Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a313a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a313a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          BExi9UHrF8y44sxn3o0o8tPNLQq9deVsGPjGbaEtdw0=
Subject key identifier:   B6:C5:0A:A9:E1:5D:67:13:5A:0D:97:C7:CB:9A:6C:67:C7:67:A5:FB
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       15753FF4080DA128F2C78B2027FE998E51370A87
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a313a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:46 +0000
ROA not before:           Thu 04 Apr 2024 05:58:46 +0000
ROA not after:            Thu 03 Apr 2025 06:03:46 +0000
asID:                     265010
IP address blocks:        2804:3160:1::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            15:75:3f:f4:08:0d:a1:28:f2:c7:8b:20:27:fe:99:8e:51:37:0a:87
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:46 2024 GMT
            Not After : Apr  3 06:03:46 2025 GMT
        Subject: CN=B6C50AA9E15D67135A0D97C7CB9A6C67C767A5FB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8e:06:ca:ce:79:a7:2e:c3:0c:c1:9e:00:f4:b2:
                    45:3a:ee:39:9d:cd:8e:6a:c4:e5:58:bd:07:12:bd:
                    24:e3:67:7c:8f:32:95:28:e9:7f:c2:a5:70:e3:5c:
                    3e:1e:c6:6e:6d:31:92:a7:e3:1b:64:69:e7:bb:34:
                    87:da:d4:5c:c6:19:9a:f2:c8:7e:55:10:e6:1d:7f:
                    8d:7b:5a:c2:5f:e1:01:2f:18:e1:a8:75:8d:3a:1d:
                    b8:8a:f1:a6:bc:8a:aa:89:c6:50:99:e1:4d:fb:ae:
                    ba:f5:46:cd:ed:80:e0:30:8a:5c:0f:bb:a3:2d:3d:
                    4a:dd:c3:b8:24:2d:27:a9:4a:68:8f:de:d0:42:cb:
                    58:cd:9a:85:6f:d2:3b:e7:cf:1b:22:c4:7d:1a:03:
                    e9:c7:c5:bf:8e:d1:01:da:85:e0:b0:a5:c0:c1:aa:
                    44:dd:c3:55:bd:9d:f0:4d:87:2d:3b:9a:9b:75:d8:
                    c8:4f:b0:7f:dc:f3:05:05:f6:cc:59:83:97:2a:1c:
                    c6:db:a9:70:70:2d:4f:28:d6:80:01:cb:46:65:3b:
                    d0:32:52:07:eb:17:08:a3:c9:ce:24:0b:36:80:88:
                    00:15:62:92:9a:3b:1d:bf:c8:07:e5:28:59:37:8b:
                    ac:54:bc:b6:30:08:d5:8b:75:43:9b:f4:30:45:4d:
                    d0:ad
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C5:0A:A9:E1:5D:67:13:5A:0D:97:C7:CB:9A:6C:67:C7:67:A5:FB
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a313a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:1::/48

    Signature Algorithm: sha256WithRSAEncryption
         9b:f8:71:7b:94:80:b1:d7:00:90:20:4a:c0:f9:7e:4a:bf:3b:
         c2:97:98:38:bc:37:c8:22:b1:e0:62:af:1d:c2:f7:b6:53:6c:
         a3:de:a4:e0:86:d1:cd:d4:e1:8c:89:3e:dc:66:88:93:5b:cb:
         b0:6a:15:fb:eb:1e:9f:74:1a:ce:c6:66:f0:b4:62:59:cf:0b:
         8f:92:d5:0c:59:c8:28:ee:92:b2:80:ef:bb:37:9e:3f:8a:20:
         3c:3f:db:c5:e8:eb:97:89:2f:f9:8b:53:b2:40:04:80:dc:78:
         d8:3a:b8:b4:3b:bd:f5:5b:55:0f:1d:f5:45:9b:5e:63:b1:e4:
         36:5a:26:df:da:e5:a7:18:d6:03:20:8b:85:2e:cb:b4:bc:2f:
         7c:cf:1e:c4:45:4b:29:ff:41:39:df:09:a5:a7:d0:c3:52:64:
         f3:94:5f:19:cf:84:68:7a:46:3b:88:cf:b5:47:09:f2:6e:70:
         86:80:a8:37:7d:ed:46:2e:b8:f5:b3:ab:1a:84:c1:13:19:0c:
         50:ff:d9:9f:05:ef:f1:b2:8a:c3:fc:6b:b8:d0:2a:b6:a7:cd:
         55:22:0d:2f:9e:56:2d:6d:ea:24:26:10:70:f1:56:08:c9:b3:
         a2:7b:bf:ea:a1:a0:d7:63:7b:a8:68:4f:ac:4c:2c:dd:b7:f7:
         25:3d:49:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org