Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/323830343a373163383a3a2f33322d3332203d3e20323730383131.roa
File:                     323830343a373163383a3a2f33322d3332203d3e20323730383131.roa (raw, json)
Hash identifier:          eRKnblq+OKxLW+aNh1t5Y+V8dctBeppqz6RbKqF9lXY=
Subject key identifier:   00:B2:9B:C5:78:2C:7A:61:0C:47:8A:67:99:A2:55:BB:BB:A4:43:7F
Certificate issuer:       /CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
Certificate serial:       48A6184FACA3AE1A4B1F845AB1131E97950A3040
Authority key identifier: A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/323830343a373163383a3a2f33322d3332203d3e20323730383131.roa
Signing time:             Wed 10 May 2023 13:18:21 +0000
ROA not before:           Wed 10 May 2023 13:13:21 +0000
ROA not after:            Wed 08 May 2024 13:18:21 +0000
asID:                     270811
IP address blocks:        2804:71c8::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            48:a6:18:4f:ac:a3:ae:1a:4b:1f:84:5a:b1:13:1e:97:95:0a:30:40
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD
        Validity
            Not Before: May 10 13:13:21 2023 GMT
            Not After : May  8 13:18:21 2024 GMT
        Subject: CN=00B29BC5782C7A610C478A6799A255BBBBA4437F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c5:d3:0a:c6:0a:9a:bb:f0:74:e7:19:0d:37:74:
                    a2:a9:db:56:f7:a9:0d:c5:bd:b0:c8:94:75:90:a6:
                    b0:d7:5f:45:ac:80:dd:8e:4d:79:97:20:28:11:5b:
                    ee:43:1c:45:c3:fb:41:08:86:bf:c5:b0:86:f3:41:
                    d7:61:13:bc:79:b1:d5:e4:2e:f3:c1:88:45:9f:88:
                    91:e9:77:5e:a4:c6:c3:db:eb:8f:8c:12:9f:d4:6e:
                    0b:24:45:73:55:d3:90:f4:86:f7:ac:eb:31:c5:68:
                    e4:b6:70:15:ca:d7:d5:56:97:b2:cd:1f:dd:e5:b4:
                    28:04:0b:f6:70:49:61:be:c9:fe:2b:bf:17:40:d9:
                    f6:75:4f:8d:7b:c7:3e:11:3d:2e:d3:cd:07:f8:d9:
                    ef:4a:d9:38:c2:d3:5f:a5:38:46:20:4c:e2:ec:36:
                    17:af:24:32:45:86:2f:1e:ca:a1:ee:28:30:73:62:
                    70:1f:ae:e6:7d:e5:49:d9:18:02:f2:21:d7:16:f7:
                    16:47:a8:ea:f1:b0:6c:3c:a7:24:66:93:31:5b:6f:
                    8c:fb:b1:e4:50:ef:60:af:46:f1:da:3d:6d:73:5a:
                    8d:a4:e9:a6:1e:c6:cd:a5:50:da:4b:f5:07:4a:c6:
                    3f:f0:db:ff:9c:07:31:dc:22:c1:34:7f:b0:5d:e4:
                    9e:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:B2:9B:C5:78:2C:7A:61:0C:47:8A:67:99:A2:55:BB:BB:A4:43:7F
            X509v3 Authority Key Identifier:
                keyid:A1:4F:63:10:75:D0:C5:AF:8A:05:B4:E8:CE:8A:EA:C8:3A:F7:12:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A14F631075D0C5AF8A05B4E8CE8AEAC83AF712BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/cTnAqbqLJTUYR5JWjxtK5ghUHgHq6BXt5orBkEPAdr6/0/323830343a373163383a3a2f33322d3332203d3e20323730383131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:71c8::/32

    Signature Algorithm: sha256WithRSAEncryption
         5c:b6:5c:6b:50:16:01:e5:b6:3a:77:63:c7:9d:c4:a8:81:19:
         a5:39:eb:6a:05:fd:69:2b:b9:50:b2:95:e0:5b:b2:42:94:34:
         ad:9b:ed:7f:0d:f6:e4:33:7e:e1:a4:65:49:dd:94:4f:af:c6:
         45:52:7d:16:47:6b:cf:61:ce:ad:a1:06:13:d7:26:2f:23:30:
         17:44:a2:72:2b:22:62:7d:41:f7:19:ae:9b:33:11:46:4e:b9:
         28:f4:81:c2:3e:df:b7:fc:05:b4:99:8e:f8:f2:06:39:4d:b7:
         5d:30:50:b7:b1:83:f5:36:c4:99:53:b2:12:28:1b:5e:15:bb:
         ac:24:68:f9:ba:6a:44:c4:21:95:b4:c9:1d:5a:df:ff:ff:7e:
         46:80:63:7a:7c:94:ab:73:61:d3:14:8d:3c:13:d0:57:ca:79:
         fd:38:98:3a:8f:6d:61:d0:ae:b5:a6:97:28:3c:f7:2d:a3:c3:
         68:51:34:f4:af:bd:f4:ca:9e:b1:0e:20:ad:2c:e1:df:59:14:
         94:eb:b6:e8:00:a6:a7:30:37:e9:b9:54:04:71:32:37:c1:04:
         2c:15:84:54:8a:6b:05:45:43:8a:6e:c0:98:f8:ce:8c:c5:49:
         11:3f:83:4a:ab:d8:ae:e7:d3:b5:c6:90:5d:a3:82:d3:ed:08:
         e7:6e:5f:c1
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:40:07 2024 by rpki-client on console-fra.rpki-client.org