Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/323830343a353431383a3a2f33322d3332203d3e20323638363238.roa
File:                     323830343a353431383a3a2f33322d3332203d3e20323638363238.roa (raw, json)
Hash identifier:          2+8ZFxLLvVbJtCp6pBLsIS6UrU2n1x5sWCR3q2eQBow=
Subject key identifier:   76:14:55:53:0B:BF:38:65:7A:D5:7B:CD:8E:75:F5:BE:52:A7:8B:51
Certificate issuer:       /CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
Certificate serial:       7B62A57C41681A5CC82E345C3CE92252BABC60BE
Authority key identifier: A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/323830343a353431383a3a2f33322d3332203d3e20323638363238.roa
Signing time:             Tue 14 Nov 2023 09:22:07 +0000
ROA not before:           Tue 14 Nov 2023 09:17:07 +0000
ROA not after:            Tue 12 Nov 2024 09:22:07 +0000
asID:                     268628
IP address blocks:        2804:5418::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7b:62:a5:7c:41:68:1a:5c:c8:2e:34:5c:3c:e9:22:52:ba:bc:60:be
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A698EEF1D908F4D05C52C434D64D84AA126409A2
        Validity
            Not Before: Nov 14 09:17:07 2023 GMT
            Not After : Nov 12 09:22:07 2024 GMT
        Subject: CN=761455530BBF38657AD57BCD8E75F5BE52A78B51
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b8:2d:70:6b:ba:43:a8:45:66:1f:bf:d0:4a:22:
                    b1:61:9f:36:51:8d:21:3d:da:69:c2:45:82:73:eb:
                    1e:32:bd:75:04:8f:0a:78:29:a1:62:74:cd:b6:4c:
                    a9:39:a5:21:f2:82:fb:ae:c0:9d:e9:49:f8:a6:1a:
                    cd:a5:9e:12:ae:c9:d7:03:dc:6d:5b:d1:93:62:7d:
                    84:5a:5a:01:4b:5a:ad:ce:3a:18:84:6c:09:af:6d:
                    e4:50:95:64:ba:d6:6a:04:a9:90:a6:ac:e0:4e:c6:
                    44:a8:f4:9f:5b:01:cb:c2:84:af:9b:ad:4b:8c:21:
                    c4:a8:55:43:90:29:7b:92:c0:92:a0:15:14:24:ea:
                    3f:dc:e7:b7:c2:0c:45:51:fb:94:df:8d:97:29:83:
                    ba:88:1d:69:a1:07:5a:79:a7:bb:ba:1b:f9:3a:56:
                    44:9e:b5:92:7d:6a:00:da:ce:b6:e4:ff:f9:c5:bb:
                    e7:37:aa:09:03:1e:2c:36:72:a4:4d:9a:f0:f1:27:
                    bc:5f:fb:ee:be:bb:85:53:c4:6d:ea:70:fc:51:66:
                    fd:20:2d:cd:4d:69:ea:2b:09:84:8f:2b:16:26:5d:
                    29:74:62:f4:ed:ea:6a:c1:9a:7c:67:5b:a2:48:6c:
                    10:31:cd:73:6e:69:6a:26:a3:41:12:2e:6b:cc:59:
                    86:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                76:14:55:53:0B:BF:38:65:7A:D5:7B:CD:8E:75:F5:BE:52:A7:8B:51
            X509v3 Authority Key Identifier:
                keyid:A6:98:EE:F1:D9:08:F4:D0:5C:52:C4:34:D6:4D:84:AA:12:64:09:A2

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/A698EEF1D908F4D05C52C434D64D84AA126409A2.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3BFbDBEgZuTgcY96aoC3Mdid7BE8rjjipgynL3imzrhA/0/323830343a353431383a3a2f33322d3332203d3e20323638363238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5418::/32

    Signature Algorithm: sha256WithRSAEncryption
         98:e9:5d:e5:13:95:9d:11:6f:5f:86:5e:8e:cc:6d:15:1e:cd:
         75:5b:3a:24:3a:4e:6b:7f:29:47:33:2d:dc:b1:bc:43:a8:eb:
         43:ab:34:69:59:f1:d2:42:f8:11:27:b6:6d:bc:d0:c2:e5:6b:
         d2:40:20:82:29:6e:3f:90:69:c6:e6:08:89:d2:86:b7:80:90:
         8a:1e:5f:fc:e9:ff:ba:7f:78:58:f0:cb:06:b9:b9:38:d9:cc:
         f7:24:28:f7:69:1f:68:6b:0d:a3:df:0c:93:28:e3:be:c8:ca:
         83:e5:23:f4:58:81:1a:02:15:86:03:d8:b2:ee:83:5f:87:18:
         7f:a4:c2:1d:63:8a:03:7f:13:a4:92:36:ca:6e:e5:18:49:78:
         bf:bf:ed:87:ce:43:c8:25:1f:bd:78:36:60:09:9e:aa:bc:30:
         9b:16:19:4d:8d:07:a1:27:d2:57:23:a5:52:66:35:03:c7:19:
         4e:9c:6f:85:97:f8:08:50:05:a8:8f:ee:82:9a:a5:d1:5f:af:
         46:d9:7a:60:a3:fa:c4:32:04:ff:fb:a5:1a:9f:2e:19:02:0b:
         ee:2c:e5:8e:44:7c:db:78:7d:01:cb:f5:10:0e:2e:77:d1:02:
         bd:8d:b4:6f:0e:f8:60:e6:65:52:65:6b:81:eb:76:35:4e:ae:
         58:ca:3d:10
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org