Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/323830343a313335303a3a2f33322d3438203d3e20323633353238.roa
File:                     323830343a313335303a3a2f33322d3438203d3e20323633353238.roa (raw, json)
Hash identifier:          ajgiZSwO5ugHahhKnndeiPV+5t2j5hfTJiM9+Jo+Tig=
Subject key identifier:   22:0F:91:13:E0:28:01:A6:BD:69:D1:60:51:10:80:3A:57:93:BB:3C
Certificate issuer:       /CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
Certificate serial:       66077FF234F6C0D375294CF9DB563E3B67CAF218
Authority key identifier: 6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/323830343a313335303a3a2f33322d3438203d3e20323633353238.roa
Signing time:             Fri 12 Apr 2024 13:19:45 +0000
ROA not before:           Fri 12 Apr 2024 13:14:45 +0000
ROA not after:            Fri 11 Apr 2025 13:19:45 +0000
asID:                     263528
IP address blocks:        2804:1350::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            66:07:7f:f2:34:f6:c0:d3:75:29:4c:f9:db:56:3e:3b:67:ca:f2:18
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A
        Validity
            Not Before: Apr 12 13:14:45 2024 GMT
            Not After : Apr 11 13:19:45 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:ce:44:f6:e6:8b:9d:7f:e1:9e:32:67:6d:d2:
                    40:62:d6:c2:8b:42:cf:a6:19:63:aa:72:77:aa:a2:
                    e8:b2:e2:a3:1a:66:04:da:e7:f3:ad:ab:ad:3e:7b:
                    ce:f8:2b:37:32:8b:e5:a8:be:c0:39:3c:b1:20:23:
                    31:a2:0a:00:7d:0a:af:c1:ba:d1:8f:a5:5c:4d:c2:
                    77:2b:77:6d:e3:64:0e:49:08:80:4e:91:37:17:77:
                    0f:35:f3:58:6f:be:23:8c:5e:d9:4b:3f:a9:32:a1:
                    6e:e3:7d:63:f7:2d:40:85:6e:83:e6:0d:a4:6b:8c:
                    6c:7c:5c:2c:55:01:1f:eb:07:54:4c:3f:05:6c:4a:
                    0e:a9:34:49:8f:e9:3a:58:9d:75:4b:f9:a2:cf:4c:
                    3f:68:5b:97:50:4f:2f:6d:0b:30:4b:b2:54:46:d1:
                    dc:14:1d:7b:2f:a4:4b:93:39:86:23:53:5c:ab:01:
                    b8:a6:d7:59:9b:81:82:b7:fd:35:25:a0:5d:68:a2:
                    34:01:65:64:90:13:b8:43:dc:ad:f6:06:d1:6b:ec:
                    42:a7:8b:9b:3e:dc:04:07:4a:8f:79:0a:73:66:37:
                    3a:d7:37:f2:0b:85:ce:a4:ee:33:0a:b3:78:cb:fd:
                    5d:ae:e0:08:4f:c3:9e:cf:26:12:60:0d:2b:c5:9e:
                    23:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                22:0F:91:13:E0:28:01:A6:BD:69:D1:60:51:10:80:3A:57:93:BB:3C
            X509v3 Authority Key Identifier:
                keyid:6A:85:4D:6B:A0:C6:C0:ED:BE:30:47:BA:24:F5:8E:7F:D5:8E:AA:9A

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/6A854D6BA0C6C0EDBE3047BA24F58E7FD58EAA9A.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4miZnQ5GuFBVhvobBhcfY7aR9Gn12saHsSjgTuS5byFy/1/323830343a313335303a3a2f33322d3438203d3e20323633353238.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1350::/32

    Signature Algorithm: sha256WithRSAEncryption
         bf:8a:8e:96:cc:f6:cf:53:99:ff:c5:ab:7f:9b:4d:0d:b3:0c:
         87:04:94:b7:e6:ce:8e:1a:fc:6d:b4:57:e6:a8:f1:1a:b2:67:
         c9:05:7e:d0:d1:3d:4b:ae:2a:e4:bd:99:22:70:01:7a:13:ed:
         24:18:f1:c4:41:e1:90:28:ae:42:98:83:69:11:4d:2a:8d:ef:
         b1:28:e3:f7:50:81:b2:6c:37:1a:17:30:bb:6a:5f:55:c1:95:
         fb:da:01:13:ea:75:43:7e:27:70:46:83:43:75:00:77:09:15:
         20:c6:1f:67:00:d0:0c:af:86:9b:1d:60:80:c1:9e:17:ed:23:
         8e:d1:b9:0b:8c:a4:50:04:d9:4f:3f:2d:2c:19:60:e1:80:a6:
         b9:6e:d5:bd:50:86:0f:7e:7b:fe:5c:3e:02:6e:a0:cd:81:2c:
         fb:2c:a0:1a:e6:d8:3f:dc:4c:fd:ba:64:b5:55:0b:ee:15:e0:
         70:f3:44:19:62:cc:33:ef:0a:3d:c7:92:ad:20:a1:98:74:04:
         d0:6e:61:f7:9b:e6:45:29:9b:55:c6:02:75:94:5b:22:5f:d2:
         97:e1:bd:3f:ff:4c:4d:6d:e5:f5:d7:58:87:ce:4c:cc:08:90:
         9f:0e:cc:9b:1b:5d:10:68:4a:80:37:d2:f6:99:2a:60:28:2a:
         c9:ee:5c:02
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org