Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a623030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a623030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          thXLRi126UeiNPIu0eMKmEmU5BH1Sbvy4w1I1yl/BiM=
Subject key identifier:   11:7D:8F:E7:67:52:1B:4C:D6:D7:BD:34:0A:3E:F6:50:44:98:2A:96
Certificate issuer:       /CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
Certificate serial:       3F99B6C7EFD7B8404C2BDA99B816EA3A535507DE
Authority key identifier: D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a623030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Mon 19 Dec 2022 18:25:08 +0000
ROA not before:           Mon 19 Dec 2022 18:20:08 +0000
ROA not after:            Mon 18 Dec 2023 18:25:08 +0000
asID:                     52706
IP address blocks:        2804:c70:b000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:99:b6:c7:ef:d7:b8:40:4c:2b:da:99:b8:16:ea:3a:53:55:07:de
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
        Validity
            Not Before: Dec 19 18:20:08 2022 GMT
            Not After : Dec 18 18:25:08 2023 GMT
        Subject: CN=117D8FE767521B4CD6D7BD340A3EF65044982A96
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:cc:2c:d5:1e:14:b3:3a:5d:e6:c6:2a:11:06:44:
                    dc:4e:1d:13:e9:9d:cf:23:3b:33:67:2e:83:c3:9d:
                    22:d6:f5:97:96:25:f1:33:4f:2a:76:91:f8:3e:18:
                    b5:da:5d:32:72:5b:38:c2:2a:70:e4:8f:1d:6d:ef:
                    cd:9d:63:eb:21:26:22:4b:a3:fa:79:ab:f8:58:93:
                    56:2b:46:50:8a:47:aa:1d:07:95:b2:65:60:53:1b:
                    79:d7:fc:02:c2:8e:36:14:e2:cd:8c:0f:14:ef:5d:
                    90:75:1c:ad:14:ab:3b:f1:f2:a4:18:a1:cb:54:70:
                    69:66:50:bd:7e:48:14:a6:43:ee:3a:6f:fa:50:ae:
                    85:bf:3c:03:36:bd:33:8c:83:91:08:c9:8d:b5:09:
                    00:39:1c:d4:ca:d6:ba:c2:dc:7a:ee:59:5b:ca:9c:
                    53:81:77:0d:d0:1b:44:94:b6:7d:12:08:4f:ec:16:
                    59:33:8e:94:e8:79:42:b9:83:e5:f3:ea:bc:f0:cd:
                    b2:80:d4:69:20:4d:96:6b:11:46:04:07:d5:de:51:
                    e9:c2:da:bc:c1:dd:7a:c5:69:a8:ff:ff:4e:69:36:
                    dc:43:08:d4:e1:85:5f:e3:dd:18:c7:bc:00:cd:01:
                    7c:28:f3:b3:25:67:f4:02:bb:1f:73:2f:da:ab:49:
                    c8:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                11:7D:8F:E7:67:52:1B:4C:D6:D7:BD:34:0A:3E:F6:50:44:98:2A:96
            X509v3 Authority Key Identifier:
                keyid:D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a623030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:b000::/36

    Signature Algorithm: sha256WithRSAEncryption
         25:42:f5:e7:88:de:62:87:b3:d4:c6:63:4f:2f:6d:22:92:4a:
         f5:97:10:15:66:e3:5c:7b:c8:18:cd:95:b0:c6:bc:7e:74:60:
         4b:5c:ad:de:d6:b4:7c:8c:8c:02:4d:f9:7e:b3:c9:34:28:b0:
         b5:ca:b6:3b:8d:e3:13:63:ca:2b:a9:9e:0c:53:66:bc:8c:55:
         a2:a3:ac:f4:99:55:21:93:17:5d:89:45:cb:72:d0:a8:5b:f2:
         3f:bc:c7:83:ba:59:8b:cb:2e:be:69:5d:1e:9c:11:1b:ef:47:
         48:32:8c:99:a2:33:64:a8:ad:74:a1:4d:4b:87:f4:6e:1e:b0:
         12:9b:c2:c1:f7:2c:ab:8a:e9:9e:b5:3e:3f:08:95:98:8f:1f:
         1b:d5:80:33:f9:2a:fe:10:89:1a:88:62:37:30:40:38:44:36:
         8d:53:fe:86:1b:1a:f1:23:e6:6c:c2:64:01:7c:ed:3d:a5:30:
         ac:b0:98:ac:37:c8:5a:d9:fd:bc:8f:6c:22:f5:b9:db:12:0b:
         c7:9d:f9:d9:32:e7:3a:81:13:7b:2e:1d:84:a9:dc:58:fc:16:
         ab:db:a5:c4:5d:13:3e:c3:8b:8b:c9:77:47:9f:96:db:c5:06:
         a2:92:2d:b7:8d:9e:05:de:37:da:86:24:8e:71:7f:92:da:6a:
         9b:4f:12:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org