Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a363a3a2f34382d3438203d3e20323638363531.roa
File:                     323830343a353437343a363a3a2f34382d3438203d3e20323638363531.roa (raw, json)
Hash identifier:          lR6+I8dIt1SHZSVBTfU+JI1PGWU7q+AfrchJf7YpO3I=
Subject key identifier:   00:BF:52:C2:5F:E4:3B:EE:90:18:76:1C:8C:69:DA:E2:2C:28:E7:37
Certificate issuer:       /CN=D63F65BC868A989F5016FC5F923857D26EE2A068
Certificate serial:       051F27761123C7B07507BAB8DFBA0F59C592629E
Authority key identifier: D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a363a3a2f34382d3438203d3e20323638363531.roa
Signing time:             Sun 07 Apr 2024 17:00:00 +0000
ROA not before:           Sun 07 Apr 2024 16:55:00 +0000
ROA not after:            Sun 06 Apr 2025 17:00:00 +0000
asID:                     268651
IP address blocks:        2804:5474:6::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            05:1f:27:76:11:23:c7:b0:75:07:ba:b8:df:ba:0f:59:c5:92:62:9e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63F65BC868A989F5016FC5F923857D26EE2A068
        Validity
            Not Before: Apr  7 16:55:00 2024 GMT
            Not After : Apr  6 17:00:00 2025 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:ce:7f:db:ed:99:5d:d6:41:9b:02:93:4c:cf:
                    e6:a0:24:4a:27:a1:05:1b:80:6c:9f:08:05:89:9c:
                    ec:2d:b2:af:9b:3d:81:b7:cb:68:22:19:dd:41:21:
                    f1:7c:78:4a:f4:ef:12:0b:70:5e:01:3b:59:97:57:
                    b0:2d:88:09:97:23:f1:80:66:db:28:94:dd:ad:b0:
                    53:b6:49:26:d7:38:7f:9b:47:ee:de:f2:d4:b5:98:
                    3d:c3:61:f8:59:20:72:e6:11:72:78:58:a4:46:f3:
                    33:13:11:2c:1d:c4:4f:a5:bd:d6:7d:99:67:97:dd:
                    ca:f3:3b:d4:51:1e:72:a7:15:5a:33:88:e3:d2:46:
                    40:96:87:65:47:17:ef:a8:42:7c:2a:ae:91:89:6d:
                    58:09:a5:f3:de:10:f8:7e:5a:e4:33:93:5b:dd:4a:
                    54:11:95:f7:0a:09:df:5a:12:0f:9c:48:fb:e4:ec:
                    f4:d3:68:26:78:74:37:8d:a5:e5:77:c2:56:41:fb:
                    2e:26:3f:90:8e:a1:08:9f:29:ca:69:4b:1f:aa:52:
                    f7:3f:eb:39:31:c8:ed:43:af:2b:11:e4:00:79:50:
                    7a:ab:9f:bd:b9:3b:bf:0a:1c:f8:7c:39:83:b8:51:
                    44:65:6a:6b:f9:ac:ab:9f:35:b4:d5:66:92:2e:84:
                    2e:bb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                00:BF:52:C2:5F:E4:3B:EE:90:18:76:1C:8C:69:DA:E2:2C:28:E7:37
            X509v3 Authority Key Identifier:
                keyid:D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a363a3a2f34382d3438203d3e20323638363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5474:6::/48

    Signature Algorithm: sha256WithRSAEncryption
         63:35:7c:71:4a:ac:6b:90:06:a1:5b:6f:75:88:96:ba:5b:74:
         e6:24:ad:9d:fd:5c:e1:c5:f1:31:13:1a:36:09:d5:79:e8:a7:
         3e:4a:25:23:03:a7:83:75:75:ef:13:34:e5:d9:b7:47:07:b3:
         5e:42:93:e5:13:b0:2a:1b:47:92:98:36:33:20:eb:8c:cf:6b:
         13:a1:6a:bb:2c:fc:53:fd:e0:9c:bc:d5:6a:09:47:a2:c8:80:
         fa:67:9b:5e:59:d6:7a:88:26:88:81:cd:a6:7d:16:08:c4:3f:
         25:72:6a:13:60:18:10:e8:05:68:0e:8a:c1:11:a3:6d:fa:b4:
         b5:2e:e4:86:3f:ff:30:78:d1:b0:eb:0f:13:af:35:ad:d9:c1:
         37:d7:4e:22:ed:4e:1d:94:1b:58:a7:01:c0:bb:e8:5f:2e:32:
         29:04:d9:62:71:02:ff:1d:f3:7e:af:e7:6c:47:02:17:a8:d8:
         62:26:65:44:d5:4b:b3:58:b8:d7:4b:e2:d2:45:5d:b5:31:18:
         aa:22:7b:91:5d:67:fe:15:cc:66:d0:6e:b8:9f:01:13:55:83:
         f8:4e:7e:1f:b6:fc:2a:41:c0:46:c5:7a:03:09:3f:98:2e:4e:
         33:0e:cf:91:0a:26:2a:6e:58:c5:b6:e3:20:66:78:c0:dd:17:
         a0:33:61:d6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:36 2024 by rpki-client on console-fra.rpki-client.org