Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a313030303a3a2f33362d3336203d3e20323635303130.roa
File:                     323830343a333136303a313030303a3a2f33362d3336203d3e20323635303130.roa (raw, json)
Hash identifier:          lV0lSefXpsLzKSu2eFfW96vOcwsU//tI2J7CbQ5NX/I=
Subject key identifier:   91:BD:E9:FE:87:E9:05:83:19:C5:25:32:57:74:55:3F:DD:83:A5:E1
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       10909BD6BFD17DA76BDC0442F0E7F69E76DA6C72
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a313030303a3a2f33362d3336203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:48 +0000
ROA not before:           Thu 04 Apr 2024 05:58:48 +0000
ROA not after:            Thu 03 Apr 2025 06:03:48 +0000
asID:                     265010
IP address blocks:        2804:3160:1000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            10:90:9b:d6:bf:d1:7d:a7:6b:dc:04:42:f0:e7:f6:9e:76:da:6c:72
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:48 2024 GMT
            Not After : Apr  3 06:03:48 2025 GMT
        Subject: CN=91BDE9FE87E9058319C525325774553FDD83A5E1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:1b:af:8c:36:f2:6c:5d:46:07:ed:8a:d5:41:
                    4d:54:5f:89:9c:83:67:97:40:23:a0:62:e0:f9:6b:
                    11:04:30:3c:d8:a4:36:5b:1e:95:ee:b9:45:d2:c3:
                    06:da:f7:af:b3:ef:85:56:f1:0d:a4:5e:93:c9:c3:
                    1d:26:ff:09:b2:1e:ec:bb:69:5d:9b:75:92:96:29:
                    65:f5:9c:46:13:a8:29:2e:74:34:3a:c5:9a:37:b9:
                    cf:43:86:6b:1a:f6:55:4f:b9:b0:37:e6:9d:32:64:
                    cf:b2:c0:fe:12:8e:96:98:74:fc:1f:93:f4:80:4b:
                    e0:71:64:12:07:05:7c:cc:65:c1:34:e2:62:c6:39:
                    95:95:3c:24:50:4f:a2:e2:c5:0f:01:02:ff:75:90:
                    99:90:e1:1e:29:ee:ed:df:98:de:8b:89:51:dc:aa:
                    87:5b:48:8d:7e:29:58:5e:5a:4c:9b:80:2f:25:4a:
                    f1:17:75:91:76:8d:b8:43:8c:7e:c8:b5:44:8e:e4:
                    e6:0e:09:3f:12:e6:96:eb:9b:49:26:f1:fa:38:13:
                    b6:c1:60:5d:ff:4d:1c:99:be:45:48:37:c9:53:69:
                    6a:d2:4b:2c:4a:d1:ea:9e:0e:ad:8d:22:ee:34:a0:
                    74:0e:66:33:fa:ce:04:e3:b6:c5:cd:3e:4a:5a:e5:
                    6a:4f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                91:BD:E9:FE:87:E9:05:83:19:C5:25:32:57:74:55:3F:DD:83:A5:E1
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a313030303a3a2f33362d3336203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:1000::/36

    Signature Algorithm: sha256WithRSAEncryption
         08:0f:16:59:61:b1:99:dc:01:eb:39:78:64:a9:63:0e:09:c5:
         7c:3e:83:1e:63:b9:c7:10:16:cf:ab:7d:15:c6:b7:75:42:0f:
         b3:ad:c4:0b:1d:04:27:d2:c9:6c:37:95:be:e4:b5:ea:96:3c:
         ef:11:aa:0f:04:b7:34:4f:a7:2e:d6:ef:f7:45:d5:ca:9d:5a:
         6d:48:06:60:e3:4f:f0:84:cd:2a:dc:59:03:8b:03:7e:4b:61:
         f2:64:f6:b6:0e:31:c0:7b:0a:3e:ec:33:89:28:e6:c2:74:94:
         5c:79:aa:e0:33:30:e9:38:56:63:f0:04:89:cc:81:97:1e:40:
         0b:d8:74:73:e2:db:84:28:81:ca:46:00:78:1a:ec:b0:3f:a7:
         87:06:2d:1c:32:58:09:54:ec:25:68:34:25:cb:d6:d4:02:b3:
         a7:a6:9e:33:a1:12:37:51:be:ed:41:ba:b3:5d:b9:73:1f:98:
         a2:b2:39:5d:12:63:6f:f3:8e:d2:e5:ed:c5:68:2f:0f:b7:14:
         06:32:df:cb:4b:3c:90:42:34:af:51:a1:05:6e:74:32:6e:15:
         d1:dd:39:0a:32:fe:43:35:0c:98:38:e1:b2:1e:03:99:e9:1f:
         10:bf:d3:d9:49:4c:a3:26:ad:51:0b:44:de:85:90:91:8d:9b:
         de:1a:ce:2a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org