Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/323830343a323430383a3a2f33322d313238203d3e203532373035.roa
File:                     323830343a323430383a3a2f33322d313238203d3e203532373035.roa (raw, json)
Hash identifier:          KQSZWidNlYtlf9YuLYs3ybvlxVacZygs5xOgHBrlnqU=
Subject key identifier:   C2:96:45:F8:84:17:A4:FC:9E:FF:60:FC:41:23:68:AF:DB:49:13:2B
Certificate issuer:       /CN=0F96EA68BF39E7F0151222F70D6162CEF573FC9D
Certificate serial:       156877B44E6568516198AF711B0B9BE24212CFF1
Authority key identifier: 0F:96:EA:68:BF:39:E7:F0:15:12:22:F7:0D:61:62:CE:F5:73:FC:9D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/323830343a323430383a3a2f33322d313238203d3e203532373035.roa
Signing time:             Fri 28 Jul 2023 21:38:03 +0000
ROA not before:           Fri 28 Jul 2023 21:33:03 +0000
ROA not after:            Fri 26 Jul 2024 21:38:03 +0000
asID:                     52705
IP address blocks:        2804:2408::/32 maxlen: 128

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:68:77:b4:4e:65:68:51:61:98:af:71:1b:0b:9b:e2:42:12:cf:f1
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0F96EA68BF39E7F0151222F70D6162CEF573FC9D
        Validity
            Not Before: Jul 28 21:33:03 2023 GMT
            Not After : Jul 26 21:38:03 2024 GMT
        Subject: CN=C29645F88417A4FC9EFF60FC412368AFDB49132B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:c8:c5:51:c7:88:ee:fe:1f:51:fe:74:e4:5a:
                    67:d1:7a:43:31:40:95:76:09:25:b2:aa:58:df:da:
                    c9:4a:61:4a:b4:b5:17:2c:ae:31:1a:b7:5a:6f:d6:
                    da:3c:fc:2a:32:e0:37:5b:e1:57:e4:dd:2a:13:50:
                    e4:06:51:04:07:33:8a:23:d5:6f:8e:65:17:d2:e7:
                    e9:f7:d3:2a:68:5a:44:c6:61:fa:5b:b5:13:d6:77:
                    9b:ee:27:b0:8d:6b:e9:eb:2f:e8:55:ec:bf:5c:7d:
                    2f:e6:3b:4d:4e:2a:0e:12:86:16:cf:03:78:f7:ce:
                    d7:24:f0:5f:57:ad:5d:47:3b:7c:2c:25:7f:11:11:
                    ad:fc:23:57:24:10:f2:25:e1:c3:6c:a0:c3:5d:33:
                    f9:8b:fb:c6:7a:3f:65:a8:ff:03:ac:87:bf:b8:47:
                    a5:39:2c:14:d7:ed:47:d5:ba:06:52:fa:9c:a4:f4:
                    12:aa:9e:0e:91:a1:d6:bd:69:bb:95:61:c5:f4:27:
                    35:1c:e1:e2:89:03:0b:44:11:fd:2d:d4:fb:7c:8f:
                    20:e2:42:d3:05:12:bd:b0:c7:c4:18:55:4e:79:21:
                    29:29:fc:19:58:2e:55:9a:d6:50:ba:28:56:d4:10:
                    ec:19:4d:ff:e0:32:ee:25:69:6a:b0:9e:54:a1:d1:
                    59:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C2:96:45:F8:84:17:A4:FC:9E:FF:60:FC:41:23:68:AF:DB:49:13:2B
            X509v3 Authority Key Identifier:
                keyid:0F:96:EA:68:BF:39:E7:F0:15:12:22:F7:0D:61:62:CE:F5:73:FC:9D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0F96EA68BF39E7F0151222F70D6162CEF573FC9D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QHqF45mmHN4wNGxeERTvi4DsT5PjqssgWTKPcUvtAsR/0/323830343a323430383a3a2f33322d313238203d3e203532373035.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2408::/32

    Signature Algorithm: sha256WithRSAEncryption
         81:ac:f1:c9:92:91:c4:7c:14:82:f9:03:58:b7:de:6f:a4:e6:
         95:17:16:69:be:96:0f:f7:90:c7:1a:3b:fa:9a:5e:fd:b0:e0:
         18:17:39:40:49:03:21:f7:ea:c5:8f:7b:ef:dc:46:f4:63:f8:
         5f:d0:c3:90:1e:f1:83:88:04:65:c0:72:8f:74:b6:9a:4e:ab:
         4b:14:51:26:90:04:b8:50:f8:6d:22:cf:8f:59:8f:0f:78:a4:
         82:a3:d1:d0:12:cd:77:bd:18:14:ae:86:0c:98:be:c0:b1:c3:
         21:ca:8b:10:2a:69:0a:00:db:53:61:d1:bd:20:e3:a1:19:67:
         ad:72:d5:10:ee:52:09:48:88:d9:9e:d5:a5:15:4d:00:60:76:
         ad:e7:16:41:50:af:41:ac:6a:b4:ef:c0:c2:61:38:ba:b6:07:
         07:e5:84:18:a6:92:21:09:90:c0:3e:13:2f:84:fe:fe:86:d5:
         72:33:02:f0:33:9c:57:73:0a:f8:d3:e1:8c:e8:d8:e7:74:f3:
         3a:a4:8a:0a:19:12:dc:d5:04:a9:a5:4b:d7:3e:03:38:7e:79:
         96:53:c1:d8:ac:8d:57:b7:48:19:70:d9:87:1b:b1:a6:95:b3:
         3e:d1:6f:36:a0:21:75:0c:a6:9c:70:67:58:e4:3f:a5:85:87:
         3d:33:68:1b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org