Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/323830343a356631303a383030303a3a2f33362d3336203d3e20323639303734.roa
File:                     323830343a356631303a383030303a3a2f33362d3336203d3e20323639303734.roa (raw, json)
Hash identifier:          CMAHtxdcshh6da/tQk2/AHePXtk1/+ILT11KH4xAsBk=
Subject key identifier:   BE:6E:36:2C:B6:2D:27:F8:BF:D5:68:F5:C9:A5:18:B2:A7:55:9D:47
Certificate issuer:       /CN=6DFBBB883729CEDE9404E1D96E38F41C751B4A7F
Certificate serial:       3896AA260B01A4C4E7ABC165984106DFBE9DCA64
Authority key identifier: 6D:FB:BB:88:37:29:CE:DE:94:04:E1:D9:6E:38:F4:1C:75:1B:4A:7F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DFBBB883729CEDE9404E1D96E38F41C751B4A7F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/323830343a356631303a383030303a3a2f33362d3336203d3e20323639303734.roa
Signing time:             Thu 01 Jun 2023 20:00:00 +0000
ROA not before:           Thu 01 Jun 2023 19:55:00 +0000
ROA not after:            Sat 01 Jun 2024 20:00:00 +0000
asID:                     269074
IP address blocks:        2804:5f10:8000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            38:96:aa:26:0b:01:a4:c4:e7:ab:c1:65:98:41:06:df:be:9d:ca:64
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6DFBBB883729CEDE9404E1D96E38F41C751B4A7F
        Validity
            Not Before: Jun  1 19:55:00 2023 GMT
            Not After : Jun  1 20:00:00 2024 GMT
        Subject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
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bc:ac:19:6f:61:3c:37:a7:e5:b1:7e:08:1e:b3:
                    e6:bb:29:8f:ff:50:9e:75:5b:81:8d:c3:99:76:c7:
                    d6:99:e1:c1:70:1c:31:28:46:48:58:05:9f:ba:17:
                    bd:06:7f:27:7f:94:7a:6e:01:d0:55:5e:bb:a9:6c:
                    bc:51:d7:79:1e:90:5f:82:83:c4:a9:70:88:c1:63:
                    3d:91:10:2b:44:0f:74:6d:6f:d2:ce:96:1e:9e:3a:
                    43:cd:43:1f:3c:c4:07:23:2b:a0:00:30:04:3b:f9:
                    52:87:33:a2:2b:b8:80:2a:68:a0:df:0d:cf:af:64:
                    16:c2:d7:6e:d4:40:11:f8:87:95:c6:da:6e:11:16:
                    07:ff:a1:ec:d1:0e:22:ee:80:48:7f:80:db:b6:d7:
                    66:97:3d:9a:d2:90:bc:fe:c2:fa:2d:90:e9:50:6e:
                    5d:d3:54:c0:88:6f:71:a5:39:2d:97:91:56:2f:61:
                    11:d9:a6:44:8e:c5:8e:49:68:0b:8b:ad:3d:ce:6f:
                    e3:d2:c5:95:ad:82:dc:08:ad:85:6a:65:2c:9f:ec:
                    9b:94:3a:28:6a:81:72:4a:f3:44:bb:d1:4b:86:d8:
                    83:08:da:ac:ec:8e:08:75:0c:dd:23:c7:ab:4e:68:
                    ef:0f:52:24:8b:0a:5d:d0:06:6e:4d:0f:94:cc:9b:
                    9e:e1
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                BE:6E:36:2C:B6:2D:27:F8:BF:D5:68:F5:C9:A5:18:B2:A7:55:9D:47
            X509v3 Authority Key Identifier:
                keyid:6D:FB:BB:88:37:29:CE:DE:94:04:E1:D9:6E:38:F4:1C:75:1B:4A:7F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/6DFBBB883729CEDE9404E1D96E38F41C751B4A7F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6DFBBB883729CEDE9404E1D96E38F41C751B4A7F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5cxsWUhpvtfQXvJMfKnvEp4UfSbjqPkUoHhhpRXHDgJp/0/323830343a356631303a383030303a3a2f33362d3336203d3e20323639303734.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5f10:8000::/36

    Signature Algorithm: sha256WithRSAEncryption
         aa:81:9b:de:d2:41:cc:f8:f3:7a:27:2c:67:e8:dc:8d:14:55:
         ae:f5:a4:a1:43:69:cd:ba:28:55:7b:91:36:31:32:e7:d0:35:
         cd:74:cc:c1:c6:84:b2:4f:75:f2:00:14:34:73:d9:7a:32:47:
         4c:39:66:e0:dd:56:7d:9a:11:be:66:65:dc:90:64:55:c3:e4:
         ab:26:bd:b5:77:8f:e5:ce:34:59:46:e6:ea:d4:2a:aa:e8:c1:
         b2:7b:16:19:76:7b:30:2b:f6:9d:27:03:70:7d:b9:1e:e7:18:
         ea:71:b0:e6:fb:fe:7b:fc:25:37:02:ec:b5:8f:c3:62:78:ce:
         f7:2e:5d:5e:e7:0a:8f:dd:d8:16:bc:06:f8:1f:02:e9:a2:36:
         15:33:5f:92:d4:02:f4:fc:2e:87:28:cd:ff:80:30:72:af:ff:
         74:c7:9d:62:96:ed:3b:dc:8d:14:aa:e4:52:7a:7a:a0:c1:03:
         5e:94:73:48:98:a3:13:0a:1a:18:b6:7f:7f:37:97:c1:d4:d8:
         3b:ba:3c:8f:68:fb:b3:12:f4:0f:a2:81:55:11:32:d6:d3:1a:
         61:7b:bf:fb:47:c9:97:13:ea:05:f1:86:3f:8c:78:d3:02:e0:
         1f:8a:be:16:2d:77:ca:74:db:cf:72:37:59:23:60:f9:9d:a0:
         7d:63:4a:4d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:42 2024 by rpki-client on console-fra.rpki-client.org