Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/323830343a363862343a3a2f33322d3438203d3e20323639373130.roa
File:                     323830343a363862343a3a2f33322d3438203d3e20323639373130.roa (raw, json)
Hash identifier:          ssCUXOxlio1JyreIcjNE3Q07EJty3Vo+1LG3bYkhql8=
Subject key identifier:   3B:B6:37:E8:01:07:CD:DD:66:37:F2:29:10:CE:63:5F:65:8F:CB:28
Certificate issuer:       /CN=2B87B88FB4107377B1B3DA934801B74900693940
Certificate serial:       4478FE499AD92EF57A618F624F936BE0DF0BCB81
Authority key identifier: 2B:87:B8:8F:B4:10:73:77:B1:B3:DA:93:48:01:B7:49:00:69:39:40
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B87B88FB4107377B1B3DA934801B74900693940.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/323830343a363862343a3a2f33322d3438203d3e20323639373130.roa
Signing time:             Wed 14 Feb 2024 17:28:36 +0000
ROA not before:           Wed 14 Feb 2024 17:23:36 +0000
ROA not after:            Wed 12 Feb 2025 17:28:36 +0000
asID:                     269710
IP address blocks:        2804:68b4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:78:fe:49:9a:d9:2e:f5:7a:61:8f:62:4f:93:6b:e0:df:0b:cb:81
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2B87B88FB4107377B1B3DA934801B74900693940
        Validity
            Not Before: Feb 14 17:23:36 2024 GMT
            Not After : Feb 12 17:28:36 2025 GMT
        Subject: CN=3BB637E80107CDDD6637F22910CE635F658FCB28
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d4:cd:68:2e:11:7d:47:5f:d3:3d:53:e6:70:1e:
                    b4:39:6d:37:51:7e:81:ef:39:d3:e3:1e:d6:d7:53:
                    c1:0a:1e:89:77:94:29:b5:7f:22:21:7f:0d:4e:2e:
                    ca:4d:6e:fc:a3:cd:09:61:89:8f:09:83:8c:a9:d4:
                    6d:f7:70:24:28:ea:8a:a5:1b:01:a6:bb:02:6c:a8:
                    ba:b7:08:c2:8e:76:aa:07:a7:59:d1:7e:37:58:2a:
                    92:5e:e4:89:be:4a:81:a2:e2:6e:5b:2e:a6:0b:d2:
                    0e:9f:16:ce:4f:33:b0:aa:b7:7b:03:78:dd:fa:9d:
                    3a:c1:ba:89:54:80:0f:d3:2c:da:17:34:60:a0:79:
                    7b:14:26:47:5d:98:e8:28:cd:64:29:37:e9:4e:68:
                    03:3d:37:15:3b:c9:bb:3a:11:94:a1:13:ff:fd:61:
                    5b:09:04:b5:10:4b:ee:a3:73:69:67:90:c7:d4:b6:
                    91:0b:74:d2:6b:fb:a2:65:45:3b:58:f2:89:97:81:
                    77:b8:1c:fb:88:a6:42:a4:aa:e8:46:60:74:2f:99:
                    12:06:47:00:28:07:8b:f5:c3:a7:c9:b1:4d:c5:08:
                    01:0a:4f:e1:25:6d:58:b9:5f:6c:95:4b:04:9c:40:
                    bf:07:29:e3:2a:d0:a5:35:24:53:6e:2e:f3:bc:f9:
                    49:15
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                3B:B6:37:E8:01:07:CD:DD:66:37:F2:29:10:CE:63:5F:65:8F:CB:28
            X509v3 Authority Key Identifier:
                keyid:2B:87:B8:8F:B4:10:73:77:B1:B3:DA:93:48:01:B7:49:00:69:39:40

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/2B87B88FB4107377B1B3DA934801B74900693940.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2B87B88FB4107377B1B3DA934801B74900693940.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3S6JLonNup96iCmUg78XBB9eg7xwL3MvetSDLRd5xvWT/0/323830343a363862343a3a2f33322d3438203d3e20323639373130.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:68b4::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:29:5e:9e:fe:ad:15:5c:31:79:68:7b:e0:58:b9:db:d7:f0:
         7a:92:ae:58:c9:e6:9b:85:28:9d:06:1a:dd:d1:09:ea:bc:a2:
         2d:46:5f:00:c3:2a:b2:38:26:39:20:b1:e5:b7:fa:67:4a:84:
         9e:7c:23:77:e8:47:cb:49:ea:6e:f4:03:31:2d:36:31:85:13:
         33:83:d6:e6:ae:a9:de:c9:03:52:0c:57:8f:e1:6b:6a:af:21:
         bd:1f:89:13:9d:de:31:c1:46:d4:f3:02:b3:a9:35:55:1d:12:
         91:be:ae:b5:ff:c7:8b:ef:e5:a7:53:30:aa:98:31:ca:51:c5:
         8b:24:de:84:51:be:a1:e5:24:68:39:ef:99:06:f0:44:2d:82:
         65:15:8f:ab:c6:0d:14:b4:f0:0f:eb:52:45:7d:18:fd:31:1a:
         00:33:d3:8f:b7:37:a3:16:62:e0:25:6a:ac:a9:93:90:9a:d7:
         30:05:f2:fe:19:38:4c:3a:17:09:27:18:96:c9:09:d5:f7:af:
         28:c4:1d:c7:45:28:3a:9a:6e:93:cb:df:83:5a:39:08:6b:c5:
         19:68:6c:c1:07:2f:21:0f:92:e7:ea:17:0e:9b:de:b3:20:77:
         7c:8c:57:01:fa:22:f9:e8:c7:5c:3c:b5:7f:56:10:64:a8:fe:
         ae:7d:b4:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org