Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3430303a3a2f34302d3430203d3e203237363838.roa
File:                     323830343a353461303a3430303a3a2f34302d3430203d3e203237363838.roa (raw, json)
Hash identifier:          xcyyPeNx3hHPDekYGoOYx7GXLcqlY/5CF/8eMtpZTZY=
Subject key identifier:   86:F4:23:D0:D8:71:20:27:2E:B9:E3:81:64:47:5F:07:45:A3:58:8C
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       16D9B135736CECA5FE325AFCE6BC7753D1DADEE8
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3430303a3a2f34302d3430203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:07 +0000
ROA not before:           Fri 15 Jul 2022 21:03:07 +0000
ROA not after:            Fri 14 Jul 2023 21:08:07 +0000
asID:                     27688
IP address blocks:        2804:54a0:400::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            16:d9:b1:35:73:6c:ec:a5:fe:32:5a:fc:e6:bc:77:53:d1:da:de:e8
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:07 2022 GMT
            Not After : Jul 14 21:08:07 2023 GMT
        Subject: CN=86F423D0D87120272EB9E38164475F0745A3588C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:94:d1:35:1d:53:d2:b9:cd:cb:e2:27:dd:fc:7d:
                    dd:f8:4c:51:a5:46:93:71:80:bb:40:a7:91:cd:6b:
                    db:b2:8b:10:11:92:aa:55:fa:4f:5a:af:da:3c:28:
                    77:57:42:80:ee:b8:58:50:46:74:1f:60:1b:2b:17:
                    f7:df:aa:ec:58:9e:88:19:1a:bd:b6:18:51:13:5a:
                    45:f6:47:68:81:86:db:29:c8:44:bb:6c:45:85:23:
                    e7:cb:5f:ea:bd:b1:f5:32:7b:29:7b:f9:32:79:50:
                    9e:4d:d9:4d:98:1b:cc:f8:69:86:4d:2f:a9:18:05:
                    ee:12:64:fe:01:d4:f6:a8:89:39:55:a6:5d:cd:8d:
                    ba:bd:e5:4f:44:5e:88:56:17:7a:c0:d9:66:03:78:
                    24:de:0a:81:3c:c8:a5:14:cc:dd:f0:3d:6f:d9:75:
                    99:fe:a9:9b:73:6b:03:33:58:5d:4b:b8:6e:dd:53:
                    70:99:3a:a0:52:07:57:27:09:15:28:27:a9:4e:ea:
                    c5:f2:83:a4:6a:5d:e6:b8:be:ea:c9:ba:2e:e4:e7:
                    d1:e7:e1:e4:fa:e4:b8:8e:78:81:15:23:9b:ef:0a:
                    55:30:81:f7:2a:c9:e1:f2:34:74:7a:4d:40:43:49:
                    a4:d1:8c:2a:ab:ae:17:63:f2:72:88:d9:33:18:f7:
                    f7:09
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                86:F4:23:D0:D8:71:20:27:2E:B9:E3:81:64:47:5F:07:45:A3:58:8C
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3430303a3a2f34302d3430203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0:400::/40

    Signature Algorithm: sha256WithRSAEncryption
         30:f4:46:2c:da:98:d1:a8:68:5e:c5:27:a9:5d:7c:0f:d8:f9:
         90:b2:d4:e6:0d:98:66:be:ff:a3:fd:e4:21:8b:cc:51:01:0b:
         bb:c4:50:05:35:ce:af:eb:e3:b1:77:b0:8c:b1:7d:ba:45:1e:
         e9:41:d7:24:ae:46:d8:cf:ae:a6:c8:ce:14:27:c7:37:cb:f4:
         64:b6:d6:f7:dd:8a:ae:fa:17:ad:89:99:33:53:76:13:ee:ca:
         3d:a0:5a:bf:87:8a:fb:cd:83:ef:ec:d1:55:0f:93:45:1a:82:
         90:8b:03:6c:72:92:01:19:c0:b5:a0:00:08:f5:bb:df:f6:4a:
         a5:13:bf:59:e2:22:5f:1d:13:1f:cc:bb:b8:bb:29:16:62:a1:
         26:29:40:83:a0:ad:ea:06:27:c1:dc:db:c6:bb:aa:c8:e4:05:
         14:10:67:72:19:bd:26:13:e1:26:45:7d:bf:21:d8:9c:3e:ca:
         4a:e7:4a:e3:22:30:82:09:a5:ff:2b:7d:cc:ba:80:e6:72:06:
         86:b8:e7:48:a4:67:00:33:53:3f:d2:d3:87:6f:d3:f3:53:55:
         31:47:ee:41:3a:68:a6:db:b7:e6:88:da:e8:49:e1:09:ee:dd:
         69:63:5c:1b:43:f7:73:25:52:2d:ac:18:04:e6:97:63:bc:cc:
         4a:b5:4b:09
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org