Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a323030303a3a2f33362d3336203d3e20323635303130.roa
File:                     323830343a333136303a323030303a3a2f33362d3336203d3e20323635303130.roa (raw, json)
Hash identifier:          tecYQLpWK04OhWQXPqdBfuGzoehaFznT/T8ySdJ2dSQ=
Subject key identifier:   EE:48:B1:AB:A1:01:06:BF:2D:3A:D3:A2:0C:01:6F:60:A8:F4:8E:6F
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       7FA241E0F2609CC53FC919508734E4E8908D9D2E
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a323030303a3a2f33362d3336203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:46 +0000
ROA not before:           Thu 04 Apr 2024 05:58:46 +0000
ROA not after:            Thu 03 Apr 2025 06:03:46 +0000
asID:                     265010
IP address blocks:        2804:3160:2000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7f:a2:41:e0:f2:60:9c:c5:3f:c9:19:50:87:34:e4:e8:90:8d:9d:2e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:46 2024 GMT
            Not After : Apr  3 06:03:46 2025 GMT
        Subject: CN=EE48B1ABA10106BF2D3AD3A20C016F60A8F48E6F
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cd:01:5a:0d:cd:74:03:2a:f4:a4:9a:33:c2:d6:
                    d6:9e:15:88:af:b2:10:b1:e9:cb:93:85:e1:d6:b4:
                    42:31:95:df:18:d0:f1:da:c2:0d:2e:23:80:02:60:
                    d0:dc:dc:13:da:70:54:57:db:ef:7e:ef:b9:d6:a0:
                    18:15:29:97:a3:6e:42:bc:a2:ec:8c:8e:5a:d2:fb:
                    45:fa:74:41:01:b9:3e:28:26:57:88:5a:ef:32:7b:
                    5c:41:53:8d:88:f5:1c:9b:c5:2c:5c:75:1a:d9:7f:
                    68:63:57:03:49:33:65:cf:9c:37:0a:85:80:b9:01:
                    3f:9e:13:bc:e6:0b:97:60:d9:54:40:98:5e:eb:3e:
                    69:60:88:a8:08:80:5a:94:12:58:7a:13:24:f0:f4:
                    60:29:bb:dd:a7:18:3d:6f:97:e2:96:53:11:53:71:
                    8d:fa:51:18:a9:df:5a:e8:d0:5a:96:76:9f:92:da:
                    33:e9:be:8e:b8:f5:65:5e:9d:d5:22:43:c2:70:12:
                    0a:5e:fd:96:7c:8b:90:60:46:85:a1:8e:5c:90:d4:
                    15:ee:b4:8d:84:2e:39:21:e8:e6:e0:ab:9c:80:20:
                    71:16:86:62:cb:0d:e2:82:b6:81:47:90:f5:e4:e8:
                    a8:7d:fa:17:d5:3b:bb:46:94:a7:91:85:c3:79:f8:
                    df:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EE:48:B1:AB:A1:01:06:BF:2D:3A:D3:A2:0C:01:6F:60:A8:F4:8E:6F
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a323030303a3a2f33362d3336203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:2000::/36

    Signature Algorithm: sha256WithRSAEncryption
         42:ff:56:75:a4:2c:6f:b4:d8:50:16:76:ab:27:99:3e:ed:e9:
         6c:5a:6f:00:0f:e1:1c:5a:ee:b6:31:ce:69:73:45:4d:5e:ca:
         d1:75:e5:13:8b:14:c5:f8:ec:ab:66:df:08:f7:08:91:31:89:
         42:fa:ad:6b:76:de:e9:ed:2a:9d:f3:81:af:50:27:35:19:2e:
         f0:60:e4:c0:f9:90:f9:6b:77:ea:38:60:51:24:c4:c6:72:29:
         28:11:5f:a3:b4:50:70:cc:36:fa:28:4e:d3:14:86:81:99:85:
         0e:0d:53:0f:42:b3:93:dc:5b:79:55:36:c7:0c:9b:65:f1:4c:
         2b:d7:9f:80:cd:6f:0f:c4:77:2c:53:54:4c:2a:b9:b5:c0:fc:
         f0:ca:11:be:d9:db:30:68:f8:8f:a7:e5:87:cb:30:cd:58:96:
         6a:6f:e9:ab:4d:d4:c2:79:3a:75:51:72:e8:88:45:b7:8a:0f:
         5e:f7:ee:2c:1a:7d:e8:9b:b7:64:9f:a5:86:81:2e:73:e6:7f:
         0b:4f:70:6f:bd:1c:25:51:30:54:83:6d:da:34:61:67:c8:5c:
         91:0a:46:12:11:aa:6c:30:89:47:32:3b:86:50:d4:99:d5:18:
         19:3a:a9:35:5e:34:b8:e5:74:09:a4:90:e9:6d:4e:dd:d8:4c:
         6b:40:ab:81
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org