:7d:45:
                    e1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                2B:90:84:76:18:1B:90:3B:CF:DE:A5:53:73:86:7F:27:05:CF:41:BE
            X509v3 Authority Key Identifier:
                keyid:AE:58:49:3D:36:2A:BC:D9:8C:27:52:F6:BC:5F:43:35:A1:7F:72:1D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/AE58493D362ABCD98C2752F6BC5F4335A17F721D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AE58493D362ABCD98C2752F6BC5F4335A17F721D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/J7DbE98dPZ9CVi2THC1oEUEsrMu5jF5MefnG19nWTzjr/1/323830343a6166343a3a2f33322d3332203d3e203532393330.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:af4::/32

    Signature Algorithm: sha256WithRSAEncryption
         79:fc:b4:3f:7b:94:80:27:8e:bf:7e:da:5f:e5:da:4a:61:da:
         70:02:b1:c7:0c:69:4b:a9:97:46:e8:66:3c:c5:8a:a5:84:fc:
         ba:4a:42:4c:c6:5a:b7:83:19:b4:77:56:90:1d:44:ac:74:88:
         4a:49:f0:a2:e6:d8:d9:71:38:72:bb:43:3a:7d:7c:78:0f:2b:
         72:ff:4f:9b:7f:e3:fa:f9:43:f8:28:e7:66:54:73:f0:6b:40:
         1c:45:cc:be:c9:bf:dd:d9:e8:f4:86:d7:97:7b:48:e3:63:64:
         79:03:a4:6a:96:14:d8:86:97:ab:d5:db:5b:2f:6e:ce:6c:1a:
         46:86:43:c3:1e:cb:99:8a:0e:e6:2c:b2:3d:cb:72:90:50:fa:
         30:7b:8a:69:50:c1:48:a6:a4:f6:47:cd:4b:55:6d:d4:3a:f8:
         95:e5:d3:a3:bc:74:6f:aa:b5:5b:10:6a:3f:91:a8:73:4e:81:
         3b:a6:7e:8f:f3:2c:fe:01:d1:35:34:87:f0:da:10:ff:60:5c:
         aa:54:61:bb:5b:0e:4b:3e:59:d9:26:60:9d:7d:1f:3f:63:91:
         54:3a:96:6b:06:6d:e3:ed:4c:58:a0:39:34:d4:45:58:48:75:
         82:4d:69:2d:f1:c6:b9:16:72:07:e2:d1:3d:2e:ab:22:cd:4b:
         bc:56:66:25
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:05 2024 by rpki-client on console-fra.rpki-client.org