Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/323830343a316235343a383030303a3a2f33342d3334203d3e203631373232.roa
File:                     323830343a316235343a383030303a3a2f33342d3334203d3e203631373232.roa (raw, json)
Hash identifier:          udsKlpYl8uor+ZBrGwAtHmzjyXWSLgHGW6HikMbABlE=
Subject key identifier:   52:67:43:B7:6D:33:39:E2:C3:79:19:85:77:75:3F:A7:08:CC:93:0A
Certificate issuer:       /CN=C16487AD21A220DE5F436B2804D27D0D9A960CDD
Certificate serial:       22ECF1521D1D76D863C6A3E4DF2F7AABB83F59
Authority key identifier: C1:64:87:AD:21:A2:20:DE:5F:43:6B:28:04:D2:7D:0D:9A:96:0C:DD
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C16487AD21A220DE5F436B2804D27D0D9A960CDD.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/323830343a316235343a383030303a3a2f33342d3334203d3e203631373232.roa
Signing time:             Wed 09 Nov 2022 12:28:32 +0000
ROA not before:           Wed 09 Nov 2022 12:23:32 +0000
ROA not after:            Wed 08 Nov 2023 12:28:32 +0000
asID:                     61722
IP address blocks:        2804:1b54:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            22:ec:f1:52:1d:1d:76:d8:63:c6:a3:e4:df:2f:7a:ab:b8:3f:59
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C16487AD21A220DE5F436B2804D27D0D9A960CDD
        Validity
            Not Before: Nov  9 12:23:32 2022 GMT
            Not After : Nov  8 12:28:32 2023 GMT
        Subject: CN=526743B76D3339E2C379198577753FA708CC930A
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e5:58:aa:82:20:f7:d6:e6:78:40:60:65:f9:44:
                    62:a8:8c:78:74:12:21:08:5a:91:e5:e7:c3:72:28:
                    e0:c6:4e:ab:59:7a:0c:fa:94:74:c6:e6:7f:6d:af:
                    84:7a:7c:1d:a4:35:8b:be:2a:fa:1c:ee:08:10:d8:
                    2b:6c:8e:f3:c2:63:bb:16:48:8f:ec:89:1e:7a:9d:
                    b3:51:fa:37:85:41:18:84:11:3d:1d:69:19:d0:97:
                    08:44:e8:ee:4d:1f:54:21:ba:18:aa:4b:39:d1:49:
                    b0:82:6d:99:74:65:3a:51:4b:e3:e6:20:5b:6f:73:
                    25:2b:19:e5:1d:48:24:4f:78:00:74:bf:ce:47:8e:
                    98:59:fb:b8:0a:d4:ee:af:90:a3:cb:27:cb:2f:c7:
                    1a:77:ef:be:74:31:28:08:be:bc:49:a4:1d:ad:10:
                    b1:91:f9:0a:40:92:28:9e:db:86:32:5b:91:b5:60:
                    b8:24:99:16:67:db:d2:f3:db:27:76:ee:3e:77:24:
                    7a:9f:5a:f1:7d:77:81:8e:ab:e1:06:84:8a:b3:9f:
                    8d:27:fb:1a:99:6b:6a:a9:34:7d:f8:e4:2b:67:fa:
                    2d:fe:be:09:95:ed:4b:b2:96:0d:bf:26:b1:d2:b4:
                    4d:99:1c:b2:ee:52:c5:b0:da:c0:51:57:9e:a6:ca:
                    08:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                52:67:43:B7:6D:33:39:E2:C3:79:19:85:77:75:3F:A7:08:CC:93:0A
            X509v3 Authority Key Identifier:
                keyid:C1:64:87:AD:21:A2:20:DE:5F:43:6B:28:04:D2:7D:0D:9A:96:0C:DD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/C16487AD21A220DE5F436B2804D27D0D9A960CDD.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C16487AD21A220DE5F436B2804D27D0D9A960CDD.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/3zKMaFBPxu51vQFdqEXGJrSA1F2uNU7Nng1ysKPkLHXD/0/323830343a316235343a383030303a3a2f33342d3334203d3e203631373232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1b54:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         b8:99:7e:38:2f:18:0e:46:85:f4:55:6c:9e:1b:b5:da:d0:aa:
         98:ed:7d:df:e4:fd:5b:3d:34:04:c4:57:ef:95:d7:ca:d8:49:
         e2:86:a7:08:c3:ce:fc:27:65:2f:9c:43:60:02:e3:d2:25:0c:
         a9:39:4a:51:31:a3:1f:40:c8:a9:b4:82:d7:90:4c:92:c1:ca:
         24:cb:6e:59:a6:cf:a9:ca:ad:47:cb:5f:67:c5:56:b5:b6:50:
         f2:a9:f9:3d:3e:9b:ef:76:ef:01:2f:d4:f1:35:f6:28:d3:64:
         0d:28:a7:ef:46:f7:c2:da:e2:b0:5b:ec:6e:eb:81:3a:b9:1e:
         cf:f8:d3:57:9c:d8:fb:0a:ca:a9:89:c7:63:bb:10:35:9f:e6:
         be:37:f4:59:6e:44:c8:0f:1a:fa:84:a1:0e:d2:d3:d7:8d:f0:
         cb:94:0f:a4:fa:09:75:a1:d5:bd:b2:ff:2e:77:1f:c2:40:7c:
         ec:d0:8d:ea:36:16:50:38:5c:bc:4b:dd:32:78:b3:d1:2f:34:
         18:83:a5:f2:8b:54:a5:81:2b:05:23:99:a3:f4:c7:ab:16:19:
         78:b3:ad:4c:80:4d:26:8c:20:2a:95:c5:a5:ff:51:b7:f3:86:
         50:6a:b6:60:36:bd:80:8c:99:08:18:e5:83:48:5a:79:2a:37:
         e9:59:68:0d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:30 2024 by rpki-client on console-ams.rpki-client.org