Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a3a2f33362d3336203d3e20323639323032.roa
File:                     323830343a363066343a3a2f33362d3336203d3e20323639323032.roa (raw, json)
Hash identifier:          ukeTRa0n/RTSnuGYfJVBBsdw6gjgyLq5wgWA4Kr/xYs=
Subject key identifier:   29:8A:6F:6B:25:70:75:90:99:D5:3E:12:74:2D:2E:51:2C:48:7E:54
Certificate issuer:       /CN=211521895B0953E6883D5163D7C6562ED21685BD
Certificate serial:       3037851B85A8C2F5860F273813A93ECB76A29A39
Authority key identifier: 21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a3a2f33362d3336203d3e20323639323032.roa
Signing time:             Mon 06 Feb 2023 22:16:34 +0000
ROA not before:           Mon 06 Feb 2023 22:11:34 +0000
ROA not after:            Mon 05 Feb 2024 22:16:34 +0000
asID:                     269202
IP address blocks:        2804:60f4::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            30:37:85:1b:85:a8:c2:f5:86:0f:27:38:13:a9:3e:cb:76:a2:9a:39
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=211521895B0953E6883D5163D7C6562ED21685BD
        Validity
            Not Before: Feb  6 22:11:34 2023 GMT
            Not After : Feb  5 22:16:34 2024 GMT
        Subject: CN=298A6F6B2570759099D53E12742D2E512C487E54
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ca:2b:7c:d8:86:91:09:4a:b3:f7:8c:75:7d:87:
                    1f:5a:45:1e:b1:dc:db:d8:e7:00:3f:99:95:15:9f:
                    3a:5e:dc:20:2e:c7:11:b7:4d:01:bc:7b:ef:39:5e:
                    f5:ca:38:dc:41:07:4c:e1:38:96:b1:50:94:67:c8:
                    f1:83:f4:02:19:e4:d6:9c:5b:75:1d:13:0b:02:55:
                    86:e6:cf:29:c7:5f:5e:74:5a:80:fd:71:72:cb:35:
                    ed:b2:0c:0c:28:17:50:aa:aa:6e:8c:ac:ee:6b:e3:
                    48:e8:fb:7c:aa:e9:28:f1:84:fb:bb:0b:1f:a3:99:
                    a8:8b:1c:0e:ed:79:96:1b:1e:0b:0e:a3:2e:c9:08:
                    61:2f:0e:21:54:34:36:e1:f5:11:3c:83:71:b8:6b:
                    4e:f0:40:46:01:ff:7d:2c:bf:da:e5:44:d9:2a:9a:
                    2f:eb:d4:b6:78:2a:5c:05:61:6c:8f:fc:dc:41:6b:
                    6b:78:73:b5:38:62:b4:cf:17:96:59:fa:7d:16:ce:
                    3d:75:99:18:3e:98:de:96:88:c9:d4:a0:60:ac:24:
                    a3:ff:5c:c1:9c:88:9b:d1:d0:f3:ed:50:d7:10:a3:
                    1f:5e:1a:53:78:ff:3e:a5:10:45:3d:ae:e9:4b:b4:
                    5b:f3:4e:09:da:27:0a:37:0d:0a:f6:b5:6e:25:1b:
                    f7:73
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                29:8A:6F:6B:25:70:75:90:99:D5:3E:12:74:2D:2E:51:2C:48:7E:54
            X509v3 Authority Key Identifier:
                keyid:21:15:21:89:5B:09:53:E6:88:3D:51:63:D7:C6:56:2E:D2:16:85:BD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/211521895B0953E6883D5163D7C6562ED21685BD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/211521895B0953E6883D5163D7C6562ED21685BD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3KTipCQhHAKEUbDjCq3SPWqHPmoS8rXxdT7aR5gSHg6a/1/323830343a363066343a3a2f33362d3336203d3e20323639323032.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:60f4::/36

    Signature Algorithm: sha256WithRSAEncryption
         4f:5b:5e:01:43:18:02:af:61:04:86:b1:db:5b:1c:84:10:80:
         d8:3f:cb:f9:43:eb:b4:46:86:30:d8:e5:c4:7c:c2:24:d5:58:
         5a:0f:b2:67:0a:c9:5e:f3:1b:3b:ae:07:8f:9f:b3:24:4e:b6:
         52:1a:00:65:b3:21:a9:ea:f7:dd:dd:6b:1b:13:17:41:e6:2f:
         2d:e6:de:84:c0:84:0f:3a:27:26:f8:4c:92:4d:a5:3a:b0:5d:
         92:53:d4:89:b5:da:dc:b8:b1:74:3c:4a:45:1c:80:ab:b8:a5:
         1a:94:79:6f:25:cb:54:40:da:a3:f5:b0:82:79:ac:a5:b3:56:
         90:76:ac:98:ea:6d:79:4c:53:bf:70:10:e6:05:e8:ba:3a:50:
         70:15:ad:72:2e:f9:5f:c4:71:fb:34:bd:6e:b6:42:6a:68:99:
         b0:9e:a3:2b:d7:98:0c:88:1d:12:7b:0f:8f:e5:a0:74:8c:24:
         0c:6a:18:11:20:f0:02:be:6e:a9:3e:63:cf:fa:38:07:2c:ed:
         20:69:85:c2:39:2a:63:85:89:a6:46:4b:43:6b:39:0b:16:b0:
         85:94:f0:a8:b7:5d:24:82:0a:c5:58:49:fa:f4:1f:9d:30:f7:
         2b:2c:94:1a:c4:0a:22:59:ad:b0:bf:95:82:cb:eb:38:97:de:
         b1:22:7d:e0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:21 2024 by rpki-client on console-ams.rpki-client.org