Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3530303a3a2f34302d3430203d3e203237363838.roa
File:                     323830343a353461303a3530303a3a2f34302d3430203d3e203237363838.roa (raw, json)
Hash identifier:          QfmGx3Dukc/W7DcB+sGZCElQCMXxD8nafhA34K6wDbA=
Subject key identifier:   45:1A:39:01:5B:97:43:A3:3C:4A:48:32:C5:53:A0:B0:79:EC:64:46
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       06D25FB8819EDD121A5050F2BE79DC0FAB320E2C
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3530303a3a2f34302d3430203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:11 +0000
ROA not before:           Fri 15 Jul 2022 21:03:11 +0000
ROA not after:            Fri 14 Jul 2023 21:08:11 +0000
asID:                     27688
IP address blocks:        2804:54a0:500::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            06:d2:5f:b8:81:9e:dd:12:1a:50:50:f2:be:79:dc:0f:ab:32:0e:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:11 2022 GMT
            Not After : Jul 14 21:08:11 2023 GMT
        Subject: CN=451A39015B9743A33C4A4832C553A0B079EC6446
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a9:64:29:a3:57:42:62:05:20:a2:47:00:ac:de:
                    01:c9:b1:e1:e2:70:99:4c:dc:3b:b4:df:06:01:f4:
                    9f:b8:63:92:27:ad:71:bf:0b:cd:86:00:3b:90:46:
                    28:2d:af:bc:de:5a:58:62:a9:02:ab:0e:e0:de:b5:
                    5a:c8:50:1d:22:c3:6b:8e:68:31:39:c2:31:79:f3:
                    dc:09:99:47:0a:fc:af:ca:f8:5f:eb:52:e0:47:4c:
                    ed:a8:87:49:bf:71:cb:e5:c4:99:fc:c9:5d:a7:a5:
                    9c:86:1f:3a:5a:b8:f8:bc:6e:99:f7:fd:ff:8c:40:
                    bf:62:e0:51:0c:b1:10:39:7b:d8:75:b5:09:36:83:
                    79:c3:ee:93:8a:eb:2e:eb:c0:34:93:42:d1:32:0d:
                    df:e4:4a:01:83:af:64:4c:7f:ff:62:f9:96:77:8a:
                    e8:a3:f6:5e:07:f2:ea:1e:fa:3d:49:36:55:65:ce:
                    97:2b:9e:b5:1e:37:22:08:2f:4c:51:6f:2b:15:cb:
                    c8:92:8b:3b:77:8f:32:9d:22:95:fc:a7:d2:33:81:
                    60:6f:2f:d0:d3:47:7a:bf:20:14:9e:82:45:6a:5f:
                    3c:e5:9e:0e:8a:33:df:b5:46:96:05:0e:48:30:a4:
                    9b:f9:de:21:b9:c0:e2:6e:f7:dc:d7:ad:3b:b7:31:
                    53:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                45:1A:39:01:5B:97:43:A3:3C:4A:48:32:C5:53:A0:B0:79:EC:64:46
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a3530303a3a2f34302d3430203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0:500::/40

    Signature Algorithm: sha256WithRSAEncryption
         4a:40:72:9d:76:06:cc:22:72:1e:9f:b0:79:44:4c:4c:f9:64:
         cd:a3:b6:38:20:ee:2d:24:c1:d8:d1:2d:47:17:d1:33:69:f6:
         12:b4:ed:7b:80:58:d1:82:6e:c0:88:bc:b2:1b:27:59:55:45:
         3e:97:1e:e1:90:4c:30:7a:c8:a5:86:02:4f:1b:e9:1d:ff:6f:
         4c:d8:fb:42:64:35:d7:d3:3d:a7:ae:46:89:ec:8b:a8:40:14:
         ea:94:1e:14:9b:8a:41:21:7f:94:76:b5:31:85:ec:d3:58:2b:
         f4:f9:60:d9:7f:bd:f5:eb:1c:61:d4:08:4d:38:a9:c8:d9:48:
         e5:88:51:01:c1:0c:a3:20:5e:61:b1:a3:9f:4e:99:b1:ad:34:
         7c:ed:9b:a1:2a:61:ad:62:15:d7:32:ad:31:a6:6f:aa:50:d4:
         9c:61:6f:32:a8:19:03:3c:8e:0c:9f:9b:53:f7:b9:dd:9b:8e:
         3e:4a:c1:1e:d3:eb:0b:d0:ec:d4:e9:33:95:38:df:97:e2:59:
         1d:ad:5f:6e:d7:b9:3b:62:e5:1b:ce:fe:98:82:d9:55:93:60:
         f4:8d:d0:f5:b7:60:10:ec:53:1c:fa:4e:9b:a4:27:28:d0:72:
         a0:f9:da:11:15:65:f9:bb:ee:f1:81:b8:d7:20:56:cb:03:d9:
         fd:53:74:93
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org