Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3230303a3a2f34302d3434203d3e20323637333235.roa
File:                     323830343a346262343a3230303a3a2f34302d3434203d3e20323637333235.roa (raw, json)
Hash identifier:          S5zkE13HLF3sKbjWCrbItNXOAhEMbkRB1DAxDT03fLE=
Subject key identifier:   A9:90:2D:26:78:23:57:DE:4F:66:77:3F:BD:D0:A9:15:B6:D5:54:A4
Certificate issuer:       /CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
Certificate serial:       7EEBF7449D1E9792EFDF48DE3930DB8443DFEC30
Authority key identifier: 4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3230303a3a2f34302d3434203d3e20323637333235.roa
Signing time:             Fri 23 Feb 2024 12:30:46 +0000
ROA not before:           Fri 23 Feb 2024 12:25:46 +0000
ROA not after:            Fri 21 Feb 2025 12:30:46 +0000
asID:                     267325
IP address blocks:        2804:4bb4:200::/40 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:eb:f7:44:9d:1e:97:92:ef:df:48:de:39:30:db:84:43:df:ec:30
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1
        Validity
            Not Before: Feb 23 12:25:46 2024 GMT
            Not After : Feb 21 12:30:46 2025 GMT
        Subject: CN=A9902D26782357DE4F66773FBDD0A915B6D554A4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:80:1d:57:d1:7c:11:26:cb:9a:93:e8:df:f5:
                    a1:74:c6:97:42:68:1e:ee:a7:b6:d6:1f:32:38:84:
                    05:65:62:f3:c6:6f:0d:fd:af:78:14:1e:a7:1a:21:
                    90:ba:aa:f4:53:b4:34:4a:e9:58:4d:f0:86:e4:ee:
                    fd:13:cf:dd:49:00:bc:0b:26:89:b4:f2:f0:d1:98:
                    cd:63:a9:da:35:ed:ee:ea:fb:f8:43:a3:ec:a8:af:
                    eb:01:01:82:68:b0:3c:07:eb:a6:2a:95:c6:a4:e6:
                    28:4f:1d:02:57:0f:59:31:42:d1:34:35:1c:21:79:
                    f3:3f:6c:79:b9:4a:98:8c:f8:32:34:01:aa:e6:c0:
                    35:f6:49:b6:66:ea:d2:04:6a:82:f6:5d:ef:d0:3d:
                    1c:5b:37:c5:1d:67:ca:f3:90:8b:54:6c:c3:7c:22:
                    58:a2:70:e1:36:51:10:f6:1a:26:63:d7:16:8c:26:
                    84:9a:f5:25:5f:78:65:ea:9f:bb:6c:2d:e3:9f:f8:
                    e4:e0:47:ef:28:9b:f5:bb:d8:49:32:11:33:25:0c:
                    c4:b6:3f:d1:82:65:e9:bc:65:c1:1f:35:71:41:84:
                    8e:f2:ed:b3:bf:f7:f5:a6:e4:8b:fe:f0:cd:d1:ae:
                    0f:37:72:7b:46:02:94:e4:87:87:21:d4:08:54:5d:
                    44:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A9:90:2D:26:78:23:57:DE:4F:66:77:3F:BD:D0:A9:15:B6:D5:54:A4
            X509v3 Authority Key Identifier:
                keyid:4E:8D:4C:17:D9:B3:A5:16:35:36:69:5F:0B:2F:1F:0C:0B:24:A7:B1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4E8D4C17D9B3A5163536695F0B2F1F0C0B24A7B1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/dPzRejTyAM9aM8oYGDiteXDnLFihaRuzD1ef4PiKwn7/0/323830343a346262343a3230303a3a2f34302d3434203d3e20323637333235.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bb4:200::/40

    Signature Algorithm: sha256WithRSAEncryption
         4e:5d:43:ef:02:20:d0:ad:7c:99:e5:72:12:11:d4:46:5b:65:
         0d:c6:5f:09:35:c6:bb:7f:d3:87:71:e7:b6:2f:c8:3a:b5:a5:
         6c:eb:c1:fb:9c:6a:a2:b7:48:24:b7:f8:79:1c:50:d1:b8:6e:
         f9:fa:70:65:ca:78:21:4a:c7:66:a6:c6:0e:0a:90:65:23:16:
         39:35:b3:71:8a:e0:a1:83:a2:e3:2d:dc:ec:dd:90:c5:a4:24:
         13:8c:0f:96:6a:b3:d0:e8:9d:ff:a2:71:37:89:19:b2:fd:19:
         2f:e3:5e:57:8c:aa:0e:68:d3:ac:66:21:e4:f8:6f:f7:6f:9a:
         f3:0e:70:99:f7:9f:5f:57:39:9c:75:09:e6:39:ea:cb:f7:44:
         ff:69:ec:52:c5:69:8f:5b:5c:6b:69:ef:0b:04:8e:70:40:fb:
         a2:3e:b8:c6:9e:5c:1a:df:4d:42:68:76:71:0e:dc:27:05:6b:
         dc:38:46:f3:a9:25:c7:4a:3d:aa:b1:9a:1d:31:2f:91:ce:14:
         ed:87:7a:e3:61:db:b2:40:4e:cc:59:5b:14:73:34:6f:b7:c4:
         16:24:f0:84:d6:1e:0d:15:0e:40:03:45:5d:86:f5:3a:2d:f5:
         2b:95:bc:ef:28:43:74:31:98:f0:04:2d:a0:8f:d4:ac:ce:58:
         c9:88:30:26
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Mon Apr 15 17:26:35 2024 by rpki-client on console-ams.rpki-client.org