Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a6230303a3a2f34302d3430203d3e203237363838.roa
File:                     323830343a353461303a6230303a3a2f34302d3430203d3e203237363838.roa (raw, json)
Hash identifier:          25sOV05+/mECUh5Cm4qV6bmxBUo39SH1CTDDV8HIyfk=
Subject key identifier:   37:BC:BD:69:B9:89:14:D7:AC:4B:37:4A:2E:4D:F3:EA:D0:4B:02:BE
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       44E97105FA7C81710D7FD245858ACEC402057957
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a6230303a3a2f34302d3430203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:12 +0000
ROA not before:           Fri 15 Jul 2022 21:03:12 +0000
ROA not after:            Fri 14 Jul 2023 21:08:12 +0000
asID:                     27688
IP address blocks:        2804:54a0:b00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            44:e9:71:05:fa:7c:81:71:0d:7f:d2:45:85:8a:ce:c4:02:05:79:57
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:12 2022 GMT
            Not After : Jul 14 21:08:12 2023 GMT
        Subject: CN=37BCBD69B98914D7AC4B374A2E4DF3EAD04B02BE
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e8:08:ae:35:13:5e:0c:94:c7:bf:0a:61:a0:98:
                    14:ef:2f:b2:71:22:8b:a5:59:53:0b:14:c3:24:85:
                    bd:ae:0a:36:ae:0a:24:70:c3:99:4f:f8:2c:e9:5b:
                    2b:a7:e4:89:36:d1:d2:f0:59:d4:5e:34:8f:80:01:
                    4c:81:46:3b:ce:ea:cb:27:f3:bc:5f:9f:b8:75:8c:
                    9c:42:83:37:7d:aa:9c:51:57:8d:b0:c3:05:b3:27:
                    35:bb:34:06:28:86:c0:01:a3:c0:56:b2:85:d9:c5:
                    83:f4:2c:cb:55:54:b1:82:17:09:a2:b1:54:ab:96:
                    17:b9:00:0d:0f:ec:d0:9a:d8:a0:8e:75:30:b4:9a:
                    61:ad:4e:76:b5:2c:59:55:f5:dd:7a:4a:9d:ea:7c:
                    61:89:52:40:8a:36:76:f1:7b:c8:9d:98:32:84:74:
                    c2:21:3f:e1:9d:9e:34:bb:d3:45:4b:37:0c:12:de:
                    42:56:ff:76:0c:84:77:fd:b3:13:32:fd:83:9a:ae:
                    5c:e2:ee:9b:8c:91:b5:b3:e0:e7:f9:da:bb:67:93:
                    da:96:7d:ee:5c:1c:31:be:d2:da:a8:33:85:6d:e8:
                    82:b3:fa:d9:59:35:03:f6:71:09:de:ac:de:b7:ea:
                    67:18:50:86:f1:f0:11:1f:1c:ea:45:81:d5:91:94:
                    65:35
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                37:BC:BD:69:B9:89:14:D7:AC:4B:37:4A:2E:4D:F3:EA:D0:4B:02:BE
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a6230303a3a2f34302d3430203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0:b00::/40

    Signature Algorithm: sha256WithRSAEncryption
         3f:a8:97:0f:41:a0:1c:d7:f0:4e:94:be:7b:a6:bd:c1:44:e8:
         d1:80:0f:58:90:f6:72:f1:41:50:2f:69:c7:ec:0c:a4:02:42:
         0d:07:cd:2c:95:0f:b5:a4:3a:61:b5:75:8d:09:34:60:59:c9:
         c2:51:db:14:f8:6d:64:d9:93:b8:d1:a1:d0:49:fd:e0:59:4d:
         62:4b:00:7b:75:15:5f:ec:bd:fa:be:dc:3b:a0:28:83:8f:36:
         3d:76:8d:44:ff:6e:f5:ad:74:f2:1e:c9:27:6a:fd:1a:05:d1:
         0d:48:6c:b7:ef:1a:a9:9e:b0:72:b8:f6:dc:93:9f:2a:73:7a:
         78:26:c5:bc:66:d7:2a:33:2b:cd:00:e3:fc:c4:8d:a1:f8:01:
         c7:7c:51:39:07:86:40:59:4a:42:3b:01:e5:95:95:52:6e:1b:
         e7:50:68:e5:63:70:61:9b:4a:d3:24:cd:aa:7e:0e:52:2f:90:
         03:dc:d9:fd:62:b1:70:87:ca:51:15:33:db:93:01:b5:d6:fa:
         98:ef:b8:89:a3:9c:b2:72:17:dd:3e:40:5a:0c:d3:2f:ff:aa:
         cb:4d:d9:2f:93:82:b2:4e:5a:ca:66:80:d9:55:58:9a:d2:58:
         14:20:c1:b1:19:68:05:41:b9:87:13:bc:46:4d:9a:19:3e:c4:
         77:3c:b0:bf
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org