Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a653030303a3a2f33362d3336203d3e203532373036.roa
File:                     323830343a6337303a653030303a3a2f33362d3336203d3e203532373036.roa (raw, json)
Hash identifier:          vzT7a8ZQsH4/7tZjGc2FJMMHX5f8Khs87KRqGSP+4yA=
Subject key identifier:   B6:C1:41:2F:1A:34:7C:65:40:0C:57:D1:C5:3B:81:93:BA:1E:8A:F3
Certificate issuer:       /CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
Certificate serial:       4ACD2995B0D41564ADAF8B13AEFA74EDDF06AEA9
Authority key identifier: D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a653030303a3a2f33362d3336203d3e203532373036.roa
Signing time:             Mon 19 Dec 2022 18:25:19 +0000
ROA not before:           Mon 19 Dec 2022 18:20:19 +0000
ROA not after:            Mon 18 Dec 2023 18:25:19 +0000
asID:                     52706
IP address blocks:        2804:c70:e000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            4a:cd:29:95:b0:d4:15:64:ad:af:8b:13:ae:fa:74:ed:df:06:ae:a9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B
        Validity
            Not Before: Dec 19 18:20:19 2022 GMT
            Not After : Dec 18 18:25:19 2023 GMT
        Subject: CN=B6C1412F1A347C65400C57D1C53B8193BA1E8AF3
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:f0:a6:f8:01:53:9c:1d:92:4f:1a:74:d3:c0:f0:
                    2f:f5:61:99:a7:16:b4:b2:61:c1:41:33:ad:93:7a:
                    47:5f:a7:47:45:79:e7:00:0d:5b:e1:ae:3e:fa:17:
                    da:0e:e8:dc:e6:09:11:e1:89:97:ad:42:7e:4a:fc:
                    ce:55:16:80:93:d5:97:78:45:96:96:41:38:d2:ef:
                    4d:e2:19:a5:a3:95:2a:1f:86:a1:bb:88:33:1b:a5:
                    9f:9c:98:0d:19:4c:77:c1:3c:a4:a2:e0:0e:12:e6:
                    d1:fa:c8:e6:99:51:8c:ce:20:8b:fa:1a:36:ca:be:
                    f7:1c:50:eb:37:a4:05:00:7d:0a:33:fd:ed:13:2b:
                    3c:52:b5:5b:69:eb:6e:b2:87:9c:37:91:7d:5f:07:
                    03:6c:df:e5:d9:7f:ba:05:ee:22:e8:62:a5:d8:5d:
                    c4:92:ec:a5:a2:96:ea:72:45:88:64:28:a5:3f:7c:
                    4b:d1:7c:2a:e7:36:72:e3:a7:45:0b:f3:5e:00:c0:
                    02:1b:cf:2b:53:fc:27:22:6b:47:db:75:7e:54:a6:
                    82:d7:06:2d:1e:d7:cf:fb:98:ae:f1:ca:39:22:1e:
                    98:85:38:ba:f5:4e:2b:16:0c:a3:31:6d:b1:7b:fa:
                    25:e6:8e:c9:28:d6:84:20:20:12:97:bb:ec:5a:b2:
                    c4:55
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B6:C1:41:2F:1A:34:7C:65:40:0C:57:D1:C5:3B:81:93:BA:1E:8A:F3
            X509v3 Authority Key Identifier:
                keyid:D9:61:AB:15:52:8E:D9:EF:FC:F0:F0:DD:A2:FE:0C:7D:0C:B9:93:4B

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D961AB15528ED9EFFCF0F0DDA2FE0C7D0CB9934B.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4GHaNrxUSuEcQjnH3jjm3hA7ppnJ6Jt2gEMUtgqaxW1G/0/323830343a6337303a653030303a3a2f33362d3336203d3e203532373036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:c70:e000::/36

    Signature Algorithm: sha256WithRSAEncryption
         b5:b8:8b:9d:46:a4:67:88:49:5a:11:c3:f5:70:49:9e:8a:5e:
         66:df:1e:4c:8e:a6:ee:fa:d3:06:a6:f5:21:b2:77:fa:f9:55:
         5c:9e:ee:41:9c:63:6e:9a:2f:27:71:de:44:a2:b3:09:4d:a1:
         36:70:41:5d:71:e5:ca:e3:2f:3a:3a:54:09:b3:06:88:6f:82:
         ee:49:f6:9c:19:2b:b7:db:50:8c:1c:a6:2b:94:d8:14:72:e2:
         cc:78:62:4f:93:bc:9f:58:29:d4:78:79:5e:8e:52:eb:b0:01:
         b7:ba:7a:50:b9:d1:42:a5:0f:42:76:8c:bc:e4:90:cf:ca:c0:
         17:31:c8:9c:a7:9a:61:56:98:bb:4e:69:a1:4f:7b:36:da:1f:
         5f:0a:ab:0e:01:e6:81:cc:40:3a:40:85:55:09:38:fc:70:e4:
         82:01:f0:da:78:35:d1:6b:c1:45:8d:b2:e1:70:f9:2b:07:2a:
         e0:f9:ca:39:67:02:74:df:20:fc:6e:70:bc:87:a0:9a:17:85:
         d3:a6:65:3c:ab:92:19:e7:eb:e4:64:78:0a:2b:04:3b:81:34:
         6d:d2:de:25:ad:bf:51:c0:8a:31:bb:aa:85:ac:88:7d:11:1e:
         d2:48:63:2d:69:61:e9:d1:63:ec:8a:97:48:db:c8:cc:70:30:
         3b:c5:9c:af
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:34 2024 by rpki-client on console-fra.rpki-client.org