Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/1/323830343a323935343a3a2f33322d3438203d3e20323634303039.roa
File:                     323830343a323935343a3a2f33322d3438203d3e20323634303039.roa (raw, json)
Hash identifier:          vWk/y8ohW3bvm75NQaUzWtfFd0xJDD4UagjEBsicOb8=
Subject key identifier:   BD:EE:6E:F9:14:06:1A:C5:B2:8B:BB:AF:3F:CF:82:16:12:76:C4:86
Certificate issuer:       /CN=6081C137E9272E62F62F2918C1910F90943341EE
Certificate serial:       68DFC559DFC13936C7688550F3B7430631600BD8
Authority key identifier: 60:81:C1:37:E9:27:2E:62:F6:2F:29:18:C1:91:0F:90:94:33:41:EE
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6081C137E9272E62F62F2918C1910F90943341EE.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/1/323830343a323935343a3a2f33322d3438203d3e20323634303039.roa
Signing time:             Thu 04 Apr 2024 16:01:25 +0000
ROA not before:           Thu 04 Apr 2024 15:56:25 +0000
ROA not after:            Thu 03 Apr 2025 16:01:25 +0000
asID:                     264009
IP address blocks:        2804:2954::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:df:c5:59:df:c1:39:36:c7:68:85:50:f3:b7:43:06:31:60:0b:d8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6081C137E9272E62F62F2918C1910F90943341EE
        Validity
            Not Before: Apr  4 15:56:25 2024 GMT
            Not After : Apr  3 16:01:25 2025 GMT
        Subject: CN=BDEE6EF914061AC5B28BBBAF3FCF82161276C486
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:38:b7:0b:98:b8:5d:ae:db:51:ec:f5:8d:ac:
                    ca:13:e9:fb:61:d0:61:f5:56:2b:87:bb:d6:5e:45:
                    78:6c:ae:d5:88:d2:2e:c4:b2:b0:b7:01:a9:8b:fc:
                    e2:0e:11:c6:a9:ee:33:ff:73:87:46:56:02:88:2c:
                    d2:5f:72:08:79:db:cc:6a:01:cb:ed:a2:55:65:0e:
                    ef:06:77:2f:a6:21:76:b4:31:61:ae:dc:cd:6b:66:
                    4d:77:3c:8b:80:6e:cd:b3:e7:b2:7c:25:30:de:7a:
                    d4:f0:d4:b3:27:0b:58:86:dd:16:72:26:68:f0:6a:
                    a2:97:92:44:99:02:e2:5d:a4:1d:35:c7:b2:91:22:
                    42:ee:4e:f9:37:ed:90:49:7a:cd:04:4f:13:7d:e6:
                    32:9d:84:27:3e:c7:56:25:83:1a:d4:2b:a2:a1:23:
                    9a:16:1a:00:24:af:3c:10:1f:96:c6:59:83:8b:f9:
                    3b:eb:4c:f2:f0:af:4f:26:8e:7e:ff:f5:89:c2:21:
                    46:83:6c:5e:4c:ae:26:fb:69:55:9b:6a:47:a7:34:
                    3e:4f:92:7b:a1:e6:d9:ce:cf:be:cd:b9:e2:7a:58:
                    ce:d5:f0:09:5c:c4:fb:aa:21:23:7b:d6:1b:70:3d:
                    5d:60:2e:c9:c4:6a:ca:77:42:a3:a5:db:5d:90:ce:
                    17:d1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BD:EE:6E:F9:14:06:1A:C5:B2:8B:BB:AF:3F:CF:82:16:12:76:C4:86
            X509v3 Authority Key Identifier:
                keyid:60:81:C1:37:E9:27:2E:62:F6:2F:29:18:C1:91:0F:90:94:33:41:EE

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/1/6081C137E9272E62F62F2918C1910F90943341EE.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6081C137E9272E62F62F2918C1910F90943341EE.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/234g6oofZKcTSUoW4jL1CxxGWrjVhbYCW716M9h7Kww3/1/323830343a323935343a3a2f33322d3438203d3e20323634303039.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2954::/32

    Signature Algorithm: sha256WithRSAEncryption
         08:b9:7b:e2:93:86:50:49:c6:cc:5a:d0:a5:00:26:07:49:d2:
         f8:23:db:53:5d:bb:d5:ef:27:3b:67:b9:9e:7f:bf:c8:df:3b:
         e4:8d:96:fa:0e:3d:dd:9b:14:fd:5f:68:e9:16:3c:d3:8d:41:
         d6:4a:73:3f:4c:27:41:73:96:7d:99:96:c0:d9:21:38:e7:f3:
         f8:5e:6c:43:a8:0e:8e:25:b3:8c:16:2f:0c:e1:3e:74:90:bf:
         05:b0:f9:e9:a5:3a:28:39:9d:bc:10:58:ec:9f:9a:35:73:e2:
         61:6b:7f:77:20:8a:fd:7c:94:38:ea:a7:f2:b0:ee:6d:45:71:
         5a:eb:b3:ac:73:46:6d:8c:3b:6b:64:da:88:ed:dc:e3:00:b0:
         ab:00:af:42:ef:99:f9:a1:c9:93:e7:d3:d4:fb:53:bf:60:9c:
         a9:c7:71:cb:d1:08:88:66:52:04:20:28:08:af:dd:ef:08:de:
         7d:9c:b7:63:0a:00:5a:86:1b:e3:9c:85:44:4f:4e:e6:cf:61:
         be:b2:dd:f8:64:d2:0f:d9:96:91:a0:8c:a1:97:89:7d:93:54:
         e0:eb:47:10:e5:f0:c5:67:0c:d2:9b:7f:c8:c2:34:a0:4a:ab:
         7d:d6:58:df:05:f3:56:97:78:9e:53:bd:28:1b:f7:54:91:4b:
         79:5e:b3:cb
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Wed Aug 7 18:15:41 2024 by rpki-client on console-fra.rpki-client.org