Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3a2f33322d3336203d3e20323633383636.roa
File:                     323830343a323666343a3a2f33322d3336203d3e20323633383636.roa (raw, json)
Hash identifier:          QMCNWjWUjiuyniUT2YpTXExx+tHLqtuAIGXhL4opWME=
Subject key identifier:   91:98:5A:C1:40:47:64:0F:23:83:C4:8E:0E:1C:38:1E:6A:8C:54:0A
Certificate issuer:       /CN=4A621C555E0A637F8A588F23BDFAF9CBF530BD49
Certificate serial:       3A0E689CA98650F7C9FEC6A00E3EFC9F65667FD3
Authority key identifier: 4A:62:1C:55:5E:0A:63:7F:8A:58:8F:23:BD:FA:F9:CB:F5:30:BD:49
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3a2f33322d3336203d3e20323633383636.roa
Signing time:             Thu 21 Dec 2023 17:07:46 +0000
ROA not before:           Thu 21 Dec 2023 17:02:46 +0000
ROA not after:            Thu 19 Dec 2024 17:07:46 +0000
asID:                     263866
IP address blocks:        2804:26f4::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3a:0e:68:9c:a9:86:50:f7:c9:fe:c6:a0:0e:3e:fc:9f:65:66:7f:d3
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4A621C555E0A637F8A588F23BDFAF9CBF530BD49
        Validity
            Not Before: Dec 21 17:02:46 2023 GMT
            Not After : Dec 19 17:07:46 2024 GMT
        Subject: CN=91985AC14047640F2383C48E0E1C381E6A8C540A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cd:f5:4e:63:19:b9:f4:cf:ed:59:cc:07:60:
                    c2:97:16:18:b6:3a:e4:4e:ec:0e:90:e9:3b:2f:c3:
                    17:2e:8f:98:8e:dd:31:9d:b1:52:ac:58:7e:da:9f:
                    e5:6f:b5:1f:58:2a:72:10:32:e8:05:59:f3:dd:ab:
                    3e:21:1b:78:03:8f:8b:6a:59:d8:08:6e:f3:a8:30:
                    8d:84:2d:e8:85:ca:92:7f:62:9b:36:81:ac:2a:57:
                    45:27:9b:b8:de:e6:ea:f9:80:3f:04:3d:5d:9f:1d:
                    40:ae:51:a1:35:b9:43:29:6e:e9:72:61:bf:14:26:
                    11:85:c1:de:62:fb:b6:14:46:8b:00:f4:be:ee:07:
                    f2:d0:74:6e:57:8d:22:7e:2f:ae:06:0a:ee:1c:97:
                    c4:9e:75:2c:80:7f:1b:2b:0a:8e:32:bb:dd:b0:c7:
                    da:da:4a:8b:e5:66:5f:12:27:27:2b:24:03:a5:33:
                    a4:b2:35:3f:f1:83:a4:ae:db:59:5d:80:a7:c0:29:
                    b8:10:e2:be:71:4b:94:84:51:61:6c:82:4e:e4:20:
                    f7:2f:40:e9:9a:69:a5:a4:f8:cf:c3:8f:7c:61:f1:
                    a6:f5:71:56:e3:ce:a2:ae:76:ca:03:bf:96:b1:04:
                    98:73:e4:c6:8b:b5:21:59:34:b9:b8:2d:96:30:ed:
                    de:8d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:98:5A:C1:40:47:64:0F:23:83:C4:8E:0E:1C:38:1E:6A:8C:54:0A
            X509v3 Authority Key Identifier:
                keyid:4A:62:1C:55:5E:0A:63:7F:8A:58:8F:23:BD:FA:F9:CB:F5:30:BD:49

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4A621C555E0A637F8A588F23BDFAF9CBF530BD49.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/QJZjKCm6U2AQhPFF2V8qZXeUDWVbmjk9AY5oqNaeDn9/0/323830343a323666343a3a2f33322d3336203d3e20323633383636.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:26f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         07:e9:24:2b:e9:ae:3f:22:7b:ea:de:0a:73:61:c6:79:dc:b3:
         8f:e6:c2:6e:d2:bd:7e:cd:bc:b3:bc:c3:da:73:b1:80:78:2b:
         ca:df:6e:12:1a:e0:c9:8c:df:5d:2e:6f:c4:b0:a9:06:7b:a2:
         7a:f5:57:87:10:5f:6e:a0:5e:ba:f6:87:1d:1c:d8:16:fa:44:
         62:e2:04:a2:67:b4:7b:cc:e5:c6:4a:a3:ab:a7:63:df:04:9d:
         ba:fe:a3:0b:96:5b:97:b2:8f:03:7c:78:96:3e:97:60:67:11:
         5a:b0:3f:99:4d:35:3b:1b:ba:a7:e8:e8:57:79:85:fe:83:f1:
         9e:20:4b:41:72:41:48:0c:8e:e7:7e:19:3a:4c:2d:5c:e8:29:
         b7:32:c5:1a:a1:df:27:b7:71:d7:0e:dc:5e:7c:a1:22:0c:2f:
         f2:d9:3c:50:62:ca:12:38:62:2b:f1:60:ae:8c:4f:2d:a4:9e:
         a5:4e:41:02:ce:71:6b:03:5d:7c:af:4f:37:2a:8f:68:4c:66:
         ec:55:0f:9a:fd:29:9f:a3:b9:84:07:fc:27:67:e1:d5:68:db:
         bc:dc:ed:34:7a:00:40:28:59:8b:1b:24:20:d5:b2:76:90:1b:
         1c:54:2f:6c:f9:ff:da:33:44:10:87:7c:9a:3e:f2:3d:10:91:
         95:88:8f:63
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:06 2024 by rpki-client on console-fra.rpki-client.org