Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a333030303a3a2f33362d3336203d3e20323634323831.roa
File:                     323830343a323537303a333030303a3a2f33362d3336203d3e20323634323831.roa (raw, json)
Hash identifier:          ZigsSwVj/VXMJ2t1YSQtl/gYcDBYjDluWSPHE5UTV6c=
Subject key identifier:   0F:6C:F4:17:1B:57:AA:B8:C0:4B:CF:1C:FD:20:82:E2:DB:B9:F5:C5
Certificate issuer:       /CN=4C284B298BD83B2CD795241085A51344CAAA6914
Certificate serial:       68D18745425B9064E59671B0CBBAB008A98B0BD5
Authority key identifier: 4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a333030303a3a2f33362d3336203d3e20323634323831.roa
Signing time:             Sat 08 Apr 2023 14:04:33 +0000
ROA not before:           Sat 08 Apr 2023 13:59:33 +0000
ROA not after:            Sat 06 Apr 2024 14:04:33 +0000
asID:                     264281
IP address blocks:        2804:2570:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            68:d1:87:45:42:5b:90:64:e5:96:71:b0:cb:ba:b0:08:a9:8b:0b:d5
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=4C284B298BD83B2CD795241085A51344CAAA6914
        Validity
            Not Before: Apr  8 13:59:33 2023 GMT
            Not After : Apr  6 14:04:33 2024 GMT
        Subject: CN=0F6CF4171B57AAB8C04BCF1CFD2082E2DBB9F5C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:de:fa:b3:40:b6:ab:51:7f:c3:d0:7b:ed:4f:c0:
                    b2:bc:54:b2:6e:8e:72:1d:71:d3:13:8c:a0:05:f3:
                    35:74:27:08:5d:0e:71:98:ae:ec:d6:18:ef:33:d3:
                    b2:28:c1:35:ba:6e:00:02:ce:73:c4:24:11:c7:64:
                    08:7a:08:e0:10:f7:a3:65:4c:ea:fa:74:5f:6b:5b:
                    ef:1e:00:cf:12:99:4e:1c:7a:f5:5a:cc:aa:da:da:
                    dd:43:b0:f5:78:b4:56:33:38:d3:17:81:75:a6:77:
                    a6:fd:25:c6:ec:ee:32:b1:45:c7:d8:b9:0f:98:54:
                    62:5d:5e:12:87:9b:22:35:ad:88:1f:77:46:37:d5:
                    07:d2:b3:bb:7c:7e:07:a9:f7:69:33:63:3a:58:ca:
                    0b:3d:69:8b:f0:8e:2b:d5:4d:9e:14:60:dc:79:e3:
                    57:24:93:58:8e:71:1e:e6:35:fb:22:5a:f3:5a:e6:
                    3a:f3:a8:b4:e8:b1:1d:d2:9e:71:3a:e9:83:ca:0d:
                    eb:1c:48:a4:94:82:d2:36:a2:55:db:5b:ea:40:22:
                    c5:36:42:ae:e4:82:d2:8d:e2:11:8d:44:bc:2d:62:
                    b4:a1:d7:a1:9c:76:a7:40:54:cc:a0:26:df:43:48:
                    ed:ba:a3:8f:a9:8d:77:43:a8:13:55:cf:a9:38:5a:
                    37:b9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:6C:F4:17:1B:57:AA:B8:C0:4B:CF:1C:FD:20:82:E2:DB:B9:F5:C5
            X509v3 Authority Key Identifier:
                keyid:4C:28:4B:29:8B:D8:3B:2C:D7:95:24:10:85:A5:13:44:CA:AA:69:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/4C284B298BD83B2CD795241085A51344CAAA6914.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/4C284B298BD83B2CD795241085A51344CAAA6914.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/49MWHSPGjQeUnTnSby8nrktwJmWVeffi9iWi4jqnzQW2/0/323830343a323537303a333030303a3a2f33362d3336203d3e20323634323831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2570:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         0f:7b:cc:d6:8e:98:1f:0d:d9:f4:55:dd:f3:b5:16:a3:73:53:
         81:06:6d:e4:d6:b5:8f:15:a2:8e:fb:95:03:ce:59:45:f0:53:
         8e:7e:89:64:9c:c6:23:af:e8:4e:45:f4:50:0d:c8:4d:86:b5:
         c2:b1:c7:cd:1b:43:b1:25:26:02:9f:03:56:57:40:49:fd:c7:
         1e:87:24:6e:5d:e5:f3:69:a7:2d:be:d5:0e:67:1b:d2:2f:a0:
         be:2e:44:f0:b3:9f:a0:82:7f:06:3a:44:69:69:bc:ad:76:a9:
         73:97:6a:a1:bd:44:39:a6:7a:5e:51:5c:7c:35:ac:57:3e:f7:
         cc:8c:f5:a8:e7:1f:1c:0b:47:a3:a9:38:c8:77:d8:8b:93:5e:
         d3:3b:2a:87:1f:d3:21:49:ce:d9:c0:fe:9d:42:e9:42:4b:d7:
         d7:84:d2:f9:bd:5f:ad:5a:f0:ac:c2:57:52:b7:8c:4c:33:79:
         d7:da:21:42:e3:18:02:a2:78:e8:e4:53:86:8f:5d:64:35:b9:
         2e:6c:63:55:b9:14:2d:6d:6f:20:6d:c9:e6:0a:de:07:51:03:
         7b:e9:05:d7:93:be:f9:7d:68:8f:a0:ef:06:0b:68:e2:4b:4d:
         df:62:b6:82:75:0f:30:fd:d2:3b:e5:59:35:c5:73:a6:26:31:
         69:64:70:1c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:30 2024 by rpki-client on console-fra.rpki-client.org