Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a663030323a3a2f34382d3438203d3e20323634343232.roa
File:                     323830343a316535383a663030323a3a2f34382d3438203d3e20323634343232.roa (raw, json)
Hash identifier:          zf2bzWllkbbh96LBbJF1a1YAgYaAgv+LPMILixB+yxw=
Subject key identifier:   C0:16:33:30:87:78:DB:5B:F9:2C:70:37:1D:A5:E0:B2:99:88:D6:AF
Certificate issuer:       /CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
Certificate serial:       5FEEDBF0880E2CF9E0DD668F8CE27D4832D2141E
Authority key identifier: F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a663030323a3a2f34382d3438203d3e20323634343232.roa
Signing time:             Thu 04 Apr 2024 11:34:08 +0000
ROA not before:           Thu 04 Apr 2024 11:29:08 +0000
ROA not after:            Thu 03 Apr 2025 11:34:08 +0000
asID:                     264422
IP address blocks:        2804:1e58:f002::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            5f:ee:db:f0:88:0e:2c:f9:e0:dd:66:8f:8c:e2:7d:48:32:d2:14:1e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=F9A73C97014A0F1C02C22BBF01151B9C8F06FD53
        Validity
            Not Before: Apr  4 11:29:08 2024 GMT
            Not After : Apr  3 11:34:08 2025 GMT
        Subject: CN=C01633308778DB5BF92C70371DA5E0B29988D6AF
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:8d:42:82:9f:d2:f8:6e:b9:e0:2e:53:af:ce:67:
                    cd:5f:d3:cb:02:06:03:fb:6a:4a:a5:ca:9f:aa:9e:
                    45:5f:c7:6c:4e:53:05:3f:15:30:c8:60:71:56:1a:
                    d0:fe:a8:82:d6:ea:06:8d:8e:b1:df:2a:ad:3e:fe:
                    9a:b6:9e:8f:64:d4:60:c6:82:ff:b6:d7:0e:59:d8:
                    a9:7c:37:c7:26:1f:54:cd:de:fb:d2:77:dc:c3:73:
                    fa:b5:3c:98:c0:18:e6:93:e6:e9:60:3f:c6:11:9a:
                    80:e6:9f:15:41:dd:e4:da:22:6c:67:f1:bb:fd:e6:
                    7e:2a:f8:03:90:e0:95:59:2f:33:6b:cd:1b:a0:fa:
                    45:81:c4:65:f0:9c:0b:de:16:f4:59:9f:de:b2:b7:
                    0a:6d:b2:23:5f:1a:f1:7d:8c:61:7c:64:3b:41:40:
                    9e:4f:50:fd:68:e9:ee:6c:d0:3b:fb:fb:a1:10:9d:
                    59:16:ab:82:2c:c6:d9:53:76:80:e8:67:59:c5:ed:
                    e4:73:e2:96:4a:05:d7:bc:fb:69:d8:c5:66:63:1c:
                    e3:a9:14:14:3d:03:fd:33:c5:e7:e0:2b:ef:20:87:
                    ff:ec:06:13:b8:a6:b4:38:69:60:d3:aa:2d:fe:ff:
                    63:3d:db:20:58:6e:ec:21:9b:27:aa:85:76:f0:22:
                    8a:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                C0:16:33:30:87:78:DB:5B:F9:2C:70:37:1D:A5:E0:B2:99:88:D6:AF
            X509v3 Authority Key Identifier:
                keyid:F9:A7:3C:97:01:4A:0F:1C:02:C2:2B:BF:01:15:1B:9C:8F:06:FD:53

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/1/F9A73C97014A0F1C02C22BBF01151B9C8F06FD53.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/6tSMwGvMYudeQGttkP1cDt5DQGPrSgkBvhwYzfFwsvvD/1/323830343a316535383a663030323a3a2f34382d3438203d3e20323634343232.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1e58:f002::/48

    Signature Algorithm: sha256WithRSAEncryption
         24:b1:21:26:84:ef:00:82:e1:00:7c:85:1b:4e:0c:8e:24:aa:
         4f:94:37:53:dc:54:1f:f4:e9:4d:5b:a3:0e:04:9d:76:a4:44:
         02:a4:fe:83:dc:3d:21:fe:95:f4:bf:4c:33:c2:66:61:99:93:
         6a:10:b7:7d:77:74:f8:26:6c:02:4b:7e:82:7e:9a:a7:74:54:
         fb:77:0a:f6:87:9f:d3:1c:c7:b5:e1:e4:3f:d2:04:10:ba:50:
         cc:f9:fa:13:4d:4c:21:07:54:cf:b3:fa:e3:36:3f:5e:05:6b:
         85:60:dd:04:38:58:57:71:12:37:e1:82:da:25:3f:2b:90:34:
         bd:5b:70:54:62:51:84:ef:3d:42:55:0f:22:ae:71:af:c2:d4:
         2c:17:88:68:b3:c1:eb:aa:03:52:4b:9e:0e:ab:84:96:a6:6d:
         a9:13:30:3a:08:0b:de:ca:7e:1a:db:4b:b8:d9:0d:4e:61:54:
         38:04:d3:1d:fd:65:f0:d9:7c:84:1e:c4:5f:87:c2:e0:73:d8:
         84:47:85:b5:ba:80:cf:24:77:ed:06:07:83:04:8e:84:bb:b6:
         29:b7:46:95:b9:7d:cc:1c:1a:01:ce:ab:ff:3d:3a:fe:ba:c6:
         59:71:61:28:c4:f8:54:68:84:ae:20:95:be:3a:a4:b1:64:47:
         15:cc:c3:42
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:22 2024 by rpki-client on console-ams.rpki-client.org