Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/0/323830343a313431343a3a2f33322d3334203d3e20323633333131.roa
File:                     323830343a313431343a3a2f33322d3334203d3e20323633333131.roa (raw, json)
Hash identifier:          4+GwBC+hRRecds9H5xrgkxnT/9Bwne5i1bYmFDsTo6s=
Subject key identifier:   EA:2B:15:A0:97:BD:B4:D9:9F:6F:1F:32:2C:F6:CC:93:89:43:BE:54
Certificate issuer:       /CN=0CE2E9D8B228E9F56BD781EB40042472C4050A4D
Certificate serial:       5F50472F8A791562F521F8DE3F7CABAD12603347
Authority key identifier: 0C:E2:E9:D8:B2:28:E9:F5:6B:D7:81:EB:40:04:24:72:C4:05:0A:4D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CE2E9D8B228E9F56BD781EB40042472C4050A4D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/0/323830343a313431343a3a2f33322d3334203d3e20323633333131.roa
Signing time:             Mon 26 Jun 2023 21:00:00 +0000
ROA not before:           Mon 26 Jun 2023 20:55:00 +0000
ROA not after:            Mon 24 Jun 2024 21:00:00 +0000
asID:                     263311
IP address blocks:        2804:1414::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:50:47:2f:8a:79:15:62:f5:21:f8:de:3f:7c:ab:ad:12:60:33:47
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0CE2E9D8B228E9F56BD781EB40042472C4050A4D
        Validity
            Not Before: Jun 26 20:55:00 2023 GMT
            Not After : Jun 24 21:00:00 2024 GMT
        Subject: CN=3082010A0282010100B5F81091327BDA79F0EFE653CC18650E225CAD847AA978CCCFCAA7CAFF7E0A46E3F9D7263CEBB12C7E1F9A42F3CC8E425E2D22141841270C86B88F5E09C034A5A3E1F86EBA9ACA24D4DE4BE6E6FA83FD6DFB9C6E24E19F74F07DCA55680336B96061AAF4725B72EE52663F1AC7C6C3F1BCC07729BC3CB23A684AA4BB06F195CC8FD3EA6E862FC25B8C58198AD1FDE3B068C2B81C405958B7EFA9D92D6CAB4409592B214DA83E3F2D19E570E1F14C4B3A4A65036538325B0EFC83520F66FEEC20DB687F8AC81B78DA2C8B975EEDBFF69D2738AC92BBB75A63F635A637EA68CFE7F0834F8754831055DE7ACA4F30D1B1FA0DB463E5DAA3E70275763FAB22E6A8AD0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b5:f8:10:91:32:7b:da:79:f0:ef:e6:53:cc:18:
                    65:0e:22:5c:ad:84:7a:a9:78:cc:cf:ca:a7:ca:ff:
                    7e:0a:46:e3:f9:d7:26:3c:eb:b1:2c:7e:1f:9a:42:
                    f3:cc:8e:42:5e:2d:22:14:18:41:27:0c:86:b8:8f:
                    5e:09:c0:34:a5:a3:e1:f8:6e:ba:9a:ca:24:d4:de:
                    4b:e6:e6:fa:83:fd:6d:fb:9c:6e:24:e1:9f:74:f0:
                    7d:ca:55:68:03:36:b9:60:61:aa:f4:72:5b:72:ee:
                    52:66:3f:1a:c7:c6:c3:f1:bc:c0:77:29:bc:3c:b2:
                    3a:68:4a:a4:bb:06:f1:95:cc:8f:d3:ea:6e:86:2f:
                    c2:5b:8c:58:19:8a:d1:fd:e3:b0:68:c2:b8:1c:40:
                    59:58:b7:ef:a9:d9:2d:6c:ab:44:09:59:2b:21:4d:
                    a8:3e:3f:2d:19:e5:70:e1:f1:4c:4b:3a:4a:65:03:
                    65:38:32:5b:0e:fc:83:52:0f:66:fe:ec:20:db:68:
                    7f:8a:c8:1b:78:da:2c:8b:97:5e:ed:bf:f6:9d:27:
                    38:ac:92:bb:b7:5a:63:f6:35:a6:37:ea:68:cf:e7:
                    f0:83:4f:87:54:83:10:55:de:7a:ca:4f:30:d1:b1:
                    fa:0d:b4:63:e5:da:a3:e7:02:75:76:3f:ab:22:e6:
                    a8:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EA:2B:15:A0:97:BD:B4:D9:9F:6F:1F:32:2C:F6:CC:93:89:43:BE:54
            X509v3 Authority Key Identifier:
                keyid:0C:E2:E9:D8:B2:28:E9:F5:6B:D7:81:EB:40:04:24:72:C4:05:0A:4D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/0/0CE2E9D8B228E9F56BD781EB40042472C4050A4D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0CE2E9D8B228E9F56BD781EB40042472C4050A4D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6ju1b2z6kEZVLkSqSeBLxnSDT4E31zjNNvcHS12gmoDe/0/323830343a313431343a3a2f33322d3334203d3e20323633333131.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1414::/32

    Signature Algorithm: sha256WithRSAEncryption
         9f:52:70:0a:e2:61:3e:98:b7:57:26:3a:ff:ca:3d:6e:39:bc:
         d1:34:f7:73:9b:fe:0e:d2:f8:67:3d:15:47:25:58:f1:60:d2:
         d1:4b:e4:c6:86:e1:bc:33:b8:ba:b4:e3:0d:d5:9f:e2:7c:8f:
         23:c5:e3:6c:f6:28:16:f8:01:2f:93:8b:10:c8:5b:db:6a:e0:
         b0:c9:13:63:4b:c9:b7:df:77:e4:51:02:0c:2a:6f:65:c0:59:
         22:9c:dc:cc:09:6b:74:f7:f9:45:e3:b9:ce:f9:9a:f9:ee:21:
         b9:df:a6:69:d2:26:cd:f0:4c:0a:9a:dc:48:11:b6:19:88:10:
         f5:b5:b4:cb:74:e4:2e:7e:c0:73:75:92:33:95:0f:80:fb:24:
         aa:cd:b8:da:95:d7:9a:07:ce:9c:97:53:d0:20:e2:43:df:15:
         ed:de:0d:f7:63:7b:ff:36:fa:46:8a:a2:3d:58:28:0e:a9:82:
         da:6f:18:7b:04:1f:12:9c:a5:7e:07:b5:4c:55:1c:b9:9a:81:
         6f:33:f6:00:c0:2a:9d:ca:dd:d7:e2:d1:b6:d8:74:60:80:d9:
         6c:34:be:ba:a9:d5:5c:66:f1:ee:49:ca:e1:dc:3e:93:8f:a6:
         62:8c:f5:e2:72:e3:5f:dd:c1:10:f3:01:b7:6c:38:c5:5c:96:
         63:54:85:47
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org