Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a383130303a3a2f34302d3430203d3e20323639323032.roa
File:                     323830343a363066343a383130303a3a2f34302d3430203d3e20323639323032.roa (raw, json)
Hash identifier:          gOzCi6lan+CBhS4E1bXSZN+ReN+tK2VZmKsfeuYn1Cc=
Subject key identifier:   34:15:06:51:73:46:83:D1:B8:EC:9E:B5:1C:39:19:AD:9B:45:B2:07
Certificate issuer:       /CN=0E53B69644D25C8C2F97BD8686E0389E08280508
Certificate serial:       6ED6A4C0350458D1C5820B31A714C5A31C139835
Authority key identifier: 0E:53:B6:96:44:D2:5C:8C:2F:97:BD:86:86:E0:38:9E:08:28:05:08
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E53B69644D25C8C2F97BD8686E0389E08280508.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a383130303a3a2f34302d3430203d3e20323639323032.roa
Signing time:             Sun 28 May 2023 13:14:37 +0000
ROA not before:           Sun 28 May 2023 13:09:37 +0000
ROA not after:            Sun 26 May 2024 13:14:37 +0000
asID:                     269202
IP address blocks:        2804:60f4:8100::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6e:d6:a4:c0:35:04:58:d1:c5:82:0b:31:a7:14:c5:a3:1c:13:98:35
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0E53B69644D25C8C2F97BD8686E0389E08280508
        Validity
            Not Before: May 28 13:09:37 2023 GMT
            Not After : May 26 13:14:37 2024 GMT
        Subject: CN=34150651734683D1B8EC9EB51C3919AD9B45B207
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:14:b1:cb:65:04:69:74:f6:d8:92:e6:02:e5:
                    45:86:45:2e:de:1e:2c:ca:b4:05:ae:14:12:de:aa:
                    ef:27:89:45:7f:a2:15:f4:47:e9:e7:11:77:2c:63:
                    e8:97:df:7f:13:84:48:90:e0:a2:04:b5:fc:fc:86:
                    b9:76:1e:78:6f:8f:c7:20:90:d8:6c:79:aa:bd:73:
                    5d:4e:a1:3f:45:84:e4:d0:3a:76:9c:99:b1:1e:ab:
                    d7:1b:bf:d9:6b:49:30:f9:cc:6c:b0:c9:93:9f:4c:
                    46:d9:5c:e9:f5:02:60:87:ca:6a:90:6d:85:63:d0:
                    a1:26:5b:21:8f:f9:c7:bf:e0:58:06:fa:e8:cd:9b:
                    d0:3f:0b:e7:7a:72:f5:5f:db:59:98:99:17:dd:19:
                    80:0e:b2:e9:3b:77:a0:1e:82:8b:7b:4f:ba:2b:a8:
                    3a:25:74:c9:6e:c7:03:36:3a:fd:ad:11:fb:7f:4f:
                    9b:ae:38:61:06:6e:4d:d1:a6:44:76:32:e1:93:6d:
                    09:37:bd:59:f6:62:b2:b7:ae:06:e8:69:5e:df:df:
                    f0:63:7b:cd:5d:b9:97:2c:e8:f8:b7:fc:b3:bd:68:
                    1d:f4:46:9a:29:5f:ec:87:6c:78:56:28:bb:45:4d:
                    f6:94:47:cf:dc:fc:a4:62:e2:66:82:88:d2:b3:f7:
                    d5:db
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                34:15:06:51:73:46:83:D1:B8:EC:9E:B5:1C:39:19:AD:9B:45:B2:07
            X509v3 Authority Key Identifier:
                keyid:0E:53:B6:96:44:D2:5C:8C:2F:97:BD:86:86:E0:38:9E:08:28:05:08

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/0E53B69644D25C8C2F97BD8686E0389E08280508.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0E53B69644D25C8C2F97BD8686E0389E08280508.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/0/323830343a363066343a383130303a3a2f34302d3430203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4:8100::/40

    Signature Algorithm: sha256WithRSAEncryption
         5d:7a:5f:f0:06:d1:7d:8b:94:93:7a:21:50:79:5b:25:3f:b2:
         60:cc:ee:fd:a2:81:3e:3b:08:19:ff:21:31:21:47:8a:91:b6:
         ca:39:b8:b5:95:9e:d6:d3:ca:34:9c:69:37:8e:71:3b:19:da:
         65:7d:51:a2:00:25:96:2b:44:d7:9b:77:33:8f:8c:8f:8d:96:
         d6:16:ae:e5:65:30:80:c4:06:c7:52:08:9e:1a:ab:0f:ab:77:
         0e:33:f1:d9:e2:44:73:50:4c:23:1b:5b:f6:38:b6:c8:dd:3f:
         df:f1:b3:df:5a:05:a7:9f:fb:43:78:ee:0e:72:4f:58:f3:c5:
         41:4e:fc:fb:98:0f:db:0a:46:30:47:31:53:da:28:99:8b:b7:
         6a:23:21:bd:5e:98:7c:41:b0:ea:5a:be:78:3d:eb:ad:dd:7b:
         bf:32:1c:6d:1f:c6:e4:0f:18:cd:7c:2e:2c:f4:3a:b0:ed:95:
         d6:30:8e:a3:34:ff:83:06:ab:7d:40:62:2e:ec:64:92:f8:6a:
         3f:af:4e:b5:6d:8c:9f:77:8d:03:e9:0d:7a:1b:09:b5:df:b7:
         b8:c9:0f:64:e9:42:dd:34:d7:bd:a6:e1:ba:00:10:c0:d8:cc:
         ef:a4:f0:b9:f5:20:42:32:c7:6a:42:fb:ef:33:a7:8f:61:e1:
         8a:0a:6f:91
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org