Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa
File:                     323830343a3863303a3a2f33322d3438203d3e20323632333931.roa (raw, json)
Hash identifier:          61x2xiS5Bdz7UZSfl2LHl8kg6LWI4IvP0q6yzcMaLLQ=
Subject key identifier:   AD:6D:BE:7A:19:FD:8A:DB:87:97:FD:FF:37:27:1D:FE:4D:D4:20:F1
Certificate issuer:       /CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
Certificate serial:       72D78AB42FA7864718C2956F448682CA9C7122
Authority key identifier: F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa
Signing time:             Wed 03 Apr 2024 21:39:08 +0000
ROA not before:           Wed 03 Apr 2024 21:34:08 +0000
ROA not after:            Wed 02 Apr 2025 21:39:08 +0000
asID:                     262391
IP address blocks:        2804:8c0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            72:d7:8a:b4:2f:a7:86:47:18:c2:95:6f:44:86:82:ca:9c:71:22
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D
        Validity
            Not Before: Apr  3 21:34:08 2024 GMT
            Not After : Apr  2 21:39:08 2025 GMT
        Subject: CN=AD6DBE7A19FD8ADB8797FDFF37271DFE4DD420F1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:b0:1d:ae:bf:05:f4:d0:55:4e:a5:21:7e:49:
                    29:0d:23:31:c6:ed:9d:9c:b2:65:af:3f:a3:f8:ef:
                    11:91:c5:38:a9:dd:21:84:9d:f4:54:62:1e:08:9a:
                    13:fc:90:8a:09:47:6b:b7:05:8e:f5:b9:45:55:c1:
                    69:ec:46:1e:36:e2:e4:eb:8a:1f:c5:99:84:1d:89:
                    4a:0e:12:4e:16:03:73:77:df:fe:e0:85:0d:c1:ce:
                    f8:eb:a5:7d:d9:16:2a:05:5c:48:a3:e1:6a:91:76:
                    3d:68:18:b0:72:ee:3a:de:88:21:c1:9f:82:9e:04:
                    cb:99:8f:65:83:0d:17:18:df:32:c9:c2:f5:eb:93:
                    21:78:1f:2f:7a:2c:4b:15:8d:c7:87:af:ff:91:f1:
                    c3:8f:ee:dd:f0:2e:99:46:c6:a0:8e:d6:ea:7c:bf:
                    94:d5:3b:a5:5c:72:dd:97:bf:8b:3e:c6:9a:67:65:
                    07:8f:ea:be:b8:21:43:02:f2:19:f8:a5:f0:09:ec:
                    08:c5:8a:05:58:55:a5:5b:e3:73:d8:0f:d4:1e:f6:
                    a3:ba:bd:91:a3:8c:7a:cb:5b:1b:d9:48:99:6d:9b:
                    41:97:12:0d:73:42:ce:6c:32:59:fc:fe:bd:e3:80:
                    d6:55:59:52:d5:44:19:d6:48:d6:46:20:46:bc:4d:
                    bb:9d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:6D:BE:7A:19:FD:8A:DB:87:97:FD:FF:37:27:1D:FE:4D:D4:20:F1
            X509v3 Authority Key Identifier:
                keyid:F0:EC:5B:53:A8:43:0F:1A:63:93:83:DF:A8:3E:56:A3:7D:3A:7A:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F0EC5B53A8430F1A639383DFA83E56A37D3A7A0D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/syjY7itV6Q1ivBqZPV9GFeEyEhphfNoH1ZoE4KunWY9/1/323830343a3863303a3a2f33322d3438203d3e20323632333931.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:8c0::/32

    Signature Algorithm: sha256WithRSAEncryption
         61:a1:39:51:c8:e9:53:87:47:e1:b1:75:ea:1e:08:f6:c3:41:
         b2:22:5e:36:79:05:b0:3b:47:31:dd:4a:f9:e2:7d:50:0d:da:
         f6:e6:34:4a:05:86:a2:0d:ee:e4:68:a6:ae:ac:96:e7:f5:16:
         87:1d:9c:cf:e5:48:4d:b3:59:1e:a8:fe:85:4e:ff:62:61:99:
         60:0f:ae:75:7c:f2:90:d2:ba:4b:c3:7e:3a:49:0f:4b:ec:c9:
         5d:f4:cb:84:23:01:35:d5:df:5c:7a:fa:82:86:85:ef:66:4e:
         27:e7:49:8e:03:d0:65:9d:cd:8e:2a:f3:65:a7:bc:31:29:2a:
         04:2f:e8:9f:ee:46:00:6b:8e:be:cb:54:8c:d5:b8:f5:ae:b1:
         73:1b:0a:e5:c6:71:5e:4e:d0:d5:7f:d7:69:4f:b3:e5:72:d4:
         b4:76:e8:ec:2e:39:43:6e:f7:a3:9d:39:a0:b6:2f:4f:f6:d6:
         f8:37:3c:78:e1:5b:c9:02:93:81:eb:ab:5d:0a:0c:ea:b9:47:
         0f:68:d4:6c:6e:e7:49:5f:03:a7:88:75:0f:a8:7a:39:b5:b5:
         22:7c:d2:e1:14:63:06:25:9b:0b:9b:97:82:9b:0d:9b:b8:de:
         3c:73:89:ff:51:ac:07:a2:0c:0b:36:a8:39:e6:61:a2:0b:0a:
         5c:20:f3:ea
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 14 04:26:00 2024 by rpki-client on console-fra.rpki-client.org