Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/1/323830343a313061303a3a2f33322d3438203d3e203238313733.roa
File:                     323830343a313061303a3a2f33322d3438203d3e203238313733.roa (raw, json)
Hash identifier:          pwZ7TQ3R0/TpWOCfwd3LyaGTILcUUnrmN1dXYE3+NQU=
Subject key identifier:   FE:F4:D5:BD:A1:8F:3F:5B:0D:D5:F3:14:53:6D:4F:BA:47:61:07:24
Certificate issuer:       /CN=690ADC07A3E6DC5671C268C02A122B3164FEB382
Certificate serial:       13D212CEBA9F73A6B8EBF44B5EE839386922B51F
Authority key identifier: 69:0A:DC:07:A3:E6:DC:56:71:C2:68:C0:2A:12:2B:31:64:FE:B3:82
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690ADC07A3E6DC5671C268C02A122B3164FEB382.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/1/323830343a313061303a3a2f33322d3438203d3e203238313733.roa
Signing time:             Thu 04 Apr 2024 20:43:30 +0000
ROA not before:           Thu 04 Apr 2024 20:38:30 +0000
ROA not after:            Thu 03 Apr 2025 20:43:30 +0000
asID:                     28173
IP address blocks:        2804:10a0::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            13:d2:12:ce:ba:9f:73:a6:b8:eb:f4:4b:5e:e8:39:38:69:22:b5:1f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=690ADC07A3E6DC5671C268C02A122B3164FEB382
        Validity
            Not Before: Apr  4 20:38:30 2024 GMT
            Not After : Apr  3 20:43:30 2025 GMT
        Subject: CN=FEF4D5BDA18F3F5B0DD5F314536D4FBA47610724
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ed:42:0f:61:ba:6c:8f:66:df:c3:af:3e:33:c7:
                    79:c7:9f:e7:68:db:79:90:14:32:1e:f9:92:6c:37:
                    b3:b1:53:73:b7:ff:8c:e2:40:a1:ca:9a:1d:b1:bb:
                    db:1a:d7:a1:a7:cc:37:8e:0b:39:4b:87:eb:ea:86:
                    b3:69:74:3a:32:13:15:1b:05:77:c9:d8:27:05:1e:
                    58:10:45:8a:33:ab:d5:4c:cd:32:8e:2d:65:ef:3b:
                    03:11:e5:b9:88:0e:75:58:1a:fd:e2:2e:d8:08:b1:
                    9e:f7:f8:ae:8d:d7:bc:93:c5:68:3a:bc:2c:ce:e3:
                    1a:cb:88:b6:0c:93:c2:9a:c7:ab:bf:b9:8b:ac:ec:
                    1a:dc:13:4a:6e:6d:51:4f:ba:0e:ed:e4:7c:fc:81:
                    6c:7e:1f:e9:8a:2e:d4:18:54:a6:ca:ce:5a:f0:41:
                    17:f8:9a:8e:3e:3e:6d:d7:d6:3f:77:52:13:88:31:
                    80:08:4c:d7:60:0d:f0:a4:53:2b:bd:79:06:fc:96:
                    60:19:6e:e4:65:48:c6:18:f6:77:c7:00:4e:0e:98:
                    18:5b:e9:98:31:79:9c:50:b7:17:2d:5d:29:e2:0b:
                    4f:13:72:43:30:0a:02:3a:0c:0e:16:3f:ad:e5:fc:
                    e2:d8:8c:c6:91:6a:9f:04:b5:d4:4c:7d:4b:9b:39:
                    68:5d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                FE:F4:D5:BD:A1:8F:3F:5B:0D:D5:F3:14:53:6D:4F:BA:47:61:07:24
            X509v3 Authority Key Identifier:
                keyid:69:0A:DC:07:A3:E6:DC:56:71:C2:68:C0:2A:12:2B:31:64:FE:B3:82

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/1/690ADC07A3E6DC5671C268C02A122B3164FEB382.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/690ADC07A3E6DC5671C268C02A122B3164FEB382.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/57i6EhFRpGYi4na8qaF1XYwmwYozik7yWvuPTVvMWgLM/1/323830343a313061303a3a2f33322d3438203d3e203238313733.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:10a0::/32

    Signature Algorithm: sha256WithRSAEncryption
         7a:8a:c5:cb:d0:8a:a0:4a:95:52:5a:ee:60:ee:a3:7f:fd:f1:
         b9:a5:1e:8c:0c:2e:b0:32:71:cc:92:83:f6:b0:b4:5e:04:1f:
         6b:b2:5e:cd:b3:37:ca:3a:16:b5:43:54:db:bd:3e:84:b0:c3:
         09:df:f1:51:ed:a7:8e:fa:d9:eb:9f:18:22:36:a2:1d:cd:71:
         ef:85:d3:74:7c:81:48:a3:76:5f:50:4b:43:ab:93:a8:e9:82:
         d7:e6:15:57:6f:97:d3:0d:6a:6d:ec:a7:24:a5:59:dd:a1:d2:
         0e:13:52:08:91:71:f0:27:71:7d:ac:66:a3:5b:ab:3b:6a:ce:
         02:e6:f2:27:9e:7b:72:7c:7e:0f:9f:a7:49:b1:7e:20:ff:5f:
         1a:4a:3f:b3:31:89:ba:fd:85:c6:84:35:02:b8:47:c5:88:03:
         ba:db:0d:36:3c:fd:eb:f4:ec:de:4f:44:62:fc:21:b9:93:96:
         5f:d5:66:e1:3a:3d:8d:3e:7d:6a:d5:63:66:c1:24:8a:ca:df:
         96:ff:7f:04:07:e2:e7:39:15:7d:95:c5:47:88:ef:f7:bf:37:
         1c:03:22:2b:8a:c5:ec:e0:ae:17:8e:58:25:51:ab:16:35:98:
         b6:36:bf:1a:31:ed:f8:46:29:5e:c7:7d:ee:9b:c3:b2:39:fb:
         2c:32:52:73
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:37 2024 by rpki-client on console-fra.rpki-client.org