Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/323830343a373935303a383130303a3a2f34302d3430203d3e20323731323938.roa
File:                     323830343a373935303a383130303a3a2f34302d3430203d3e20323731323938.roa (raw, json)
Hash identifier:          QqQb1HStbx6fPahOGWfAWVipidGPOQxJ1BBi+fa2Mes=
Subject key identifier:   D6:FF:62:A8:AE:D5:58:97:BF:D9:25:34:26:9F:70:7B:E5:4D:C7:2B
Certificate issuer:       /CN=0B7E676BF893065665A524EBE293E999020CF3E1
Certificate serial:       7EC05B871A8C995A56EE959DAB0A86405BCAE5EE
Authority key identifier: 0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/323830343a373935303a383130303a3a2f34302d3430203d3e20323731323938.roa
Signing time:             Tue 30 Jan 2024 19:56:34 +0000
ROA not before:           Tue 30 Jan 2024 19:51:34 +0000
ROA not after:            Tue 28 Jan 2025 19:56:34 +0000
asID:                     271298
IP address blocks:        2804:7950:8100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:c0:5b:87:1a:8c:99:5a:56:ee:95:9d:ab:0a:86:40:5b:ca:e5:ee
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0B7E676BF893065665A524EBE293E999020CF3E1
        Validity
            Not Before: Jan 30 19:51:34 2024 GMT
            Not After : Jan 28 19:56:34 2025 GMT
        Subject: CN=D6FF62A8AED55897BFD92534269F707BE54DC72B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d0:06:36:6a:70:18:fd:5a:24:b1:9d:b1:8f:5e:
                    8e:aa:93:fd:91:2c:47:80:99:f8:de:68:8f:2f:cb:
                    ee:10:a3:a8:65:4c:da:2a:6f:7d:8c:44:16:5c:32:
                    fb:cd:a3:37:46:7f:23:39:07:30:29:2a:b8:c0:8f:
                    33:e0:65:82:c4:f9:8e:c4:0f:80:ca:1d:42:53:c9:
                    83:4c:d2:b0:63:48:a3:83:90:dd:e2:31:16:64:1c:
                    e5:79:11:f2:ec:a6:89:7a:a2:f3:fa:05:4f:76:f9:
                    a7:8a:fe:32:8b:27:11:48:eb:13:c4:85:6d:ba:f1:
                    cb:60:67:48:34:17:6e:89:04:43:0d:c6:1a:57:b1:
                    b9:fd:e7:41:74:31:f5:25:26:d5:35:04:13:08:0b:
                    5c:5a:ae:2c:0b:60:2e:d9:2f:a6:b9:67:ac:4a:09:
                    d7:57:13:1e:cb:cf:c8:42:aa:25:6c:12:f2:ed:7a:
                    de:e0:90:86:7f:fb:15:40:dd:c8:f3:6d:db:e1:fc:
                    d3:70:7d:1a:71:08:34:b6:88:4e:c1:f2:83:46:66:
                    13:db:5b:e6:9f:a9:1e:08:0c:07:ec:a7:d5:55:91:
                    82:df:31:a9:39:8f:c7:fc:27:4e:47:a8:07:5a:62:
                    d3:bd:98:a1:f5:22:3e:0c:ee:cb:56:64:aa:a2:fc:
                    d1:c9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D6:FF:62:A8:AE:D5:58:97:BF:D9:25:34:26:9F:70:7B:E5:4D:C7:2B
            X509v3 Authority Key Identifier:
                keyid:0B:7E:67:6B:F8:93:06:56:65:A5:24:EB:E2:93:E9:99:02:0C:F3:E1

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/0B7E676BF893065665A524EBE293E999020CF3E1.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0B7E676BF893065665A524EBE293E999020CF3E1.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/2kSrmKWYb1uMSxN8UP7MzbUA5BVggUwQ9ByPdHH8bCx6/0/323830343a373935303a383130303a3a2f34302d3430203d3e20323731323938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7950:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         77:95:f1:a7:01:d8:28:09:fd:96:e8:96:24:84:9a:7c:ab:09:
         2b:a4:4a:5b:d4:98:bf:c9:69:82:7f:c0:99:39:03:bd:b3:cd:
         0b:28:f1:55:bf:2a:01:84:57:ce:4e:0b:55:e5:00:5e:0c:71:
         b6:9e:10:94:b6:c8:89:11:f0:2f:df:ee:f2:b7:57:90:19:96:
         60:16:1e:9e:06:70:53:71:eb:d1:f3:be:0d:6e:12:21:d0:b2:
         fd:90:74:bb:5f:80:01:6b:0f:9c:3b:cb:9d:a9:be:23:d8:b5:
         05:44:eb:c5:3b:2c:02:c0:c5:54:5d:a8:11:37:9e:d5:bb:be:
         6c:c0:cd:54:74:98:f1:63:5d:ea:e8:06:e9:54:50:b2:1e:06:
         87:b5:a1:70:d3:7e:c5:19:5d:b3:58:a3:ac:98:7a:79:eb:98:
         a3:1f:1e:b3:b1:bc:21:bd:62:58:df:fe:04:e8:7e:c0:74:37:
         5b:52:18:95:be:ba:16:8f:b5:fe:5c:6b:2c:5f:9c:67:98:eb:
         37:6e:07:d0:a8:62:ff:8c:35:71:bd:ed:db:11:7e:ca:50:93:
         5e:20:b0:6c:b4:c2:ac:89:d7:1a:94:86:e7:84:0f:75:8a:ca:
         d0:a7:4e:d0:71:5c:42:dc:e3:e1:b4:f0:7b:2c:98:ea:d0:ea:
         df:ca:2a:9d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:07 2024 by rpki-client on console-ams.rpki-client.org