Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a383030303a3a2f33332d3333203d3e20323731323633.roa
File:                     323830343a373863303a383030303a3a2f33332d3333203d3e20323731323633.roa (raw, json)
Hash identifier:          S+7YhoWNyiVPjTwF3xRGgMUy+5oX/X39n0XLsTJLhDM=
Subject key identifier:   AD:99:D8:5A:B0:0B:50:3A:AC:34:6C:32:30:15:49:E0:A9:D4:56:63
Certificate issuer:       /CN=698A229B1E11E12DAF0F78DB2769039EE3C78C26
Certificate serial:       623E5A6DA2E909A7FA91ED0E609412D19B908BF9
Authority key identifier: 69:8A:22:9B:1E:11:E1:2D:AF:0F:78:DB:27:69:03:9E:E3:C7:8C:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698A229B1E11E12DAF0F78DB2769039EE3C78C26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a383030303a3a2f33332d3333203d3e20323731323633.roa
Signing time:             Tue 19 Apr 2022 17:23:14 +0000
ROA not before:           Tue 19 Apr 2022 17:18:14 +0000
ROA not after:            Tue 18 Apr 2023 17:23:14 +0000
asID:                     271263
IP address blocks:        2804:78c0:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            62:3e:5a:6d:a2:e9:09:a7:fa:91:ed:0e:60:94:12:d1:9b:90:8b:f9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698A229B1E11E12DAF0F78DB2769039EE3C78C26
        Validity
            Not Before: Apr 19 17:18:14 2022 GMT
            Not After : Apr 18 17:23:14 2023 GMT
        Subject: CN=AD99D85AB00B503AAC346C32301549E0A9D45663
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a7:01:bb:e4:6c:a9:2c:d9:70:53:29:0a:c2:ad:
                    eb:41:d1:3b:ba:be:fd:90:f6:77:ee:2e:3b:65:37:
                    41:4a:7b:59:64:64:e6:57:e3:73:2d:ae:53:d2:3a:
                    4b:d4:19:78:d7:e1:de:7f:ff:c6:7c:03:a4:50:1c:
                    32:82:18:75:2e:66:d7:cb:92:cb:c2:c0:2c:8a:9f:
                    bc:68:61:32:62:9e:d4:4c:45:83:97:f0:c7:7a:41:
                    d3:c7:8e:27:56:30:af:ca:88:55:9c:36:43:d3:ff:
                    1d:d1:6e:a4:8f:2e:1c:df:41:ae:95:a9:bb:b7:0c:
                    93:3d:b3:0d:4e:45:d1:11:b3:50:ef:2e:77:ae:a9:
                    20:8b:57:9f:f9:34:ba:3a:6b:eb:32:e4:a2:ad:c5:
                    89:ce:79:02:37:b1:7c:ca:56:0a:b1:02:f1:e4:00:
                    97:71:7b:6b:59:f9:78:e2:86:a2:fc:19:74:e0:9c:
                    49:6c:8c:e8:aa:b0:c3:75:d3:27:c3:87:81:dd:cc:
                    47:88:1b:ee:1b:f7:4c:48:12:49:17:08:ff:2e:96:
                    42:63:34:b5:97:af:d8:8d:69:53:03:36:a3:5e:63:
                    87:68:7f:2c:80:ee:03:03:3a:ac:1c:b1:26:e2:17:
                    2b:1c:d6:04:24:35:b0:27:81:15:0a:c3:5b:04:29:
                    54:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AD:99:D8:5A:B0:0B:50:3A:AC:34:6C:32:30:15:49:E0:A9:D4:56:63
            X509v3 Authority Key Identifier:
                keyid:69:8A:22:9B:1E:11:E1:2D:AF:0F:78:DB:27:69:03:9E:E3:C7:8C:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/698A229B1E11E12DAF0F78DB2769039EE3C78C26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698A229B1E11E12DAF0F78DB2769039EE3C78C26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a383030303a3a2f33332d3333203d3e20323731323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78c0:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         a1:c8:f0:0f:38:39:bf:aa:a4:45:eb:fa:d0:3d:38:7f:35:06:
         96:c9:b5:c8:a1:8f:94:68:4c:81:86:dc:e2:35:d9:91:66:e4:
         41:ff:82:f2:a1:76:87:6a:8b:df:b5:a5:85:9a:f1:fd:eb:da:
         9e:3b:54:67:b7:21:78:af:5a:87:f1:a2:f3:d2:46:d4:eb:97:
         c6:21:b1:43:c4:b6:74:18:6a:ae:7b:66:4e:b0:11:ba:a2:7e:
         75:ae:0e:6e:e5:92:e1:e5:e2:a8:71:4b:5d:8f:17:6d:c4:74:
         9f:d9:cd:3b:5a:f3:dc:b9:b5:34:eb:43:7a:50:e0:99:8d:a4:
         ba:25:d0:d9:a8:9d:e1:ca:d4:41:49:98:c2:51:30:c6:52:bc:
         4f:5d:e9:45:cc:91:a5:20:c1:e2:b8:e9:b1:d5:30:9a:b4:60:
         0d:e3:a3:61:d0:f9:fb:1d:a5:2b:33:f8:79:90:f0:90:db:1c:
         2c:b1:a3:6a:19:3e:22:2d:bf:4d:b7:ae:d9:18:fb:cc:27:1c:
         94:31:e4:a6:03:ca:63:92:b2:b9:17:86:81:ea:a9:96:41:e6:
         7a:30:5a:52:ed:4b:fa:b5:06:42:d7:62:ec:27:b7:0c:08:53:
         4f:96:83:54:ef:17:15:77:20:1f:3b:20:e6:8a:88:85:6f:91:
         ac:91:4f:a2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org