Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a633030303a3a2f34302d3430203d3e203533303437.roa
File:                     323830343a3666303a633030303a3a2f34302d3430203d3e203533303437.roa (raw, json)
Hash identifier:          CCSbCCkEw2dq0tEG0OoRnU6+es6sVeOFS/e7kFSK2rs=
Subject key identifier:   60:20:5E:CA:C2:3C:D7:05:D4:52:12:E2:FF:20:F4:9C:3F:97:E8:1D
Certificate issuer:       /CN=FA5742E5C3B7646173204BE243809DB2D242F777
Certificate serial:       5DEE033B22FD5E0E74E0A11DB2CD3E921C475F6C
Authority key identifier: FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a633030303a3a2f34302d3430203d3e203533303437.roa
Signing time:             Thu 23 Nov 2023 12:06:54 +0000
ROA not before:           Thu 23 Nov 2023 12:01:54 +0000
ROA not after:            Thu 21 Nov 2024 12:06:54 +0000
asID:                     53047
IP address blocks:        2804:6f0:c000::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5d:ee:03:3b:22:fd:5e:0e:74:e0:a1:1d:b2:cd:3e:92:1c:47:5f:6c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=FA5742E5C3B7646173204BE243809DB2D242F777
        Validity
            Not Before: Nov 23 12:01:54 2023 GMT
            Not After : Nov 21 12:06:54 2024 GMT
        Subject: CN=60205ECAC23CD705D45212E2FF20F49C3F97E81D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a1:f8:d1:26:37:dc:75:9b:a9:cb:17:04:59:15:
                    a5:1a:aa:f2:ce:1d:86:d9:b1:26:32:57:19:5e:b0:
                    2b:ed:31:e4:86:4f:a1:2a:2b:82:23:49:3a:d5:c1:
                    5d:a3:0d:46:39:6f:fb:ad:60:8a:bd:dc:15:41:b0:
                    38:98:72:9a:0b:07:e8:92:06:fb:5e:c5:2a:be:3b:
                    36:65:e3:b0:f7:44:79:2b:ab:df:51:3d:50:76:2a:
                    5b:0c:fa:fa:67:29:bf:65:2b:89:fe:b0:52:3f:98:
                    46:fe:fd:cd:f4:e4:b9:c3:2d:1e:67:12:ed:e1:73:
                    8a:53:ce:9a:12:60:2c:8e:63:4e:92:7e:25:1f:04:
                    e3:c0:2d:78:eb:74:91:f7:30:e1:81:41:db:b2:d6:
                    b8:aa:ad:8f:b0:3a:dc:ae:78:2e:6f:eb:0e:96:cc:
                    35:14:93:99:f3:07:42:31:36:b5:c7:22:ae:be:6e:
                    4c:b0:28:0f:bb:9d:92:9a:af:14:6d:5b:4b:f6:cb:
                    7b:25:5a:df:1f:c0:24:46:33:66:29:59:aa:24:5b:
                    7e:4b:e4:b6:8a:27:c3:ae:26:7c:1e:fa:7d:c7:b1:
                    c6:ae:e2:9c:d6:4d:00:cb:5c:d1:a1:e8:90:42:6a:
                    c2:fa:f9:1d:ba:26:82:96:5c:93:c1:02:63:ab:7e:
                    7b:ef
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:20:5E:CA:C2:3C:D7:05:D4:52:12:E2:FF:20:F4:9C:3F:97:E8:1D
            X509v3 Authority Key Identifier:
                keyid:FA:57:42:E5:C3:B7:64:61:73:20:4B:E2:43:80:9D:B2:D2:42:F7:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/FA5742E5C3B7646173204BE243809DB2D242F777.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/FA5742E5C3B7646173204BE243809DB2D242F777.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6XHomFh2pBRr2AZxwZdbYpTjpLuR9qkReDxCQTSdYBJg/0/323830343a3666303a633030303a3a2f34302d3430203d3e203533303437.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:6f0:c000::/40

    Signature Algorithm: sha256WithRSAEncryption
         d3:ba:45:99:dd:29:8e:dc:46:8c:04:48:34:35:a4:35:e9:85:
         7e:cf:fa:7f:9d:5d:00:57:cf:fe:56:e8:1c:b2:bf:4f:f3:92:
         a8:30:0b:a4:6d:fc:09:99:03:52:65:92:3b:fd:9e:d6:2e:5e:
         bf:6d:e7:32:04:9c:dc:8e:b7:1b:76:0a:ed:46:d8:79:70:83:
         0a:c5:da:13:f9:c8:40:81:2e:62:19:97:40:ad:1f:af:8a:91:
         69:0b:96:0d:16:ac:87:93:42:f3:98:8c:c7:74:0b:b2:6e:b3:
         de:3b:4f:ea:40:ba:0b:39:78:2d:05:a6:5e:a8:97:65:73:f2:
         9a:96:09:d5:7e:df:da:79:c9:a0:78:64:dd:3e:81:2c:78:82:
         53:ee:7a:ed:05:e5:b7:a9:de:be:ce:b1:d4:9c:30:ad:81:ec:
         50:43:c8:03:1f:89:39:ef:cb:ea:90:ed:ad:e3:74:08:8a:c2:
         c9:2a:47:f0:3c:c2:71:da:7d:23:cd:90:a6:70:dc:07:31:72:
         d7:d4:e1:73:93:e3:43:3a:13:c0:a5:60:5b:53:e7:1d:9e:e5:
         cc:6b:92:38:2c:e0:73:20:da:fb:59:c3:ed:9a:b0:a1:80:db:
         45:35:a8:40:a6:23:cb:14:ef:ce:87:97:15:fd:dd:15:3b:25:
         64:43:a1:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:16 2024 by rpki-client on console-ams.rpki-client.org