Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a383230303a3a2f33392d3339203d3e20323639323032.roa
File:                     323830343a363066343a383230303a3a2f33392d3339203d3e20323639323032.roa (raw, json)
Hash identifier:          T02npxM/QMZMOvZWPcByf3idkq0w/0qjQff24FICAGY=
Subject key identifier:   0E:68:B6:73:C7:DB:DF:C5:0D:E3:24:35:EE:20:43:D7:0C:01:5D:76
Certificate issuer:       /CN=211521895B0953E6883D5163D7C6562ED21685BD
Certificate serial:       4EB86D57E72EFC3073F4311357B1722166941F7F
Authority key identifier: 21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a383230303a3a2f33392d3339203d3e20323639323032.roa
Signing time:             Mon 06 Feb 2023 22:18:09 +0000
ROA not before:           Mon 06 Feb 2023 22:13:09 +0000
ROA not after:            Mon 05 Feb 2024 22:18:09 +0000
asID:                     269202
IP address blocks:        2804:60f4:8200::/39 maxlen: 39

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4e:b8:6d:57:e7:2e:fc:30:73:f4:31:13:57:b1:72:21:66:94:1f:7f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211521895B0953E6883D5163D7C6562ED21685BD
        Validity
            Not Before: Feb  6 22:13:09 2023 GMT
            Not After : Feb  5 22:18:09 2024 GMT
        Subject: CN=0E68B673C7DBDFC50DE32435EE2043D70C015D76
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:dc:bf:ff:a3:2f:93:d1:44:71:2d:ef:6d:06:
                    ca:fe:37:c6:98:d8:3d:df:af:c4:ff:f5:a2:3a:f2:
                    63:5a:89:87:df:5c:4c:ca:87:0c:13:50:19:77:74:
                    5d:f4:80:b0:5e:80:dd:7a:ba:01:e1:85:24:08:1d:
                    f7:b8:4f:f3:31:f6:36:e4:78:78:94:16:eb:a5:f4:
                    8c:ed:5c:d9:f5:91:0e:04:c8:cb:41:0a:65:36:3e:
                    ce:4d:35:87:f2:62:56:44:af:48:48:db:ed:f2:11:
                    b7:4c:19:4b:e2:f5:e0:76:f9:df:86:9c:38:e3:93:
                    21:a6:b3:2d:3e:80:1d:69:96:00:80:5a:35:c4:68:
                    3b:32:cf:d2:47:6f:12:8b:5f:25:ba:8f:0d:0b:f4:
                    3a:a7:82:b4:c4:f3:d3:1c:bc:cf:6c:cc:ec:8f:12:
                    92:92:e9:a9:64:72:02:53:ae:c9:e4:5e:24:c2:ce:
                    e9:a9:ea:5d:e9:54:f3:b8:5a:a9:9f:c9:9d:42:f1:
                    d5:61:85:88:be:6f:71:1b:fc:ed:9f:ce:99:14:d1:
                    12:6c:7f:0c:41:36:13:2f:53:92:8d:f8:8b:f4:03:
                    e4:c2:ed:9c:5e:aa:82:66:65:1a:77:c3:c8:52:bf:
                    c0:e9:85:40:5f:c5:ed:ac:02:fc:1f:f0:63:1d:50:
                    74:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0E:68:B6:73:C7:DB:DF:C5:0D:E3:24:35:EE:20:43:D7:0C:01:5D:76
            X509v3 Authority Key Identifier:
                keyid:21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/211521895B0953E6883D5163D7C6562ED21685BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a383230303a3a2f33392d3339203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4:8200::/39

    Signature Algorithm: sha256WithRSAEncryption
         5d:a8:a5:45:2a:a3:d3:08:a4:fd:0c:2c:92:30:cb:f8:20:47:
         32:66:dd:92:88:96:1f:dd:ab:4e:91:8d:ea:8a:3c:df:c4:1d:
         7a:b8:23:40:8d:54:b6:10:cf:ce:83:c0:f5:2e:ac:09:37:e6:
         e0:07:e9:b0:df:9b:a2:e2:eb:4a:b3:20:a5:2f:b2:03:a6:67:
         44:0e:95:ec:9e:28:41:70:af:d7:9e:a1:46:03:a4:a9:af:74:
         a8:39:14:61:7f:e6:62:b1:c9:fe:6e:74:7a:fe:c2:8e:3c:67:
         f0:c8:c9:3a:db:f8:47:1b:21:c4:de:c3:b2:37:d7:cf:3b:85:
         36:c3:e1:a3:92:c2:9d:14:4f:01:3e:aa:5e:64:a6:d6:e1:f7:
         99:ce:fb:97:4c:44:34:f0:dc:24:d3:ea:2f:ac:89:9e:9a:26:
         23:0b:ed:93:15:95:5a:bb:c3:7e:18:67:8c:9c:ac:63:6a:89:
         8e:b0:c1:ee:91:0e:9f:ae:42:32:1d:ae:a4:59:62:1e:aa:95:
         d6:ef:c3:f7:7b:79:42:03:45:46:85:c0:51:5f:75:64:dd:c4:
         51:ed:c5:10:1d:e4:5e:0e:b2:3c:8e:78:6c:60:f5:7c:67:b6:
         10:a5:17:05:d2:96:8d:fe:c9:c7:29:03:a1:c8:e2:69:93:c8:
         5d:04:ad:95
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:26 2024 by rpki-client on console-fra.rpki-client.org