Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a383230303a3a2f34302d3430203d3e20323639323032.roa
File:                     323830343a363066343a383230303a3a2f34302d3430203d3e20323639323032.roa (raw, json)
Hash identifier:          RZLOw3k/6/UtaKxTrjGSSSj4e1pdQYe3SQZwZK1AlzM=
Subject key identifier:   35:10:9E:63:C5:29:D7:A0:BA:87:62:4F:C0:E3:F4:D1:4B:B9:25:BD
Certificate issuer:       /CN=211521895B0953E6883D5163D7C6562ED21685BD
Certificate serial:       639BED1C0AC4809425BBE198A89DAF2F32147F71
Authority key identifier: 21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a383230303a3a2f34302d3430203d3e20323639323032.roa
Signing time:             Mon 06 Feb 2023 22:18:13 +0000
ROA not before:           Mon 06 Feb 2023 22:13:13 +0000
ROA not after:            Mon 05 Feb 2024 22:18:13 +0000
asID:                     269202
IP address blocks:        2804:60f4:8200::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            63:9b:ed:1c:0a:c4:80:94:25:bb:e1:98:a8:9d:af:2f:32:14:7f:71
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211521895B0953E6883D5163D7C6562ED21685BD
        Validity
            Not Before: Feb  6 22:13:13 2023 GMT
            Not After : Feb  5 22:18:13 2024 GMT
        Subject: CN=35109E63C529D7A0BA87624FC0E3F4D14BB925BD
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f1:85:b2:5b:4b:a1:f7:3c:a8:70:f3:59:db:2b:
                    f9:ec:2d:f2:8c:0a:7c:c8:75:7f:6b:6b:c6:ea:07:
                    80:e8:a8:97:a6:13:ff:4e:01:f9:7e:1a:8d:6c:a2:
                    a3:5f:a5:ef:78:ed:cb:84:f6:bd:d5:58:27:36:ee:
                    1a:c7:d4:e5:ab:35:cb:bc:45:a2:1f:02:80:c3:d6:
                    bd:1d:a3:dc:99:29:1b:0b:33:36:5a:4a:b7:36:95:
                    96:23:31:7e:c6:29:94:6d:e2:67:cb:53:a1:4e:4b:
                    d4:f3:27:b2:e1:25:43:a6:bb:de:60:6c:e8:23:ac:
                    e8:10:40:30:1f:03:0d:32:1c:01:e9:59:bd:84:31:
                    21:c9:b3:d7:de:21:3c:4e:41:18:bb:a9:56:ae:a3:
                    d3:13:87:36:0c:20:ad:1e:ec:35:1b:b0:d5:bf:94:
                    81:66:9e:62:ef:95:01:e1:6b:e4:eb:31:59:56:0d:
                    69:8d:6f:8f:88:d1:fc:bf:49:9d:5d:d8:27:30:37:
                    49:bd:d9:b4:86:1d:0f:80:0b:28:58:e7:67:d7:b1:
                    2b:31:cd:75:69:87:83:e5:52:48:18:75:bd:56:59:
                    b0:02:a6:b6:7b:af:06:4c:cf:d9:31:44:8e:9d:78:
                    2a:bd:8c:b0:3d:69:a0:67:ff:70:13:15:8e:bb:7e:
                    3c:05
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                35:10:9E:63:C5:29:D7:A0:BA:87:62:4F:C0:E3:F4:D1:4B:B9:25:BD
            X509v3 Authority Key Identifier:
                keyid:21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/211521895B0953E6883D5163D7C6562ED21685BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a383230303a3a2f34302d3430203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4:8200::/40

    Signature Algorithm: sha256WithRSAEncryption
         73:56:cd:30:e4:b5:1c:a2:57:fa:eb:d2:12:35:55:e1:9f:53:
         a1:cc:a2:32:79:a9:68:02:64:7f:90:a5:22:69:9a:4a:81:86:
         79:22:5c:19:98:43:0e:c6:0d:07:4e:0d:cf:a3:4e:81:0e:1f:
         e0:ab:d0:6b:98:7a:3e:a2:b8:64:da:b7:5d:4f:a2:a8:c0:c0:
         de:7f:8f:46:b2:b5:52:0e:e7:50:b5:18:b4:07:a1:09:54:f1:
         21:61:fa:ee:d9:02:8a:0a:ac:5f:d9:b5:7f:bd:8d:bb:07:a8:
         a5:49:58:27:3c:4b:05:ef:cc:8b:48:56:b9:79:2e:49:c3:62:
         33:0a:e1:48:10:d3:6b:b6:5f:ab:3c:5e:21:0c:94:ed:ff:ff:
         ac:e8:ac:f2:ff:1e:b7:c1:ee:34:9d:6b:5f:55:bb:36:a6:85:
         0d:80:33:aa:e1:58:c6:d0:bf:a9:de:10:c5:38:1c:88:d0:d7:
         c9:9a:11:0d:99:73:e5:07:62:4a:45:ae:31:3f:d0:4e:f9:79:
         c9:1e:9b:16:5c:65:bb:41:29:30:65:48:ca:a9:eb:0d:d5:18:
         21:df:e0:b2:e4:78:24:dc:0b:e0:62:78:6b:a4:ae:6a:ae:8b:
         ec:13:e9:c0:ed:2a:26:23:ab:bf:e3:35:0c:58:be:e7:59:44:
         e8:94:a1:fd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org