Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a653030303a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a653030303a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          kI5Ypw/sBreWm2nJkqvNQS+oIjbJWPrAmyhmfbELybo=
Subject key identifier:   AF:BE:4E:F4:B3:77:6D:20:28:27:92:CC:62:17:D8:89:D1:10:26:7D
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       3F04569C6B68578118965AD26F132AAED8E4362D
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a653030303a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:07 +0000
ROA not before:           Thu 04 Apr 2024 11:29:07 +0000
ROA not after:            Thu 03 Apr 2025 11:34:07 +0000
asID:                     264422
IP address blocks:        2804:1e58:e000::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3f:04:56:9c:6b:68:57:81:18:96:5a:d2:6f:13:2a:ae:d8:e4:36:2d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:07 2024 GMT
            Not After : Apr  3 11:34:07 2025 GMT
        Subject: CN=AFBE4EF4B3776D20282792CC6217D889D110267D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e1:e9:fa:9c:f5:13:51:c8:3d:2d:d8:8e:44:
                    da:da:cf:6d:1a:cf:4f:fb:ee:5b:d2:79:7d:b6:89:
                    a9:ac:0b:c3:9a:88:42:e4:74:0c:93:6c:ff:48:be:
                    cb:a9:b0:59:79:e2:6e:2d:ed:50:b8:16:c8:8f:0f:
                    ef:2a:bd:11:60:cb:af:89:3a:78:f6:c1:d8:00:aa:
                    9b:4b:08:3f:6b:2b:f6:c1:f9:1f:90:0a:d4:bf:93:
                    1f:b9:b7:35:28:a5:50:d4:ea:44:e4:c9:5c:8b:7b:
                    10:a9:45:aa:d7:3f:cc:6f:bb:57:6e:24:d4:1e:f9:
                    33:cd:95:d4:6b:d6:54:9a:37:7d:00:6e:a2:8f:d8:
                    1c:90:81:7c:c0:5e:b3:4d:6a:0f:0d:c3:1f:92:8c:
                    cd:9b:c0:68:6f:82:a7:c4:7f:7a:1f:ec:d5:e5:c4:
                    cd:7c:0f:89:9d:3f:85:01:d7:d2:8a:0d:39:97:52:
                    a0:0e:b7:54:ab:f9:39:38:12:fb:d1:52:ae:3d:c4:
                    e0:ef:e8:a2:91:fb:d6:ca:c3:0c:2d:83:56:07:7f:
                    81:3f:9f:fd:8b:66:41:2b:e3:a2:26:c8:95:77:70:
                    50:37:41:c3:2c:2c:0a:d0:04:75:dc:a1:8a:50:9a:
                    ea:8b:ba:c3:8b:18:52:f0:61:73:31:e6:8a:a8:e5:
                    0b:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                AF:BE:4E:F4:B3:77:6D:20:28:27:92:CC:62:17:D8:89:D1:10:26:7D
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a653030303a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:e000::/48

    Signature Algorithm: sha256WithRSAEncryption
         10:8c:cd:3e:3b:d5:32:d6:de:b4:6e:38:05:5d:9c:11:75:93:
         d7:79:f3:0e:c7:76:b9:37:3f:a9:8d:f0:36:37:c0:16:f6:0d:
         39:70:fc:83:70:c0:4e:ba:3a:1c:f8:dc:ff:5e:85:c8:eb:d6:
         aa:b0:83:45:9d:a5:ef:e8:74:db:d2:c9:48:cd:c8:01:b9:a5:
         ce:56:87:b1:6c:7a:bc:74:44:27:44:eb:7f:b2:9c:70:d1:a9:
         32:78:98:67:18:dc:95:e7:1e:22:84:06:90:73:93:41:1d:25:
         55:96:1d:32:79:73:6a:b0:66:2e:3b:4c:98:a0:a0:d5:bb:7e:
         8b:a2:9e:1a:b7:4a:c0:22:1d:8e:37:bf:36:fd:63:25:1a:91:
         9a:d6:f6:66:48:17:23:41:6f:52:44:e8:89:d0:f6:36:dd:e4:
         5d:d6:ba:0b:a2:8c:de:d0:fc:03:71:15:3b:85:ff:c5:b6:9c:
         e9:9e:31:9b:94:dc:a9:55:c3:91:4d:6d:15:98:9f:c9:4c:fc:
         9e:4a:ab:26:6d:a9:14:c3:c3:a0:04:44:e0:81:e1:c3:2b:61:
         db:31:4c:fd:1f:c1:95:9a:aa:20:ea:3b:eb:f1:68:3e:7f:28:
         3e:f8:68:b5:6a:c1:cc:e2:1b:39:98:4a:af:d3:01:15:4a:fe:
         e3:0f:ff:c3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:48 2024 by rpki-client on console-fra.rpki-client.org