Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/323830343a323836383a3a2f33322d3332203d3e20323633393631.roa
File:                     323830343a323836383a3a2f33322d3332203d3e20323633393631.roa (raw, json)
Hash identifier:          4HNSpbVWFNnrPIztXDnRXETkbOr7HXR2F+V/U4QTtiA=
Subject key identifier:   72:68:C0:6C:22:27:FF:AE:A1:8E:69:BC:8B:49:2D:7D:83:35:C8:D8
Certificate issuer:       /CN=C284698E221F7E650755BAB8E4E865D670C7383F
Certificate serial:       1B50A7F8A72281C6CCC96586481375B095E2FFDB
Authority key identifier: C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/323830343a323836383a3a2f33322d3332203d3e20323633393631.roa
Signing time:             Thu 28 Mar 2024 16:58:57 +0000
ROA not before:           Thu 28 Mar 2024 16:53:57 +0000
ROA not after:            Thu 27 Mar 2025 16:58:57 +0000
asID:                     263961
IP address blocks:        2804:2868::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:50:a7:f8:a7:22:81:c6:cc:c9:65:86:48:13:75:b0:95:e2:ff:db
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C284698E221F7E650755BAB8E4E865D670C7383F
        Validity
            Not Before: Mar 28 16:53:57 2024 GMT
            Not After : Mar 27 16:58:57 2025 GMT
        Subject: CN=7268C06C2227FFAEA18E69BC8B492D7D8335C8D8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:eb:e6:95:39:b2:02:ce:b3:fa:36:dd:fa:e4:3e:
                    f3:bb:3c:a4:93:34:19:18:4e:58:fe:5c:ae:55:19:
                    9b:bb:cf:c1:4b:01:9f:91:c3:eb:07:88:07:df:da:
                    57:1b:18:36:91:0d:59:26:34:d7:86:54:61:f1:6a:
                    c2:9d:9f:f4:1e:60:34:49:02:cd:08:6b:1a:9c:1d:
                    0f:91:f0:62:a1:86:a7:ee:97:9b:fe:c5:d5:48:44:
                    10:3a:41:64:86:6e:36:f3:b3:ce:9e:1a:f5:91:53:
                    8f:07:4c:59:31:20:f0:28:a2:35:97:d2:ca:2c:a1:
                    9e:f6:57:3f:5e:15:ca:28:4f:e5:5d:10:1d:cf:ca:
                    6c:99:e6:0d:48:8a:0a:45:f4:c0:03:a3:c3:e3:9c:
                    bd:34:f3:70:b5:63:56:7c:55:43:e2:b0:68:28:58:
                    95:77:79:33:97:44:14:e2:f9:68:43:69:78:0d:e5:
                    f2:05:ca:f6:6d:9b:9b:57:d9:71:80:99:ef:7b:26:
                    65:b8:66:a3:42:96:1b:5f:7f:a6:cf:7f:89:42:86:
                    d8:1a:cc:c6:1a:eb:15:25:85:e4:3b:19:b2:6f:c6:
                    b6:88:7e:2b:7b:51:1b:cb:38:26:7a:78:54:3a:3c:
                    c9:55:71:65:c4:be:e9:43:62:d6:f9:82:f1:e0:ef:
                    fa:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                72:68:C0:6C:22:27:FF:AE:A1:8E:69:BC:8B:49:2D:7D:83:35:C8:D8
            X509v3 Authority Key Identifier:
                keyid:C2:84:69:8E:22:1F:7E:65:07:55:BA:B8:E4:E8:65:D6:70:C7:38:3F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/C284698E221F7E650755BAB8E4E865D670C7383F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C284698E221F7E650755BAB8E4E865D670C7383F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/56JLn87LvrKukdphNygfhpAqU86Cex5MTB6DdRj9fRr7/0/323830343a323836383a3a2f33322d3332203d3e20323633393631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2868::/32

    Signature Algorithm: sha256WithRSAEncryption
         73:42:8e:4b:aa:34:fb:3a:7c:06:d8:23:92:8c:af:c0:f4:fe:
         21:98:e8:e9:c5:42:72:7b:5d:01:d2:85:35:39:b8:b1:9b:0e:
         50:2e:7c:d8:20:cd:80:ce:fc:f8:b3:e1:b2:70:a8:f7:a1:7a:
         a9:43:85:de:d4:d8:63:77:b6:30:d4:ba:19:f0:4b:04:8c:c7:
         41:60:d5:ea:6a:4e:c6:6b:15:aa:4d:30:ed:90:4a:56:bf:e1:
         ab:1c:80:4d:75:b7:eb:3f:ef:72:83:c7:b4:87:34:e6:cd:e3:
         d0:ac:a5:7b:a0:5a:df:8c:c4:f9:53:26:2d:2b:f0:e6:96:83:
         25:45:8d:9c:aa:a6:7e:a6:c6:5e:e1:61:ec:d2:17:19:ae:78:
         c6:ca:63:9c:76:61:3d:07:cd:92:7c:87:79:76:f6:2d:3e:f8:
         ba:6d:ef:d5:bb:83:76:0b:42:6a:dd:04:c4:d2:51:cc:25:4e:
         0b:f3:7b:ba:91:05:da:bd:28:a2:08:df:20:a8:cf:c7:12:ce:
         bd:23:b6:ee:0c:73:9e:7b:63:16:64:54:bc:f8:41:4b:c9:06:
         0b:7e:68:aa:36:c8:86:ab:17:8f:bd:c7:27:05:f8:d9:68:ff:
         40:82:02:6c:73:80:39:b1:b5:21:a2:c0:a0:0c:e6:6e:2b:f3:
         dc:1a:d7:e4
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org