Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a3a2f34302d3430203d3e20323638363531.roa
File:                     323830343a353437343a3a2f34302d3430203d3e20323638363531.roa (raw, json)
Hash identifier:          lAjASvLyT1iumqV2+WRnHdiG+56qKz93V38XGT/x/GY=
Subject key identifier:   32:E5:DC:40:DB:DC:5F:6B:60:2E:69:09:CA:CC:2C:3D:D2:C0:39:78
Certificate issuer:       /CN=D63F65BC868A989F5016FC5F923857D26EE2A068
Certificate serial:       7E1F4E48A40B23A7BA2F7C0B753C4679C8483560
Authority key identifier: D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a3a2f34302d3430203d3e20323638363531.roa
Signing time:             Sun 07 Apr 2024 17:00:00 +0000
ROA not before:           Sun 07 Apr 2024 16:55:00 +0000
ROA not after:            Sun 06 Apr 2025 17:00:00 +0000
asID:                     268651
IP address blocks:        2804:5474::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7e:1f:4e:48:a4:0b:23:a7:ba:2f:7c:0b:75:3c:46:79:c8:48:35:60
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D63F65BC868A989F5016FC5F923857D26EE2A068
        Validity
            Not Before: Apr  7 16:55:00 2024 GMT
            Not After : Apr  6 17:00:00 2025 GMT
        Subject: CN=3082010A0282010100C606889DD0E784E90D12C89F0B1C9109EF95A416E870BC57BFAC44975DEFCEF8964F348342F14EBD35ECA056010EF21D81FD8C8E37A2083A364AD03280E7A4B7367BD46EA3EC55F8812B111B971C592081AB6043A6D4E8DA5EF20F5AFC6F97ACF46644C012CA309BA7A4D7A2BC77335C7F5D74631668F93C32F5090D9DF160D7CC863CAF8AA3AF8B33313224EE1AC8030B01856217A7585E7D1F13BF63EE31F131DD52B5E444200120359CBA9851B48D789B15EDD0463C263DE3C9346032F7FB0A7043E90958D1C2DF8D7B1C20B020B12BA49F9E3CAA80D617A0B9A219F04E9B65EE101B46705D24AAD228DEB0DA3369B830E1E1F1DBCDDEF5E7CBAA9FAFD03D0203010001
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c6:06:88:9d:d0:e7:84:e9:0d:12:c8:9f:0b:1c:
                    91:09:ef:95:a4:16:e8:70:bc:57:bf:ac:44:97:5d:
                    ef:ce:f8:96:4f:34:83:42:f1:4e:bd:35:ec:a0:56:
                    01:0e:f2:1d:81:fd:8c:8e:37:a2:08:3a:36:4a:d0:
                    32:80:e7:a4:b7:36:7b:d4:6e:a3:ec:55:f8:81:2b:
                    11:1b:97:1c:59:20:81:ab:60:43:a6:d4:e8:da:5e:
                    f2:0f:5a:fc:6f:97:ac:f4:66:44:c0:12:ca:30:9b:
                    a7:a4:d7:a2:bc:77:33:5c:7f:5d:74:63:16:68:f9:
                    3c:32:f5:09:0d:9d:f1:60:d7:cc:86:3c:af:8a:a3:
                    af:8b:33:31:32:24:ee:1a:c8:03:0b:01:85:62:17:
                    a7:58:5e:7d:1f:13:bf:63:ee:31:f1:31:dd:52:b5:
                    e4:44:20:01:20:35:9c:ba:98:51:b4:8d:78:9b:15:
                    ed:d0:46:3c:26:3d:e3:c9:34:60:32:f7:fb:0a:70:
                    43:e9:09:58:d1:c2:df:8d:7b:1c:20:b0:20:b1:2b:
                    a4:9f:9e:3c:aa:80:d6:17:a0:b9:a2:19:f0:4e:9b:
                    65:ee:10:1b:46:70:5d:24:aa:d2:28:de:b0:da:33:
                    69:b8:30:e1:e1:f1:db:cd:de:f5:e7:cb:aa:9f:af:
                    d0:3d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:E5:DC:40:DB:DC:5F:6B:60:2E:69:09:CA:CC:2C:3D:D2:C0:39:78
            X509v3 Authority Key Identifier:
                keyid:D6:3F:65:BC:86:8A:98:9F:50:16:FC:5F:92:38:57:D2:6E:E2:A0:68

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/D63F65BC868A989F5016FC5F923857D26EE2A068.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D63F65BC868A989F5016FC5F923857D26EE2A068.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4qfkWRfc3U2f6ZToL5cmdYmTFxsR3Ur9jU9GH7UUxoXm/0/323830343a353437343a3a2f34302d3430203d3e20323638363531.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5474::/40

    Signature Algorithm: sha256WithRSAEncryption
         74:7c:5c:c2:b5:8d:6a:d1:26:c9:0a:7e:bf:af:df:bd:9d:96:
         d8:4a:1c:81:7d:56:d0:95:bc:c1:55:84:d2:f4:94:19:7c:c6:
         ba:35:d5:08:e0:61:7a:cd:91:93:54:6e:24:27:a6:42:e5:d5:
         24:03:c6:30:fa:3f:bc:5a:93:0e:93:20:0d:7b:97:68:4c:95:
         07:04:12:3e:b8:23:28:b6:cd:0f:be:db:d0:07:2e:c9:6d:9a:
         27:3e:6f:86:1b:ef:c2:12:d9:cd:6f:74:02:dc:3c:1f:59:4f:
         9c:03:03:d1:86:52:ed:58:18:5c:20:c7:fd:f3:a0:0b:79:dd:
         e2:5a:64:9e:40:76:69:4a:d2:38:96:b5:3a:fa:ec:39:ec:74:
         75:eb:a3:e8:2b:15:f2:0f:c3:c1:06:f6:92:f9:35:1c:7c:2f:
         b8:96:8c:29:af:e1:f5:49:67:f1:4d:32:63:67:4d:41:e3:6b:
         d0:f3:52:b7:9a:a1:f4:76:41:2b:b6:5b:91:80:21:36:9e:4c:
         44:37:1b:51:16:04:73:3b:c7:e4:86:09:2b:f1:21:81:16:f4:
         b6:e5:a4:99:09:ed:6a:43:c1:0b:aa:c8:f0:4a:1c:03:9d:43:
         bb:d1:1e:13:1c:ef:3e:fd:4e:0a:20:b7:25:c5:dd:a4:7d:a2:
         d7:9e:70:2b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:39:49 2024 by rpki-client on console-ams.rpki-client.org