Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a6430303a3a2f34302d3430203d3e203237363838.roa
File:                     323830343a353461303a6430303a3a2f34302d3430203d3e203237363838.roa (raw, json)
Hash identifier:          DaJqF42hQbSRdDue1VtAD3N8Q76t1MEvlSiH1IaTLTk=
Subject key identifier:   D0:C5:24:5B:92:3E:0D:8A:01:04:6B:9F:D7:DC:62:BE:C7:6D:86:DB
Certificate issuer:       /CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
Certificate serial:       534343BBBA3257586FBBE36487BFF5C57281C477
Authority key identifier: AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a6430303a3a2f34302d3430203d3e203237363838.roa
Signing time:             Fri 15 Jul 2022 21:08:09 +0000
ROA not before:           Fri 15 Jul 2022 21:03:09 +0000
ROA not after:            Fri 14 Jul 2023 21:08:09 +0000
asID:                     27688
IP address blocks:        2804:54a0:d00::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            53:43:43:bb:ba:32:57:58:6f:bb:e3:64:87:bf:f5:c5:72:81:c4:77
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67
        Validity
            Not Before: Jul 15 21:03:09 2022 GMT
            Not After : Jul 14 21:08:09 2023 GMT
        Subject: CN=D0C5245B923E0D8A01046B9FD7DC62BEC76D86DB
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d9:7d:b4:f9:85:05:e1:dd:ac:78:cd:32:d6:ac:
                    40:1d:c4:ca:30:cb:27:13:6c:10:3b:3d:7b:4a:f7:
                    26:05:69:b0:a6:a2:cb:2b:b5:50:c2:8c:f0:f8:9d:
                    06:c3:51:4e:ca:64:dc:e8:92:6b:c2:6b:f5:06:79:
                    36:9d:13:f5:ca:69:4a:46:19:1c:20:d6:23:86:1a:
                    92:58:71:d2:e0:c6:85:24:98:a1:42:5e:58:55:46:
                    9d:1c:f8:45:d8:af:38:d9:db:48:d4:dd:b9:79:c7:
                    81:31:ae:c9:d0:6c:ac:4c:e4:7f:c0:2e:e8:cd:c0:
                    2a:9d:df:d5:31:80:c0:5f:1b:8d:9a:d8:8f:74:2f:
                    47:bb:43:94:14:5f:3f:a3:3e:7c:fd:9d:49:86:5a:
                    9d:cc:87:c6:b2:ec:6f:c7:4f:f1:a5:88:38:57:e3:
                    bb:c0:1e:98:74:5b:90:7c:6e:9c:84:e4:98:03:da:
                    98:83:b9:53:22:e2:48:34:21:d8:ec:c0:93:37:26:
                    ce:cf:a2:1d:96:e5:ad:79:72:e7:9e:d4:f0:d1:ef:
                    0e:29:f0:0d:81:92:1a:35:07:4c:ef:a0:49:a0:4a:
                    4b:8c:1d:bf:e4:3a:0b:88:ed:dc:a1:be:20:b6:83:
                    14:52:4d:9e:17:b8:ee:38:d1:8a:6e:3f:47:22:c6:
                    e2:97
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D0:C5:24:5B:92:3E:0D:8A:01:04:6B:9F:D7:DC:62:BE:C7:6D:86:DB
            X509v3 Authority Key Identifier:
                keyid:AA:49:B8:B3:EB:5A:75:5B:D4:A1:8B:3F:5B:C2:4D:7C:2A:E3:EC:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/AA49B8B3EB5A755BD4A18B3F5BC24D7C2AE3EC67.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6C4L4VxXsr93URQ2vWUvB81tVommxtXSY5TK3Xm61HH8/0/323830343a353461303a6430303a3a2f34302d3430203d3e203237363838.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:54a0:d00::/40

    Signature Algorithm: sha256WithRSAEncryption
         0c:e3:69:48:8c:4e:c5:29:4a:a0:bc:c1:5b:b2:db:90:f3:be:
         54:9f:6b:24:8a:6b:1a:97:2a:db:5b:1c:0c:4e:09:d9:1b:70:
         26:12:d8:68:13:de:d4:8c:d7:67:41:a2:80:9a:f4:7c:5b:48:
         20:4f:21:de:3a:f7:77:62:69:de:5c:71:ee:ee:2c:17:20:f7:
         01:1a:96:c6:4d:1b:9c:92:1a:44:1a:7f:2a:33:2b:43:ea:f0:
         c6:75:58:68:ba:63:1c:1a:ed:72:a7:9b:11:a4:99:aa:52:a8:
         ad:84:b3:c6:91:52:d1:5e:e8:e5:cc:99:3e:74:eb:b8:ea:54:
         eb:af:9c:04:8c:a7:e1:07:b6:8d:e6:92:2d:e5:7f:5d:b0:95:
         c1:64:ce:63:0a:b6:39:d6:2d:b6:27:3a:cd:66:25:c3:14:f1:
         e9:0d:f8:e0:4f:2b:49:8a:e7:f0:2d:34:24:dc:8f:ff:b5:e1:
         4d:94:c4:52:d2:46:bc:5b:8d:4d:d1:c9:ed:e4:3a:89:95:b2:
         2a:c6:5a:6e:73:4c:34:33:26:a2:13:e6:84:b1:6a:0c:1e:8c:
         d8:c6:60:52:92:e1:69:f6:0b:62:e3:23:e6:68:ca:9b:7b:36:
         d0:68:14:09:09:00:ad:2f:a3:d3:bf:55:3d:7e:75:ac:c9:ac:
         b5:9d:c9:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:45 2024 by rpki-client on console-fra.rpki-client.org