Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3a2f34382d3438203d3e203238363339.roa
File:                     323830343a6464303a3a2f34382d3438203d3e203238363339.roa (raw, json)
Hash identifier:          CkKVJKDekFrqo9KdcN6KXh+jqYPExHjotuCEdAmRB38=
Subject key identifier:   15:BB:10:68:8E:03:6D:55:14:69:7F:62:63:6B:2B:98:3C:03:ED:05
Certificate issuer:       /CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
Certificate serial:       3C6A97109D1A4A6975FD9CBCA9153F5D2DCD3BBB
Authority key identifier: 3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3a2f34382d3438203d3e203238363339.roa
Signing time:             Fri 02 Sep 2022 18:55:27 +0000
ROA not before:           Fri 02 Sep 2022 18:50:27 +0000
ROA not after:            Fri 01 Sep 2023 18:55:27 +0000
asID:                     28639
IP address blocks:        2804:dd0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3c:6a:97:10:9d:1a:4a:69:75:fd:9c:bc:a9:15:3f:5d:2d:cd:3b:bb
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3EBC3FE2232091904C043FBCE9FE1663C1E92CBB
        Validity
            Not Before: Sep  2 18:50:27 2022 GMT
            Not After : Sep  1 18:55:27 2023 GMT
        Subject: CN=15BB10688E036D5514697F62636B2B983C03ED05
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:4b:7b:08:d8:08:7b:71:da:7e:52:9c:74:4f:
                    87:3a:90:cf:8c:1d:7f:a7:8f:29:b0:61:27:fc:fe:
                    73:3f:4a:a6:5b:ea:23:4c:f9:bd:2f:88:04:46:d8:
                    c1:7e:a2:b3:0b:29:ab:0a:17:54:21:0a:71:7e:01:
                    9c:d4:7f:41:da:a4:12:e6:9c:93:d6:f7:6b:ed:94:
                    21:8f:54:de:9b:1e:74:e9:fb:38:a2:00:cd:31:08:
                    5e:25:16:42:91:39:cc:83:b6:25:d1:5a:1f:09:b4:
                    82:2b:cd:95:7f:63:03:b7:58:9b:60:2a:ad:46:73:
                    8c:d4:a2:58:a6:9e:ea:07:3b:f4:75:6f:c2:44:44:
                    34:55:c2:a3:7d:c6:fb:a3:65:2e:b6:29:58:da:47:
                    03:fa:20:62:52:a7:01:4c:4e:30:40:fb:24:2b:97:
                    5d:3e:ac:55:67:cd:e9:1f:cf:10:a2:b6:7a:e9:1a:
                    0f:b7:1b:79:28:df:66:38:d0:bb:d7:17:ce:9d:ef:
                    43:b6:bf:ff:87:a6:08:03:29:4f:a3:88:b4:a9:66:
                    e4:57:30:a2:00:72:7a:b7:a3:4c:80:86:b2:82:52:
                    ea:e1:c0:97:f6:19:09:aa:e4:1a:15:7b:65:e4:d9:
                    fc:9c:57:30:11:7d:e8:fc:8c:0d:0b:d6:3b:77:06:
                    38:7f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                15:BB:10:68:8E:03:6D:55:14:69:7F:62:63:6B:2B:98:3C:03:ED:05
            X509v3 Authority Key Identifier:
                keyid:3E:BC:3F:E2:23:20:91:90:4C:04:3F:BC:E9:FE:16:63:C1:E9:2C:BB

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3EBC3FE2232091904C043FBCE9FE1663C1E92CBB.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/5yD1eDx6qKxEcUj8rua8QMK8BfvvAjSnsWRQp3urPNXj/0/323830343a6464303a3a2f34382d3438203d3e203238363339.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:dd0::/48

    Signature Algorithm: sha256WithRSAEncryption
         a7:aa:e3:17:db:bd:45:6c:ff:92:c7:0a:fd:8d:c9:55:83:88:
         66:f0:8e:e7:89:aa:92:ed:7e:87:9d:8a:9d:12:3e:31:65:26:
         87:e5:7e:55:fa:55:dd:e0:d3:84:ff:d5:2a:24:8b:e9:cc:03:
         e9:39:56:69:2c:16:c8:d5:6d:a7:be:77:bb:46:e5:5f:22:39:
         b1:4b:92:dc:f8:7e:cf:7e:72:e8:da:53:f2:23:4b:a5:6a:bd:
         1c:66:aa:ff:9e:44:ee:53:53:f3:3c:a6:c1:2b:e0:aa:2b:57:
         bb:74:4a:f6:6b:78:03:c5:94:e6:9f:2c:e3:d5:8e:b3:56:4f:
         06:93:9a:04:2c:c1:e4:8e:c1:4f:a6:2d:e0:19:c9:cd:f3:9e:
         d6:67:91:81:df:03:fe:4f:92:ec:86:f3:14:91:00:64:00:50:
         0c:6b:ed:c8:7d:33:7e:ce:fe:9b:03:e0:b4:1d:76:21:8b:65:
         65:aa:a5:dc:e7:10:bd:40:19:fa:da:cc:4b:63:ed:f3:5b:a5:
         34:f6:97:96:e9:87:25:a7:1a:a2:10:34:3e:56:ac:37:70:a5:
         88:e0:1c:df:dc:be:d4:3a:1f:9d:78:8f:79:1f:c8:d2:7d:03:
         f2:19:23:b4:c0:67:ed:a6:b9:cc:ae:85:96:2b:f7:f3:a5:9b:
         5f:f9:09:1e
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:11 2024 by rpki-client on console-ams.rpki-client.org