Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a333030303a3a2f33362d3336203d3e20323731333735.roa
File:                     323830343a376138303a333030303a3a2f33362d3336203d3e20323731333735.roa (raw, json)
Hash identifier:          Q6vZ9MDGMMEn5AS2MT+WW6k1o40ClOO/uomXy0btdqo=
Subject key identifier:   A1:9F:A3:89:5B:DA:30:44:03:12:D2:C6:2F:BD:63:2B:14:EE:C0:2B
Certificate issuer:       /CN=D55CC694898AC024276BD064EFD77BD52DCDB76D
Certificate serial:       70A2B82A50CD132B486834D3B4C1FB4FE82DD073
Authority key identifier: D5:5C:C6:94:89:8A:C0:24:27:6B:D0:64:EF:D7:7B:D5:2D:CD:B7:6D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a333030303a3a2f33362d3336203d3e20323731333735.roa
Signing time:             Tue 29 Mar 2022 19:38:13 +0000
ROA not before:           Tue 29 Mar 2022 19:33:13 +0000
ROA not after:            Tue 28 Mar 2023 19:38:13 +0000
asID:                     271375
IP address blocks:        2804:7a80:3000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:a2:b8:2a:50:cd:13:2b:48:68:34:d3:b4:c1:fb:4f:e8:2d:d0:73
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=D55CC694898AC024276BD064EFD77BD52DCDB76D
        Validity
            Not Before: Mar 29 19:33:13 2022 GMT
            Not After : Mar 28 19:38:13 2023 GMT
        Subject: CN=A19FA3895BDA30440312D2C62FBD632B14EEC02B
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:be:0b:fb:0c:0d:73:29:96:33:61:86:3f:0e:9d:
                    88:15:ce:11:36:78:92:43:22:2a:52:ba:69:bc:72:
                    78:30:f0:a6:60:24:a4:47:50:8a:d3:db:0f:9e:55:
                    34:8f:12:74:99:65:10:71:96:80:86:1f:a1:8b:71:
                    27:ae:78:69:5d:99:fe:86:d1:90:14:1c:1b:b4:ea:
                    bc:79:4f:db:fd:4b:bc:1a:0e:9e:aa:14:51:bb:95:
                    72:5d:36:32:82:54:07:0d:75:41:d1:ae:0b:1b:62:
                    f0:76:f5:b4:6d:19:3d:40:bb:d6:62:8c:e1:80:e1:
                    a9:de:65:d9:25:21:f7:68:da:fd:c6:af:5d:fd:d1:
                    27:d7:2a:cf:8a:32:5a:24:2f:5c:9d:96:59:a5:33:
                    b8:08:b1:37:c8:08:53:3f:82:67:1f:85:af:4e:51:
                    55:a7:81:ea:36:40:a2:5d:c5:90:2f:a6:77:03:cf:
                    0b:c0:24:36:60:61:ff:d9:9b:3b:c0:50:5b:06:b1:
                    9b:37:3b:33:b3:98:7e:34:9c:15:45:37:d8:47:93:
                    b6:4a:04:0f:b8:64:d7:5e:fc:5e:3d:da:e5:fd:40:
                    ac:81:77:c6:59:dc:b5:9a:fd:6e:1c:d8:c0:59:8f:
                    cc:01:49:9d:a5:be:49:6d:71:30:dd:20:82:02:8e:
                    eb:6d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A1:9F:A3:89:5B:DA:30:44:03:12:D2:C6:2F:BD:63:2B:14:EE:C0:2B
            X509v3 Authority Key Identifier:
                keyid:D5:5C:C6:94:89:8A:C0:24:27:6B:D0:64:EF:D7:7B:D5:2D:CD:B7:6D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/D55CC694898AC024276BD064EFD77BD52DCDB76D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6apUX72vpVxX8fGUAbdq4ANVD5cEiWctXngcKGfkmR26/0/323830343a376138303a333030303a3a2f33362d3336203d3e20323731333735.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:7a80:3000::/36

    Signature Algorithm: sha256WithRSAEncryption
         98:84:41:a0:da:a7:e0:c4:1e:46:ab:81:f7:0a:67:cd:eb:02:
         34:1c:72:cc:a5:84:aa:12:3e:fd:6a:3f:b7:c4:ab:31:b9:89:
         22:e4:1b:c2:96:f9:90:66:9d:0e:f5:ca:74:4f:f0:0e:06:1f:
         b9:49:41:82:2b:45:5a:02:f2:2b:6c:cc:40:72:0a:32:a9:71:
         a4:52:0a:6f:1e:af:ff:8b:7d:35:bb:94:56:b7:2b:c0:37:aa:
         14:e8:de:cb:99:bb:bb:d0:ef:cd:c9:c8:db:00:9d:53:8c:bb:
         83:d6:3d:89:5b:3e:6a:a3:8a:80:bc:b6:14:d6:cc:54:56:68:
         3c:57:7a:7b:35:63:21:8c:d2:d1:41:b1:ef:c8:79:58:e8:82:
         64:41:75:bf:c5:c9:f0:f9:a8:05:f5:14:65:11:83:86:79:96:
         19:cb:08:12:f8:a4:a3:f5:fe:fa:22:62:ed:00:a9:8b:32:30:
         43:b0:19:ec:9d:4a:f8:9e:ba:90:8f:01:f8:de:19:c7:33:8c:
         c3:f1:a2:76:85:56:d5:48:75:9f:96:14:9d:b4:6c:ee:76:29:
         15:31:25:94:02:fc:4b:91:ad:1b:c6:e3:9f:16:ac:ce:9c:29:
         ad:81:b0:50:f0:a2:80:44:26:4c:62:b9:08:46:43:21:26:a4:
         fa:e6:53:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:47 2024 by rpki-client on console-fra.rpki-client.org