Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a3a2f34362d3436203d3e20323635303130.roa
File:                     323830343a333136303a3a2f34362d3436203d3e20323635303130.roa (raw, json)
Hash identifier:          J1YpVcm0Fko5i6ESnRuAo8lG++ClnMKBI9qrEPKZ02o=
Subject key identifier:   CB:CC:C7:BA:C6:7C:A5:D0:D6:13:7E:FF:0B:EA:E3:11:7E:C6:B3:09
Certificate issuer:       /CN=687F395543B5D15C9C42523E96B842CE61DD4B90
Certificate serial:       0B0396A69E2CEDBD13DA92456E3052064483CC5C
Authority key identifier: 68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a3a2f34362d3436203d3e20323635303130.roa
Signing time:             Thu 04 Apr 2024 06:03:43 +0000
ROA not before:           Thu 04 Apr 2024 05:58:43 +0000
ROA not after:            Thu 03 Apr 2025 06:03:43 +0000
asID:                     265010
IP address blocks:        2804:3160::/46 maxlen: 46

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:03:96:a6:9e:2c:ed:bd:13:da:92:45:6e:30:52:06:44:83:cc:5c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=687F395543B5D15C9C42523E96B842CE61DD4B90
        Validity
            Not Before: Apr  4 05:58:43 2024 GMT
            Not After : Apr  3 06:03:43 2025 GMT
        Subject: CN=CBCCC7BAC67CA5D0D6137EFF0BEAE3117EC6B309
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9a:71:ff:75:18:b7:e0:2a:c0:9f:ec:47:bc:b8:
                    a6:6d:43:e4:9c:c7:8b:ad:4e:5c:46:15:30:c1:8c:
                    50:fd:1d:7c:d6:d4:7a:d9:bd:93:82:22:0b:24:d5:
                    53:39:e0:f8:1f:df:0f:fd:a3:d9:77:8c:cb:c8:44:
                    32:54:d4:9d:7b:16:31:b7:43:c4:8f:63:bb:97:d6:
                    96:a3:33:bd:17:77:c7:e1:21:d3:56:77:27:ed:f4:
                    fd:a8:c9:e1:85:55:72:07:7f:c9:fc:b0:ed:eb:19:
                    43:e5:17:f2:95:22:24:28:76:e5:99:0b:a9:a7:49:
                    1e:b2:aa:6f:44:bb:90:96:63:44:91:00:7e:54:b8:
                    c1:5b:a6:0f:38:10:8b:b6:f4:bc:a8:9b:b4:3f:eb:
                    2e:eb:e8:26:50:3b:bd:1d:3e:d7:a5:88:88:ae:14:
                    86:76:21:b6:8d:1d:41:c0:cd:bd:a4:da:11:f7:a0:
                    3e:70:17:4b:bf:11:6f:ec:e3:b0:9a:56:24:83:e8:
                    27:4b:13:db:0b:a1:82:61:95:93:3f:8a:00:df:df:
                    f5:59:2d:ea:0a:7b:bc:43:c5:17:26:9b:c3:3b:9d:
                    6d:b0:47:26:d8:f3:89:11:67:13:69:55:63:54:0a:
                    5e:f2:8b:6b:ce:d5:21:98:6f:ea:08:d6:99:66:1f:
                    d8:c5
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CB:CC:C7:BA:C6:7C:A5:D0:D6:13:7E:FF:0B:EA:E3:11:7E:C6:B3:09
            X509v3 Authority Key Identifier:
                keyid:68:7F:39:55:43:B5:D1:5C:9C:42:52:3E:96:B8:42:CE:61:DD:4B:90

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/687F395543B5D15C9C42523E96B842CE61DD4B90.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/687F395543B5D15C9C42523E96B842CE61DD4B90.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3ChQj54LqRrDzJ8dSgTHBuWvWJGgBZJEQiuvJoJgVuRw/1/323830343a333136303a3a2f34362d3436203d3e20323635303130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3160::/46

    Signature Algorithm: sha256WithRSAEncryption
         69:de:8e:73:5f:3d:12:68:3c:85:47:cc:9e:3e:59:bc:71:43:
         26:24:2a:c4:c6:31:44:13:07:d6:b3:45:b0:55:d8:62:47:97:
         fe:00:5c:d5:74:26:b9:1c:a7:12:66:3b:d7:b5:db:2a:ea:d1:
         97:6c:68:29:96:15:68:82:44:d5:b6:96:f5:8b:a2:4f:93:bb:
         9f:90:ef:9d:45:f6:c9:c1:fc:2d:c1:d7:96:64:5e:9e:79:18:
         50:b4:3a:a4:d7:56:28:17:7e:09:38:40:3b:87:2e:15:ff:51:
         f4:5f:f0:84:23:9c:71:a8:ab:81:8a:2c:09:2c:13:bb:aa:83:
         08:83:7a:b3:66:c7:24:e7:1b:54:43:fb:a9:30:20:6d:b3:6e:
         4a:de:91:81:41:0c:02:a3:36:ba:4a:2c:3a:89:82:54:d9:d5:
         69:9e:26:a9:19:f9:93:1f:4d:1a:1d:04:fc:31:13:e2:d4:67:
         21:40:1e:1b:83:d4:68:58:06:ac:66:50:fb:b5:0d:ca:d9:d7:
         40:cb:75:75:0a:74:7b:f3:06:68:88:ad:65:9a:cc:a7:7c:c7:
         43:0b:a7:67:89:ea:b0:b2:23:e3:b3:d9:30:53:9f:fe:83:63:
         ea:6f:08:e4:5f:af:12:b2:91:62:fd:51:aa:9c:3c:17:e1:d4:
         c4:39:b5:b9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:20 2024 by rpki-client on console-ams.rpki-client.org