Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/323830343a356438383a3a2f33322d3438203d3e20323638393738.roa
File:                     323830343a356438383a3a2f33322d3438203d3e20323638393738.roa (raw, json)
Hash identifier:          OConXPluBtN7pz02j1C5kPtYxg9DKT5gFUXSm+SC3zc=
Subject key identifier:   8A:58:61:0C:F7:13:2A:81:FE:64:BB:EC:24:9F:90:14:FF:1A:D1:F4
Certificate issuer:       /CN=3069BE596AE6FD99F15867B76663D73952007F4C
Certificate serial:       032AF3775A537177B4D6A36E291AEBF81487C506
Authority key identifier: 30:69:BE:59:6A:E6:FD:99:F1:58:67:B7:66:63:D7:39:52:00:7F:4C
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3069BE596AE6FD99F15867B76663D73952007F4C.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/323830343a356438383a3a2f33322d3438203d3e20323638393738.roa
Signing time:             Thu 22 Feb 2024 11:26:39 +0000
ROA not before:           Thu 22 Feb 2024 11:21:39 +0000
ROA not after:            Thu 20 Feb 2025 11:26:39 +0000
asID:                     268978
IP address blocks:        2804:5d88::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            03:2a:f3:77:5a:53:71:77:b4:d6:a3:6e:29:1a:eb:f8:14:87:c5:06
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3069BE596AE6FD99F15867B76663D73952007F4C
        Validity
            Not Before: Feb 22 11:21:39 2024 GMT
            Not After : Feb 20 11:26:39 2025 GMT
        Subject: CN=8A58610CF7132A81FE64BBEC249F9014FF1AD1F4
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:dc:38:09:88:b2:78:1c:a7:5e:cd:c3:9c:5d:99:
                    70:a8:03:49:e3:96:52:48:dd:ec:a4:cd:1d:6e:84:
                    19:70:9a:54:f8:e4:f0:65:38:43:10:7d:9c:92:0b:
                    ac:70:5c:d1:96:48:a2:1d:1f:bb:1c:9c:f0:cc:b1:
                    a9:28:76:e6:a1:21:78:f5:de:d0:c6:40:3a:32:9b:
                    ec:ab:48:ce:50:d5:ba:68:ff:ba:e4:19:c1:3c:cd:
                    17:86:03:8d:1c:bc:79:da:91:e9:22:a6:b6:e1:2d:
                    97:ff:cb:cc:25:27:6a:57:8f:a2:e5:6b:85:1d:09:
                    35:ba:80:64:3c:b7:9a:c2:70:99:39:02:18:49:d5:
                    d7:a4:f7:fb:ba:43:5e:bb:27:49:87:eb:db:e8:cd:
                    91:e8:10:77:18:58:d7:19:17:00:0e:d7:c6:af:aa:
                    9b:c8:e6:96:14:fc:0b:11:a8:5e:60:0c:9b:84:5a:
                    8f:d2:3f:10:d3:09:93:f8:0b:e8:02:71:a4:d3:f3:
                    ea:45:9e:e0:eb:90:8d:87:7a:80:a5:21:a6:ce:fe:
                    2e:46:12:23:85:33:81:ba:e7:fc:9c:6f:73:e4:e8:
                    ac:0a:2c:ee:f2:b9:f5:06:d7:a5:9d:4d:d0:96:40:
                    0f:8d:48:36:ce:be:61:4c:ea:72:64:80:68:59:c8:
                    48:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                8A:58:61:0C:F7:13:2A:81:FE:64:BB:EC:24:9F:90:14:FF:1A:D1:F4
            X509v3 Authority Key Identifier:
                keyid:30:69:BE:59:6A:E6:FD:99:F1:58:67:B7:66:63:D7:39:52:00:7F:4C

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/3069BE596AE6FD99F15867B76663D73952007F4C.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3069BE596AE6FD99F15867B76663D73952007F4C.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3XTrFjaLRCzctB4aS32M5dwNbk5sgjzVTuCDKA7T6szE/0/323830343a356438383a3a2f33322d3438203d3e20323638393738.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5d88::/32

    Signature Algorithm: sha256WithRSAEncryption
         31:a4:d3:b5:f6:7e:7d:55:04:c8:43:2c:6b:99:a2:ee:21:10:
         65:0f:16:63:d0:7d:e3:11:23:3d:47:93:4e:82:6f:08:a3:8f:
         24:e9:52:5c:60:16:54:86:30:c5:59:0f:41:e6:ce:ff:f8:eb:
         32:74:61:45:52:b3:c0:1b:ff:a3:3b:46:a2:a4:46:4f:a6:7f:
         a8:7d:4d:f5:44:2e:22:74:9b:3d:d0:d5:64:bd:2f:76:14:ac:
         42:43:50:e1:3c:e7:62:fa:2a:2b:26:b5:f1:70:e8:74:8e:47:
         84:f7:68:aa:bf:a7:5a:b2:c9:86:d1:19:f5:92:8a:f8:c4:58:
         5c:b1:1f:e7:60:56:69:38:93:47:a3:a1:d6:95:45:c3:a5:2b:
         82:8e:33:31:58:b6:c5:20:0f:53:92:9b:91:be:aa:ec:c1:56:
         45:c8:f7:6b:37:db:d2:cc:d3:c6:76:e7:5c:74:8d:77:c0:ff:
         11:91:ad:dd:0d:b5:c4:4c:a4:5c:b7:ef:be:7c:78:92:d6:86:
         ce:52:55:a0:7e:01:50:33:ad:3c:96:f2:64:8d:47:76:82:47:
         7d:83:04:4e:d2:ad:b0:d0:80:a2:c0:be:2b:8a:66:b6:f3:d3:
         31:ab:f9:07:12:56:6d:50:dc:28:cd:99:96:40:80:ae:8a:fa:
         d5:14:68:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:27 2024 by rpki-client on console-fra.rpki-client.org