Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a3a2f33332d3333203d3e20323731323633.roa
File:                     323830343a373863303a3a2f33332d3333203d3e20323731323633.roa (raw, json)
Hash identifier:          elxhQOTTZw7mcw+Yl40fACEN9fnXRdcutepNbca9ooA=
Subject key identifier:   68:7E:82:6E:89:94:6A:77:99:3B:A3:F2:1E:FC:09:87:A3:DC:9B:6E
Certificate issuer:       /CN=698A229B1E11E12DAF0F78DB2769039EE3C78C26
Certificate serial:       3678AB4DDA24DEB68631DFC135F7DE2F67D702B9
Authority key identifier: 69:8A:22:9B:1E:11:E1:2D:AF:0F:78:DB:27:69:03:9E:E3:C7:8C:26
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698A229B1E11E12DAF0F78DB2769039EE3C78C26.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a3a2f33332d3333203d3e20323731323633.roa
Signing time:             Tue 19 Apr 2022 17:23:13 +0000
ROA not before:           Tue 19 Apr 2022 17:18:13 +0000
ROA not after:            Tue 18 Apr 2023 17:23:13 +0000
asID:                     271263
IP address blocks:        2804:78c0::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            36:78:ab:4d:da:24:de:b6:86:31:df:c1:35:f7:de:2f:67:d7:02:b9
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=698A229B1E11E12DAF0F78DB2769039EE3C78C26
        Validity
            Not Before: Apr 19 17:18:13 2022 GMT
            Not After : Apr 18 17:23:13 2023 GMT
        Subject: CN=687E826E89946A77993BA3F21EFC0987A3DC9B6E
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:0b:4c:1e:3d:c6:5f:2e:19:3f:d9:de:94:73:
                    80:fe:fd:a3:94:b7:3c:1e:92:07:95:80:13:3c:23:
                    7d:38:76:51:da:6d:86:97:18:46:aa:18:fe:88:67:
                    bc:26:9a:ee:a0:c1:76:74:86:04:06:32:d5:d2:bf:
                    47:8a:fb:7f:e0:00:4e:e9:47:b4:e7:6b:02:0a:bc:
                    95:dc:6b:e4:7b:9a:a9:62:b5:5f:45:22:13:0b:38:
                    ce:3f:6c:7c:9d:17:e1:b4:6a:9d:47:be:db:37:3e:
                    52:ba:72:34:28:c8:81:1a:f3:36:3d:b5:be:39:ef:
                    d6:07:9f:be:88:d8:4a:2f:66:c4:f6:cc:4e:47:56:
                    02:1e:f4:f2:38:a1:3a:a7:e6:89:12:59:d3:fb:50:
                    e5:14:b1:fa:81:be:d8:02:64:72:24:2a:e0:23:86:
                    8a:16:0f:c6:0b:1e:00:04:5f:95:39:56:60:b5:a6:
                    df:1f:f8:26:f2:03:18:fe:48:81:b2:9c:e0:61:cf:
                    8b:ff:7a:ef:91:39:c1:b6:e0:b6:f0:ef:67:93:5b:
                    62:f0:ae:3d:86:c9:49:f1:c2:52:50:a9:1c:f6:fb:
                    5e:94:05:79:96:9a:4c:ef:82:d9:d2:d4:20:c2:0b:
                    f6:24:d5:81:45:57:a0:f2:65:63:c6:cf:c5:50:9c:
                    bb:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                68:7E:82:6E:89:94:6A:77:99:3B:A3:F2:1E:FC:09:87:A3:DC:9B:6E
            X509v3 Authority Key Identifier:
                keyid:69:8A:22:9B:1E:11:E1:2D:AF:0F:78:DB:27:69:03:9E:E3:C7:8C:26

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/698A229B1E11E12DAF0F78DB2769039EE3C78C26.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/698A229B1E11E12DAF0F78DB2769039EE3C78C26.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/4tPnLrtDtqAiBrAcnqNNkoxVJ2gv5vf7F5sGFzXbs8zK/0/323830343a373863303a3a2f33332d3333203d3e20323731323633.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:78c0::/33

    Signature Algorithm: sha256WithRSAEncryption
         4e:2e:1d:c1:c7:e6:d3:52:e8:24:02:f7:26:5a:8f:90:dc:6d:
         91:f0:6c:37:d4:02:c9:4d:6a:95:e9:59:72:75:79:87:4e:6e:
         27:aa:b5:5b:f2:a8:15:16:5c:b9:aa:06:66:58:f8:17:25:db:
         5b:71:40:25:1b:b8:79:6f:2e:ba:50:f3:89:bf:e6:1e:ca:7f:
         f6:dd:70:73:34:d8:99:e4:14:c7:e3:ad:a8:c5:5a:0a:d5:d1:
         41:f4:6d:90:7b:86:b9:e2:99:6e:13:e7:73:83:f0:b4:16:ea:
         7d:49:3f:b5:a9:4d:9f:1b:44:d4:1d:79:98:af:14:96:68:eb:
         f9:01:c9:34:a6:71:1a:31:13:94:d3:87:a8:28:7d:45:7a:92:
         45:ed:09:19:3a:e5:6d:fc:57:4e:0a:9c:7a:81:2a:39:9c:0d:
         e7:ec:df:0f:dd:cf:1f:51:63:de:fa:08:69:1e:f0:55:4e:20:
         da:a5:81:f1:a4:57:40:42:0f:bf:e9:5b:7b:f1:a6:7b:8e:51:
         b1:37:9e:ec:58:02:df:6e:70:0e:5f:34:89:0a:ed:7a:64:35:
         80:4d:86:0d:40:14:44:d6:1b:9a:5b:6f:3b:5e:f0:a0:e3:3d:
         c5:59:4a:57:4d:16:fa:15:e6:32:e3:db:f3:c2:9c:1f:9d:01:
         b9:25:8a:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org