Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/323830343a343532343a3a2f33322d3332203d3e20323637363735.roa
File:                     323830343a343532343a3a2f33322d3332203d3e20323637363735.roa (raw, json)
Hash identifier:          cwu9KEfgYZeAepB0/8xmlLhYD1BkPWf1PJ0WrabBYgM=
Subject key identifier:   BF:92:21:45:FC:BA:78:6B:72:40:2D:93:7E:F6:3A:49:2E:B8:50:6C
Certificate issuer:       /CN=D6705BC868D161B2B42EB6434932188F27722DF3
Certificate serial:       1460A54314F3887D4A82AD6890A0B5F7C4965F5F
Authority key identifier: D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/323830343a343532343a3a2f33322d3332203d3e20323637363735.roa
Signing time:             Thu 29 Feb 2024 23:20:25 +0000
ROA not before:           Thu 29 Feb 2024 23:15:25 +0000
ROA not after:            Thu 27 Feb 2025 23:20:25 +0000
asID:                     267675
IP address blocks:        2804:4524::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            14:60:a5:43:14:f3:88:7d:4a:82:ad:68:90:a0:b5:f7:c4:96:5f:5f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D6705BC868D161B2B42EB6434932188F27722DF3
        Validity
            Not Before: Feb 29 23:15:25 2024 GMT
            Not After : Feb 27 23:20:25 2025 GMT
        Subject: CN=BF922145FCBA786B72402D937EF63A492EB8506C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:98:8a:a8:3e:84:2d:ee:11:c6:84:da:6c:3a:83:
                    d3:56:60:38:b6:f2:9c:61:d6:9f:ea:49:d8:48:ff:
                    91:24:0b:e9:6f:2d:c9:5f:1e:1c:62:e9:2d:ff:47:
                    96:05:a1:fa:f1:c6:97:97:85:be:c4:1d:aa:33:2b:
                    b0:f6:1a:9f:03:25:0e:cb:80:63:a3:82:4d:36:ef:
                    bb:51:5b:f3:9b:cb:b2:ad:cd:c0:78:ec:29:12:ac:
                    dc:8c:57:6b:44:6f:74:e3:09:fc:d1:86:ab:10:b4:
                    fc:47:85:22:df:05:0f:0d:7b:1a:6e:e4:b1:3f:d5:
                    e8:18:a0:ec:81:c4:aa:05:3d:ed:a8:10:60:f5:c9:
                    9c:dc:7b:98:7f:b1:fc:f5:be:e9:62:aa:c6:da:1a:
                    0a:0d:34:be:fb:6f:19:d1:8d:6c:d6:9b:d7:c1:e1:
                    2f:e1:a7:e9:55:64:4c:93:79:ba:5f:01:41:74:2f:
                    27:11:56:cb:71:59:cd:92:10:8a:71:cc:a2:0f:55:
                    af:12:ce:98:5d:68:f7:31:2b:91:b1:4c:d6:0f:46:
                    c3:69:73:13:3e:30:4c:15:f7:12:66:4e:c6:9e:62:
                    e0:a2:6e:51:6a:b9:0a:c2:0e:7c:63:52:dc:24:5a:
                    66:ca:8f:87:b7:26:99:95:4f:40:a5:03:94:83:c6:
                    da:39
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BF:92:21:45:FC:BA:78:6B:72:40:2D:93:7E:F6:3A:49:2E:B8:50:6C
            X509v3 Authority Key Identifier:
                keyid:D6:70:5B:C8:68:D1:61:B2:B4:2E:B6:43:49:32:18:8F:27:72:2D:F3

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/D6705BC868D161B2B42EB6434932188F27722DF3.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D6705BC868D161B2B42EB6434932188F27722DF3.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4ZZNc1kX1iFM21kiD86dwn4FSx1dWE4Py1mTKeN3T4ca/0/323830343a343532343a3a2f33322d3332203d3e20323637363735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4524::/32

    Signature Algorithm: sha256WithRSAEncryption
         60:f6:0f:b0:bf:57:f1:b3:82:92:8d:88:b5:2c:21:2f:19:7a:
         0e:27:28:02:3a:50:3a:1e:b5:b8:28:46:c0:9c:99:18:68:1f:
         5d:2e:08:a3:86:d1:e4:0b:4c:9f:6b:56:62:78:af:2f:1b:a7:
         26:73:f5:e3:d3:cf:42:b7:b3:2a:2e:dc:09:7c:17:cd:76:cd:
         3a:85:b7:53:e7:fe:54:0a:fe:93:ff:b5:bc:64:c5:92:cb:1d:
         f4:b4:34:6c:b7:20:4b:73:16:e7:8a:d7:42:05:05:d5:b0:de:
         2d:30:ed:3a:57:c9:7f:49:e9:c6:87:49:df:e7:1b:9d:eb:81:
         90:87:77:04:73:bc:6b:94:b4:87:87:f0:a1:5c:81:28:89:95:
         c9:a1:0c:2b:ae:6e:8d:80:e0:27:95:ce:e7:d0:45:aa:ad:f3:
         fc:51:cf:06:dd:58:c1:4a:1f:fb:26:64:e5:75:00:0d:ee:81:
         42:47:53:ae:25:e1:4d:15:f0:6b:f0:2c:ea:f6:5c:c2:7e:bc:
         8c:98:58:ea:af:27:ac:b0:5e:89:d6:50:c6:f5:7a:74:75:1c:
         8f:24:98:cd:85:4a:40:8b:ac:17:c3:00:5b:2d:b6:3a:87:b3:
         37:7a:50:26:c7:ab:e1:b6:95:29:e8:87:ee:8e:db:12:60:28:
         f0:89:a0:8a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:35 2024 by rpki-client on console-fra.rpki-client.org