Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/0/323830343a346566343a3a2f33322d3336203d3e20323638323934.roa
File:                     323830343a346566343a3a2f33322d3336203d3e20323638323934.roa (raw, json)
Hash identifier:          kSW+aOYDBh1IYUrY322k814Xo8CKZuRMWVnY18vlCCM=
Subject key identifier:   60:61:20:96:C5:5C:BD:DA:A9:80:A4:AA:CF:3A:86:5B:10:09:68:C9
Certificate issuer:       /CN=59DBC4ED219906FF7A8F7314F19AAE0AEE499977
Certificate serial:       3506C16A43067E0B7FF437DF6D39A3915EFE1569
Authority key identifier: 59:DB:C4:ED:21:99:06:FF:7A:8F:73:14:F1:9A:AE:0A:EE:49:99:77
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59DBC4ED219906FF7A8F7314F19AAE0AEE499977.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/0/323830343a346566343a3a2f33322d3336203d3e20323638323934.roa
Signing time:             Tue 15 Aug 2023 20:00:26 +0000
ROA not before:           Tue 15 Aug 2023 19:55:26 +0000
ROA not after:            Tue 13 Aug 2024 20:00:26 +0000
asID:                     268294
IP address blocks:        2804:4ef4::/32 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            35:06:c1:6a:43:06:7e:0b:7f:f4:37:df:6d:39:a3:91:5e:fe:15:69
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=59DBC4ED219906FF7A8F7314F19AAE0AEE499977
        Validity
            Not Before: Aug 15 19:55:26 2023 GMT
            Not After : Aug 13 20:00:26 2024 GMT
        Subject: CN=60612096C55CBDDAA980A4AACF3A865B100968C9
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:2d:82:47:27:a3:a3:87:1b:aa:55:2c:ee:0d:
                    46:2f:50:c0:60:90:ca:19:01:e1:f3:9b:f6:c2:e4:
                    89:de:cd:00:02:a6:7c:11:dc:48:8c:e3:12:4e:07:
                    f8:90:4b:ef:f7:ac:cd:1e:0b:9e:52:44:71:56:fd:
                    5c:5f:03:b7:35:4d:66:c3:5b:4c:05:dd:4a:70:c1:
                    43:8d:77:07:6a:cd:0c:4b:67:96:c5:55:f7:39:74:
                    0f:79:01:34:63:14:36:c3:ac:2b:9c:ee:f8:3f:37:
                    56:c0:c0:20:7d:7f:47:0e:36:5c:dc:b0:cb:ed:f1:
                    69:20:5a:e5:6b:7d:5d:87:59:d0:e5:0e:47:e4:e5:
                    b3:88:0d:3d:00:f5:da:f9:81:f4:34:a3:38:01:7f:
                    49:4c:d7:7c:a7:72:a4:30:43:46:72:36:6e:5f:48:
                    c2:56:20:d9:8d:e4:62:a0:3c:eb:36:c0:9d:14:d4:
                    a7:e2:52:88:5f:31:32:2d:65:2f:61:7d:c6:51:38:
                    66:74:b4:85:10:f0:d4:ab:f9:13:e9:aa:f4:40:8f:
                    a5:2e:68:8d:ab:a0:b4:48:92:4e:b1:2f:88:a0:ad:
                    aa:12:c9:0f:ab:7a:76:79:7b:53:2d:e1:f5:0c:f0:
                    1f:31:74:94:f9:47:3e:44:be:5b:da:e5:e4:94:b2:
                    a7:e5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                60:61:20:96:C5:5C:BD:DA:A9:80:A4:AA:CF:3A:86:5B:10:09:68:C9
            X509v3 Authority Key Identifier:
                keyid:59:DB:C4:ED:21:99:06:FF:7A:8F:73:14:F1:9A:AE:0A:EE:49:99:77

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/0/59DBC4ED219906FF7A8F7314F19AAE0AEE499977.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/59DBC4ED219906FF7A8F7314F19AAE0AEE499977.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/39BCYPk69Unqpep3kRJLJZfqaXsEqDY5tXBXTSC44cxj/0/323830343a346566343a3a2f33322d3336203d3e20323638323934.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4ef4::/32

    Signature Algorithm: sha256WithRSAEncryption
         45:ee:20:18:13:a4:78:4d:ca:84:85:d8:dc:d1:ec:7e:0d:e4:
         74:f3:bd:eb:2a:2f:a0:21:93:64:d1:35:d6:53:d1:29:fb:03:
         54:11:8f:e6:3b:a7:36:09:f2:38:8c:bc:a5:51:99:7c:fb:53:
         7f:7b:98:4e:b0:26:3d:6b:5e:08:ba:d6:66:a4:f5:08:86:66:
         ae:c2:98:85:ce:18:67:5a:bf:81:35:b7:83:d5:10:a5:64:cb:
         5a:e0:ff:cd:15:48:c3:47:d9:5b:6f:d3:c3:aa:49:d6:5a:6b:
         ab:49:3d:c6:22:84:ff:c8:60:55:0a:41:25:2f:7f:91:68:be:
         4d:d1:77:35:ea:48:79:f1:cb:17:6f:ee:4c:18:14:e7:6e:07:
         27:7b:27:af:08:34:e1:51:6c:5a:7c:37:49:7c:9d:b0:8b:05:
         41:08:32:16:3f:5c:42:af:15:7a:a6:76:9d:ae:5d:e9:0e:28:
         03:df:26:dc:0e:7c:08:b5:05:fc:8e:c8:e6:9f:44:ab:65:04:
         ca:29:13:ee:05:c7:2f:45:97:0a:4c:10:5f:36:b9:ef:13:4a:
         aa:ee:83:6b:a1:08:ec:26:d2:44:d1:07:4a:74:f5:c4:88:5f:
         71:4d:2d:f4:bf:34:de:47:08:78:d8:7b:a3:2f:da:65:4b:a1:
         89:ec:5c:c0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:25 2024 by rpki-client on console-fra.rpki-client.org