Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a383030303a3a2f33332d3333203d3e20323731363236.roa
File:                     323830343a376537383a383030303a3a2f33332d3333203d3e20323731363236.roa (raw, json)
Hash identifier:          bCuiifpl7Pl9AowHKYfDIrHxTFnFlqWjBaEqq0K73QE=
Subject key identifier:   0F:71:F5:34:DC:02:40:76:55:BA:53:3A:5E:B4:D4:E5:7A:97:15:23
Certificate issuer:       /CN=6C68F4E439F49730F3B62FC2F240863A8AB2A820
Certificate serial:       26C4365BF419BC7EA103D67A360BA0251DD0E67B
Authority key identifier: 6C:68:F4:E4:39:F4:97:30:F3:B6:2F:C2:F2:40:86:3A:8A:B2:A8:20
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C68F4E439F49730F3B62FC2F240863A8AB2A820.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a383030303a3a2f33332d3333203d3e20323731363236.roa
Signing time:             Tue 04 Jul 2023 16:12:42 +0000
ROA not before:           Tue 04 Jul 2023 16:07:42 +0000
ROA not after:            Tue 02 Jul 2024 16:12:42 +0000
asID:                     271626
IP address blocks:        2804:7e78:8000::/33 maxlen: 33

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            26:c4:36:5b:f4:19:bc:7e:a1:03:d6:7a:36:0b:a0:25:1d:d0:e6:7b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6C68F4E439F49730F3B62FC2F240863A8AB2A820
        Validity
            Not Before: Jul  4 16:07:42 2023 GMT
            Not After : Jul  2 16:12:42 2024 GMT
        Subject: CN=0F71F534DC02407655BA533A5EB4D4E57A971523
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a6:10:6b:0f:c5:74:14:87:c5:aa:63:85:12:75:
                    65:61:95:c6:bc:8d:24:6c:ba:4d:37:9e:b9:e9:23:
                    18:d8:f9:f2:a9:f9:b6:96:d8:48:94:70:7b:23:f4:
                    04:4f:48:9f:d4:b7:76:a9:ca:b0:0c:c4:8d:ad:29:
                    54:64:f1:cf:52:74:b7:7a:e0:55:e2:8f:4c:9b:ad:
                    94:0f:06:a7:6e:17:89:f3:95:db:f5:0f:15:0c:cd:
                    f6:d4:6b:b9:2a:db:42:06:16:ef:1a:a5:32:f6:04:
                    18:65:88:e8:e8:9f:9b:64:7c:ab:27:35:4f:cc:62:
                    63:5e:d2:9c:d5:0f:ae:e1:b8:a1:f1:33:39:e4:5f:
                    f8:91:a2:28:dc:b9:26:60:11:ac:25:10:bb:57:46:
                    8f:1d:fc:b4:4d:ec:8c:b8:c7:56:de:be:dd:e5:4d:
                    94:71:6e:29:20:72:26:64:14:35:36:67:1b:c3:83:
                    a9:bf:ee:29:0a:18:4f:3c:67:cb:2d:d8:cf:a9:83:
                    51:04:93:45:6c:f6:77:fc:f6:65:a7:07:2d:84:bb:
                    2e:a7:62:13:c5:02:f4:58:ec:15:55:67:e9:18:4e:
                    bd:dd:a2:8b:c0:21:88:1f:4d:01:7c:07:7d:5e:94:
                    c9:be:2f:bd:35:5e:e4:82:2d:b3:b3:6e:7d:55:48:
                    c4:87
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                0F:71:F5:34:DC:02:40:76:55:BA:53:3A:5E:B4:D4:E5:7A:97:15:23
            X509v3 Authority Key Identifier:
                keyid:6C:68:F4:E4:39:F4:97:30:F3:B6:2F:C2:F2:40:86:3A:8A:B2:A8:20

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/6C68F4E439F49730F3B62FC2F240863A8AB2A820.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6C68F4E439F49730F3B62FC2F240863A8AB2A820.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5XPZQU7pjWzTwb47a5MzGu2MtSPNHyEvknoajUgDPSnh/0/323830343a376537383a383030303a3a2f33332d3333203d3e20323731363236.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7e78:8000::/33

    Signature Algorithm: sha256WithRSAEncryption
         39:11:99:82:28:e6:c9:80:70:26:61:f6:13:aa:ac:14:c4:d8:
         b0:2b:21:28:0e:0d:e4:b4:40:8b:a7:cd:ba:aa:72:13:44:9a:
         21:87:23:92:89:ec:27:66:29:fa:4d:b6:78:ad:d0:b8:3c:97:
         b5:a0:7f:b3:0e:3a:d3:c5:88:26:dc:fd:59:ad:55:ef:e5:56:
         30:11:25:a7:54:fe:24:96:0c:23:e3:aa:36:30:be:4e:2d:2d:
         b6:aa:47:d6:a5:f4:f3:ac:c5:56:20:be:ae:49:be:ef:c2:76:
         18:25:83:75:78:d1:df:89:26:8d:4d:b1:a8:c0:3d:50:7e:d8:
         91:b0:21:82:15:7a:79:b2:52:8e:23:16:bd:e6:2c:44:01:de:
         49:40:6c:37:cd:59:68:0e:cf:35:c8:90:48:32:ce:17:73:26:
         bb:65:86:db:51:21:a3:65:66:6e:45:ab:19:93:b7:4a:a3:a3:
         6f:04:19:63:e0:d5:6d:46:d8:c4:43:b6:65:33:96:b5:c4:6f:
         38:28:12:44:20:e1:42:76:57:f9:e3:77:f3:25:9a:f6:f8:a6:
         a5:1b:d5:a8:38:f6:f4:e4:92:e8:87:06:86:b1:51:eb:a4:1f:
         26:43:d0:9a:74:11:76:a4:b1:ef:f3:24:e9:db:fc:86:8a:bb:
         7c:07:cf:c7
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org