Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a6130303a3a2f34302d3430203d3e203237363838.roa
File:                     323830343a353461303a6130303a3a2f34302d3430203d3e203237363838.roa (raw, json)
Hash identifier:          wHau7RMJFiTHcO1PB7+M7s5Z6a53CPUyEZxLGfhj6L4=
Subject key identifier:   03:A3:DF:1F:6F:C9:DE:6F:95:2B:CD:E2:D2:7A:4B:7F:77:AE:F4:5C
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       6FE10F52FAF095A96AD65FCE6538D04F6F5DF2CD
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a6130303a3a2f34302d3430203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:04 +0000
ROA not before:           Fri 15 Jul 2022 21:03:04 +0000
ROA not after:            Fri 14 Jul 2023 21:08:04 +0000
asID:                     27688
IP address blocks:        2804:54a0:a00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6f:e1:0f:52:fa:f0:95:a9:6a:d6:5f:ce:65:38:d0:4f:6f:5d:f2:cd
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:04 2022 GMT
            Not After : Jul 14 21:08:04 2023 GMT
        Subject: CN=03A3DF1F6FC9DE6F952BCDE2D27A4B7F77AEF45C
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:60:37:61:8b:20:cb:5f:02:10:9b:e0:1f:17:
                    7a:37:0e:dc:e4:79:58:89:df:e0:ae:b9:da:83:65:
                    17:86:0f:b2:63:6b:30:4f:04:e5:37:c9:7e:a8:38:
                    08:eb:91:a5:5d:a6:63:d8:67:11:e4:ba:39:74:aa:
                    2f:b9:88:47:97:ab:bb:d6:26:b2:35:0a:15:46:1b:
                    a2:e2:96:25:9b:39:5e:ff:45:f2:76:2a:c2:4c:ba:
                    6f:bc:f7:20:69:c9:c5:06:5a:75:22:aa:c1:28:d1:
                    6d:44:f7:20:17:b0:92:5a:ff:bf:2a:95:04:8e:51:
                    3e:e1:59:95:fe:9e:71:ef:fb:be:7a:77:e2:42:58:
                    2e:4a:a8:9b:e6:54:d6:46:2d:60:60:1f:b8:94:30:
                    10:7a:2f:4d:63:da:00:2d:cf:8b:1e:cf:1c:08:1a:
                    9b:1c:28:9a:20:a7:bb:9c:ad:97:63:68:bf:0c:de:
                    33:b6:61:44:62:58:c9:40:7e:0d:f2:48:83:08:77:
                    b1:72:99:f0:2d:4a:c5:80:48:35:c2:d8:03:93:9e:
                    08:94:19:58:d0:73:69:4a:9c:75:8d:1f:06:3a:e6:
                    2f:b0:01:1d:ee:9a:ca:4d:91:44:ff:ca:37:6e:d0:
                    fa:9f:84:a5:77:d7:5f:a3:ea:79:33:93:01:e8:58:
                    bd:41
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                03:A3:DF:1F:6F:C9:DE:6F:95:2B:CD:E2:D2:7A:4B:7F:77:AE:F4:5C
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a6130303a3a2f34302d3430203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0:a00::/40

    Signature Algorithm: sha256WithRSAEncryption
         a3:a7:e0:59:9f:c1:c7:46:49:ae:8f:48:2d:b7:e0:34:e6:f3:
         2b:27:d7:54:a9:1c:53:57:43:ea:17:5a:ea:b1:68:df:8b:1e:
         88:09:de:c9:75:86:f9:72:37:28:92:05:85:a6:18:1c:34:ca:
         76:16:95:59:eb:56:7f:58:5a:19:64:50:35:f2:86:79:f9:43:
         a8:58:bd:63:5b:6f:2d:e8:00:28:f1:69:82:c9:dc:96:30:74:
         2d:6e:a2:df:dd:9f:e6:f7:8c:26:29:18:a8:9c:af:40:0b:eb:
         7a:26:68:ab:8d:32:47:1c:15:3d:6f:16:e7:01:dc:0e:37:9c:
         f1:96:11:5b:24:3a:35:05:fe:1f:e4:8c:dd:1e:4e:fb:59:eb:
         bd:af:2b:45:a9:87:be:af:14:7b:ab:a3:fe:b9:60:7c:f5:be:
         4e:01:4c:ba:8a:61:f0:ae:ef:a3:dc:b1:38:af:ec:2f:5d:2f:
         76:cb:63:d1:37:10:f0:8f:dc:20:11:1b:f0:e8:27:a0:f3:b7:
         f6:73:fc:10:63:7a:ad:6f:ca:aa:a5:1c:ad:44:0f:f5:e7:9a:
         9c:69:a6:3a:fb:b9:0c:96:50:ae:5f:04:1a:86:dd:3b:e2:1b:
         78:33:c9:22:c5:bc:2e:37:7c:e3:b2:89:49:82:57:13:15:bc:
         25:b8:83:43
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:14 2024 by rpki-client on console-ams.rpki-client.org