Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa
File:                     323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa (raw, json)
Hash identifier:          upuZJjaGAAhWNuNQDjFuJXDZTqdsA/pT0+a4X1cFyC8=
Subject key identifier:   1E:3A:5F:08:2B:DE:E8:F8:75:D6:5E:8F:4C:26:AA:DB:E6:3C:59:71
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       0EC82291D2BB5013A74F9223400D819848D173CC
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:48 +0000
ROA not before:           Thu 04 Apr 2024 05:58:48 +0000
ROA not after:            Thu 03 Apr 2025 06:03:48 +0000
asID:                     265010
IP address blocks:        2804:3160:7002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0e:c8:22:91:d2:bb:50:13:a7:4f:92:23:40:0d:81:98:48:d1:73:cc
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:48 2024 GMT
            Not After : Apr  3 06:03:48 2025 GMT
        Subject: CN=1E3A5F082BDEE8F875D65E8F4C26AADBE63C5971
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b2:96:30:03:d8:a7:e9:f5:10:11:6c:e5:34:ea:
                    bb:5f:c0:fa:4c:4f:09:06:21:5b:5c:ee:16:f9:23:
                    d0:af:7d:a0:47:52:d3:51:6f:96:d6:fd:42:19:82:
                    8d:e9:ec:8f:e5:58:25:30:c8:ba:b8:10:bc:57:fd:
                    3a:89:26:43:da:76:dd:f3:e1:61:9b:d3:ab:c7:bb:
                    a1:b1:bb:7a:54:e7:3f:d4:c5:83:66:f4:1d:08:9c:
                    0c:58:15:59:77:5b:d9:4e:cf:17:fd:dd:e6:b8:98:
                    55:98:e8:f5:97:2d:92:72:73:80:78:fb:69:1c:04:
                    51:bd:03:7f:87:9f:f5:bd:63:54:57:f6:aa:2d:3e:
                    49:7d:9a:ea:8f:71:72:f1:2c:18:82:ae:fd:55:a4:
                    b0:2d:17:53:4a:1b:cc:27:41:50:d6:39:ad:0c:65:
                    f0:66:1c:7f:44:11:c0:81:e0:f4:80:85:ae:72:97:
                    3e:d2:e3:da:9d:c3:93:be:0a:ff:db:79:f4:5e:43:
                    16:c2:b1:a1:0e:a5:d6:05:58:1d:51:51:11:72:6c:
                    6b:87:6c:f1:ad:fe:cb:9b:8b:2a:14:01:d6:8c:f6:
                    92:2f:e0:66:29:19:66:3e:be:29:67:86:42:2f:47:
                    f7:b1:f0:91:e4:16:ba:85:01:3c:71:93:fb:c4:f0:
                    9c:4b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                1E:3A:5F:08:2B:DE:E8:F8:75:D6:5E:8F:4C:26:AA:DB:E6:3C:59:71
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a373030323a3a2f34382d3438203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160:7002::/48

    Signature Algorithm: sha256WithRSAEncryption
         76:2f:2e:ee:76:48:02:b4:be:6e:95:bf:c3:c9:cb:52:7b:d8:
         7f:6d:f0:59:a5:49:a7:91:0c:a7:83:e9:63:30:70:99:6c:ea:
         8a:46:1b:0e:a3:35:55:00:20:14:8b:a7:cc:54:7c:a8:86:0e:
         55:92:3d:f8:40:ad:4a:a9:12:e8:ab:ea:98:6f:8c:87:23:e0:
         10:5e:4d:7a:ca:b3:d7:52:17:55:e4:0f:8a:d2:94:dc:d5:ec:
         a0:12:c4:bf:8c:02:4c:a5:5e:64:6e:e9:e0:24:e2:fe:97:f5:
         61:9c:95:42:25:dd:56:fa:28:7b:de:12:1a:2c:be:e9:98:ee:
         a9:4e:67:ce:17:2b:31:54:48:2d:30:b1:ca:7c:e1:e6:db:b0:
         99:cc:72:0f:f0:b6:2b:cf:4d:40:5c:ba:e5:4a:c8:a1:3f:a4:
         6f:2a:57:72:d0:74:7c:d0:53:15:93:ab:ac:15:fe:dc:4d:7e:
         11:86:dd:4d:08:f2:ff:e2:c6:03:fa:2a:d2:48:7f:13:84:0b:
         a5:27:87:86:cf:f7:ad:0e:ca:4c:ca:df:35:7c:f6:9f:93:73:
         74:55:37:b3:b5:df:6f:b7:5b:08:92:d9:34:01:4c:eb:5c:09:
         70:ef:86:c7:53:7d:06:9c:3f:7e:6c:fb:96:e4:41:5f:dd:98:
         d2:d7:e7:e5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org