Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6US3bqmhAWZaXCkQTtd3zF39RSQ29Gnzh6wLhYEetoqo/0/323830343a363766343a3a2f33322d3438203d3e20323639363631.roa
File:                     323830343a363766343a3a2f33322d3438203d3e20323639363631.roa (raw, json)
Hash identifier:          2zazWhm6bxQ/D21zbFA4Z8pgC6M0WZZivfLm3I0ULW8=
Subject key identifier:   55:AB:D4:18:0A:89:76:25:A7:49:E6:DF:64:2B:20:2D:E2:F0:0E:EF
Certificate issuer:       /CN=3C776B31532492FD7BCB413400F3F842372D17A0
Certificate serial:       7699F033510AC8287107CB5A18DE63F85445EE2C
Authority key identifier: 3C:77:6B:31:53:24:92:FD:7B:CB:41:34:00:F3:F8:42:37:2D:17:A0
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C776B31532492FD7BCB413400F3F842372D17A0.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6US3bqmhAWZaXCkQTtd3zF39RSQ29Gnzh6wLhYEetoqo/0/323830343a363766343a3a2f33322d3438203d3e20323639363631.roa
Signing time:             Mon 08 Jan 2024 15:01:17 +0000
ROA not before:           Mon 08 Jan 2024 14:56:17 +0000
ROA not after:            Mon 06 Jan 2025 15:01:17 +0000
asID:                     269661
IP address blocks:        2804:67f4::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:99:f0:33:51:0a:c8:28:71:07:cb:5a:18:de:63:f8:54:45:ee:2c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=3C776B31532492FD7BCB413400F3F842372D17A0
        Validity
            Not Before: Jan  8 14:56:17 2024 GMT
            Not After : Jan  6 15:01:17 2025 GMT
        Subject: CN=55ABD4180A897625A749E6DF642B202DE2F00EEF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e3:98:e3:56:26:76:d9:64:02:a4:0a:06:ce:ca:
                    0a:17:a3:16:f4:b0:43:4b:d9:44:1c:e1:64:8c:1e:
                    9b:73:3e:f6:ab:90:ff:a0:22:d2:46:79:a3:61:90:
                    bf:cd:af:6b:ca:b9:57:38:55:74:de:67:c1:82:d1:
                    7c:0b:89:d0:ea:a5:24:13:ab:b3:43:fb:a9:8a:68:
                    ba:76:4d:3e:5c:c9:e0:f6:56:bb:70:eb:25:e9:69:
                    31:f1:61:ad:47:f6:5e:63:c8:c8:82:ac:22:3e:de:
                    9c:e5:bc:8e:d9:e5:a8:0c:ab:e6:81:a3:8e:5a:20:
                    36:b2:97:ac:22:f7:09:81:de:60:29:eb:b5:a4:e0:
                    0a:a6:13:54:ad:0c:a6:2b:85:43:07:90:95:21:cd:
                    00:6f:9e:fa:4f:ca:ae:36:aa:41:ec:f4:79:29:c2:
                    9c:bd:9a:ec:29:f4:23:c3:8d:3e:cc:99:a6:80:cb:
                    90:74:15:bb:43:11:6e:b0:9a:51:b6:0a:b0:d7:da:
                    71:b6:f6:57:9a:c7:a8:41:cf:51:65:e5:1c:05:80:
                    53:57:05:44:3c:e6:f1:69:ed:36:32:75:23:01:75:
                    cf:65:ab:2c:25:cd:14:fc:9c:61:e2:10:2f:61:0d:
                    ff:32:1d:94:52:4b:8c:96:00:de:ce:7a:39:98:2e:
                    3a:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:AB:D4:18:0A:89:76:25:A7:49:E6:DF:64:2B:20:2D:E2:F0:0E:EF
            X509v3 Authority Key Identifier:
                keyid:3C:77:6B:31:53:24:92:FD:7B:CB:41:34:00:F3:F8:42:37:2D:17:A0

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6US3bqmhAWZaXCkQTtd3zF39RSQ29Gnzh6wLhYEetoqo/0/3C776B31532492FD7BCB413400F3F842372D17A0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/3C776B31532492FD7BCB413400F3F842372D17A0.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6US3bqmhAWZaXCkQTtd3zF39RSQ29Gnzh6wLhYEetoqo/0/323830343a363766343a3a2f33322d3438203d3e20323639363631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:67f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         23:73:9b:6b:0b:8c:b8:62:b9:b1:c5:73:d5:48:b1:38:15:f8:
         98:94:64:f1:ee:cc:df:c5:2c:2c:62:81:c3:eb:66:7f:f4:f1:
         6c:49:ab:ad:55:d1:54:08:bf:85:e3:cb:c5:53:78:d6:fa:53:
         6c:fa:1a:41:65:a0:a3:ff:00:1f:ed:59:c2:08:b3:41:f4:aa:
         49:8d:47:0e:91:34:42:3e:5c:75:50:a2:97:06:c3:9c:04:5e:
         ea:7b:a4:64:cb:91:f6:c1:6e:1d:55:50:2f:f4:7f:20:9b:14:
         f4:3a:69:8a:1c:f9:67:0f:82:c2:2d:49:3b:b5:9d:03:fb:d1:
         5c:4b:4f:12:6e:1a:c1:e8:bb:31:b2:ed:34:41:39:7c:70:76:
         d4:58:8e:d1:e5:28:7c:60:b6:31:d8:f6:a6:b7:e4:fe:27:73:
         55:90:8c:3f:2f:7f:85:3d:5a:d8:2e:ec:73:77:c2:15:b4:a9:
         f6:1f:28:e6:db:6f:d7:9f:7c:2b:39:79:b2:80:79:db:91:ac:
         d5:e1:0e:c3:53:59:21:b8:e3:22:55:da:74:23:30:8f:44:53:
         4f:8f:21:7d:72:85:b8:bd:ca:3d:24:3d:eb:29:70:a3:b1:ca:
         a2:6a:ed:f4:98:62:ec:15:0b:bb:c9:eb:71:b3:81:54:ec:9c:
         c3:12:09:8b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:46 2024 by rpki-client on console-fra.rpki-client.org