Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a3a2f33322d3434203d3e20323638303239.roa
File:                     323830343a353665303a3a2f33322d3434203d3e20323638303239.roa (raw, json)
Hash identifier:          i7I5qXdnHSNQwFFO0FSh2prN159jvASP1fp69d3TdS0=
Subject key identifier:   A6:E3:A6:E6:10:5E:97:E1:96:92:E3:59:2D:46:73:04:C4:85:54:37
Certificate issuer:       /CN=1F732040F001D9B14A3D546E4DD3C7E056BC5D3D
Certificate serial:       7A7DB397A34ED8202EC9A1C6505C1A806A0B4D3C
Authority key identifier: 1F:73:20:40:F0:01:D9:B1:4A:3D:54:6E:4D:D3:C7:E0:56:BC:5D:3D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F732040F001D9B14A3D546E4DD3C7E056BC5D3D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a3a2f33322d3434203d3e20323638303239.roa
Signing time:             Thu 17 Nov 2022 21:15:20 +0000
ROA not before:           Thu 17 Nov 2022 21:10:20 +0000
ROA not after:            Thu 16 Nov 2023 21:15:20 +0000
asID:                     268029
IP address blocks:        2804:56e0::/32 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            7a:7d:b3:97:a3:4e:d8:20:2e:c9:a1:c6:50:5c:1a:80:6a:0b:4d:3c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1F732040F001D9B14A3D546E4DD3C7E056BC5D3D
        Validity
            Not Before: Nov 17 21:10:20 2022 GMT
            Not After : Nov 16 21:15:20 2023 GMT
        Subject: CN=A6E3A6E6105E97E19692E3592D467304C4855437
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:35:0c:df:04:b8:b1:85:47:3a:b3:ad:46:ab:
                    60:42:17:b0:b0:5e:29:ea:e7:24:7d:ed:42:8c:6b:
                    bc:a7:de:5f:d5:ae:91:13:cb:f7:3e:89:a6:ee:75:
                    1d:32:40:f7:4f:b3:e7:f7:a3:a6:fa:09:b7:20:1f:
                    d5:e9:f8:87:57:2d:6a:2d:b4:99:db:85:ce:d9:a2:
                    79:b5:ad:58:a5:8d:14:4e:3a:33:ff:3b:3e:f5:91:
                    24:60:78:0c:bc:cd:92:e6:05:61:ff:09:3c:be:24:
                    6f:71:60:02:0e:07:64:56:4a:37:32:31:66:12:51:
                    f5:47:d0:f6:fe:30:47:07:18:2d:5c:e0:ba:1c:84:
                    54:35:3e:43:9f:d2:ca:12:da:07:86:68:37:62:58:
                    da:37:fc:8f:b7:79:bc:6d:fb:a8:84:45:7c:3d:d9:
                    80:f5:1c:27:7a:fd:f4:00:ba:a7:75:0f:23:c0:a3:
                    24:41:c1:95:a9:60:ef:b8:ee:16:d0:53:ba:3b:18:
                    0d:44:dc:8c:25:2a:61:c9:35:b6:09:15:56:c4:2f:
                    fd:b3:8f:73:08:16:b5:a0:af:86:58:11:75:0b:f5:
                    49:7e:70:40:88:2d:c2:de:98:c2:ea:a6:86:9e:0c:
                    d5:12:85:5b:3b:e5:5b:28:f4:25:d9:23:c6:b7:36:
                    a6:af
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:E3:A6:E6:10:5E:97:E1:96:92:E3:59:2D:46:73:04:C4:85:54:37
            X509v3 Authority Key Identifier:
                keyid:1F:73:20:40:F0:01:D9:B1:4A:3D:54:6E:4D:D3:C7:E0:56:BC:5D:3D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/1F732040F001D9B14A3D546E4DD3C7E056BC5D3D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1F732040F001D9B14A3D546E4DD3C7E056BC5D3D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6FnFCF58UUgzStbDLn6kAtT74jeTDW5Arg8BHeoFjecU/0/323830343a353665303a3a2f33322d3434203d3e20323638303239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:56e0::/32

    Signature Algorithm: sha256WithRSAEncryption
         4a:94:1d:d5:d4:b8:3e:92:05:fc:98:97:be:85:dc:ba:20:10:
         43:4a:64:b0:a5:13:bf:fc:41:f7:e7:67:8b:2a:85:a0:4e:ea:
         16:0f:f6:9a:9e:5f:d1:1f:31:d6:ab:c1:c6:85:88:09:e2:f9:
         30:d9:e9:36:f4:bc:a4:b4:20:a0:cd:41:25:26:4a:0a:53:b7:
         7e:a8:f0:15:ad:c3:d3:9d:f8:2e:e8:96:bb:9f:f0:30:d4:1a:
         ea:b3:fb:7c:94:54:e1:da:66:5f:34:ac:48:8f:2b:33:23:07:
         2a:1d:73:52:99:62:87:ff:13:37:1b:de:ca:cd:c2:e2:88:a2:
         78:29:92:bd:f5:6a:e8:a8:3a:d8:21:53:5d:7e:a3:83:1e:e9:
         b9:74:c3:53:ea:77:4e:bf:b3:90:13:4a:b6:b2:1f:1e:a8:4b:
         d3:30:c7:8b:8a:d4:2c:a1:00:c0:29:5a:24:5f:f3:81:55:90:
         64:a0:83:36:6c:a6:08:84:4f:ce:0a:b5:3e:d7:93:11:06:cd:
         12:46:b8:30:e8:d8:9d:6e:ec:a6:dd:5c:8e:c5:ad:f2:59:b2:
         49:32:e8:34:47:b2:a5:5f:9b:b1:e2:8e:d9:4a:b9:65:ee:0f:
         18:cc:9b:14:bf:fb:51:6b:71:32:c9:12:9a:08:81:c4:ec:7c:
         65:46:54:2d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:15 2024 by rpki-client on console-ams.rpki-client.org