Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a343030303a3a2f33362d3336203d3e20323635303130.roa
File:                     323830343a333136303a343030303a3a2f33362d3336203d3e20323635303130.roa (raw, json)
Hash identifier:          OwzgUwjk/rzWKf3d/TrXrt7pp6Ws4xqd8d3CJVbvYjE=
Subject key identifier:   75:E2:72:52:81:DE:93:B2:E8:42:A0:33:10:05:65:61:52:95:8C:08
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       70E9675C333BBBA308C6781693F665076B78D437
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a343030303a3a2f33362d3336203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:45 +0000
ROA not before:           Thu 04 Apr 2024 05:58:45 +0000
ROA not after:            Thu 03 Apr 2025 06:03:45 +0000
asID:                     265010
IP address blocks:        2804:3160:4000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:e9:67:5c:33:3b:bb:a3:08:c6:78:16:93:f6:65:07:6b:78:d4:37
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:45 2024 GMT
            Not After : Apr  3 06:03:45 2025 GMT
        Subject: CN=75E2725281DE93B2E842A0331005656152958C08
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:86:e2:a2:f2:02:24:35:b1:cc:4e:b3:3c:3c:
                    4e:b8:5f:e0:ad:0d:76:60:01:66:97:5a:73:09:9e:
                    1a:76:44:69:ce:c0:31:e4:16:99:c2:c6:66:82:d5:
                    f6:b8:33:ba:b0:90:db:13:c0:19:7e:87:35:60:79:
                    af:3b:d4:84:9e:0b:a1:98:ce:8c:89:ab:0a:2b:76:
                    b2:9b:b6:5f:b9:b6:93:6b:64:bc:e7:2b:0b:73:26:
                    5f:0d:ce:8f:b0:97:57:c7:23:10:2c:bc:57:81:e8:
                    5b:9a:70:79:8b:1a:cc:e9:d0:61:41:88:3d:17:62:
                    3d:e8:5c:95:77:14:4d:b7:4c:83:24:93:f7:0a:8b:
                    c5:0d:04:67:72:34:18:63:06:9b:63:ff:19:a2:97:
                    de:8e:f3:0a:5f:bc:03:42:f2:ca:55:c9:0b:5a:75:
                    ad:3b:e9:ed:88:fa:9b:5f:64:21:14:cd:60:47:78:
                    3f:b3:f8:c8:83:46:31:92:71:ff:7d:cd:b8:59:83:
                    7b:d6:86:ad:a8:72:0c:ee:7a:ca:c4:8b:cc:98:a0:
                    ce:58:6a:a8:53:e0:f0:e1:fb:49:70:cb:d1:02:3c:
                    ec:11:47:a0:40:ae:10:6b:9b:71:3e:7c:a3:ab:cb:
                    ea:bf:66:76:4f:f7:f9:07:76:58:8e:5b:21:fa:bd:
                    af:1d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                75:E2:72:52:81:DE:93:B2:E8:42:A0:33:10:05:65:61:52:95:8C:08
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a343030303a3a2f33362d3336203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:4000::/36

    Signature Algorithm: sha256WithRSAEncryption
         23:b8:ec:41:c8:47:1e:c3:b2:ad:ab:06:7f:08:56:19:98:04:
         03:90:bc:64:19:4f:fb:93:77:a3:aa:4d:f2:1d:ef:66:d3:7e:
         bf:67:d8:15:81:e8:cd:89:f8:87:22:1d:8b:b2:cf:4c:1e:54:
         8b:73:56:b0:7c:56:9f:f9:99:0c:95:8b:76:22:65:2a:73:c6:
         ce:e2:b5:d9:64:98:0c:f3:c6:b0:49:25:7d:82:f6:97:e4:75:
         11:0e:b7:ad:66:4a:23:a2:ed:9e:03:28:57:61:d8:e1:bb:fd:
         d0:af:4c:81:d2:9c:0d:b3:b1:e1:f2:8d:bc:28:ab:d2:c1:13:
         aa:4f:c1:ea:23:a7:25:ca:ef:ec:52:14:d0:b2:be:44:60:30:
         62:40:c7:39:84:47:41:77:fa:2b:00:a8:31:8a:2f:7c:cd:ab:
         f9:6e:07:8b:05:15:4a:a9:a4:3b:aa:17:cf:1d:90:34:f4:b3:
         a3:0f:c0:eb:91:e7:df:56:28:51:9d:56:59:de:9c:be:20:ab:
         82:e1:4f:3e:51:6a:35:7d:2a:3f:5a:24:25:fb:4a:a1:ed:a2:
         c1:4a:28:d8:65:8e:9c:07:67:34:53:5a:aa:e4:24:e2:df:d3:
         ee:87:24:02:3b:fd:3d:05:53:14:03:f0:33:fe:f3:de:90:04:
         4d:9f:13:c5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org