Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa
File:                     323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa (raw, json)
Hash identifier:          W/gz/uRcF2zzKXqHkikTxufmsg8i0+XROgxyipnja2g=
Subject key identifier:   6E:7B:16:40:6E:74:14:F6:C7:23:67:45:29:7D:19:33:E6:B3:18:84
Certificate issuer:       /CN=115C12DC4C631C1412ED74BF15353D05F8F2974F
Certificate serial:       20A2A0CA96DC5581543AC71D3095D3721F4FEB2B
Authority key identifier: 11:5C:12:DC:4C:63:1C:14:12:ED:74:BF:15:35:3D:05:F8:F2:97:4F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa
Signing time:             Thu 07 Mar 2024 17:45:38 +0000
ROA not before:           Thu 07 Mar 2024 17:40:38 +0000
ROA not after:            Thu 06 Mar 2025 17:45:38 +0000
asID:                     267329
IP address blocks:        2804:4bc8:1400::/40 maxlen: 42

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            20:a2:a0:ca:96:dc:55:81:54:3a:c7:1d:30:95:d3:72:1f:4f:eb:2b
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=115C12DC4C631C1412ED74BF15353D05F8F2974F
        Validity
            Not Before: Mar  7 17:40:38 2024 GMT
            Not After : Mar  6 17:45:38 2025 GMT
        Subject: CN=6E7B16406E7414F6C7236745297D1933E6B31884
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:41:f4:08:45:b0:20:a2:5e:02:e9:05:b6:3a:
                    bd:87:10:26:a0:94:82:9f:71:c7:74:f2:0f:3a:4c:
                    4a:4f:e0:4c:71:cf:b0:d9:b1:11:bf:10:57:bd:67:
                    9c:68:8d:d1:5b:39:75:e1:94:9a:72:f0:a5:d1:1e:
                    a5:39:e0:23:af:b5:98:23:08:e5:17:26:1f:b1:12:
                    f1:21:1d:d1:5e:0e:45:ac:86:b8:6e:b2:eb:9c:a8:
                    82:90:e6:9f:ee:81:a3:dd:24:c3:6b:34:51:a5:fa:
                    da:70:04:7f:20:8c:9b:61:cb:77:9c:02:ce:e7:95:
                    13:ec:c5:b1:7c:d7:c3:f0:b1:89:64:a8:32:d5:73:
                    56:92:56:86:50:cc:cd:c0:7d:de:55:32:ac:24:03:
                    89:33:db:09:6e:ab:3f:13:1a:46:de:8f:35:8a:25:
                    dc:a9:c7:c8:d5:2a:5a:3e:75:23:19:de:88:33:99:
                    5e:6a:93:c1:47:2d:9c:b6:f7:02:7f:1e:ac:8d:1c:
                    f2:28:be:02:f4:1d:d8:9a:c4:e6:57:84:8d:43:1b:
                    9d:22:23:b3:79:f8:37:4f:e9:bf:64:0f:0c:26:32:
                    02:ae:ec:9f:4a:27:14:14:86:5f:8f:57:32:d2:bf:
                    b3:cb:c8:ed:48:b8:b9:58:f7:00:40:8e:d6:06:30:
                    18:a7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6E:7B:16:40:6E:74:14:F6:C7:23:67:45:29:7D:19:33:E6:B3:18:84
            X509v3 Authority Key Identifier:
                keyid:11:5C:12:DC:4C:63:1C:14:12:ED:74:BF:15:35:3D:05:F8:F2:97:4F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/115C12DC4C631C1412ED74BF15353D05F8F2974F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7ESFiAHhvY7yi1Cf9F5qqsR4FynQ4nTyWKwnQDntA2cP/0/323830343a346263383a313430303a3a2f34302d3432203d3e20323637333239.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bc8:1400::/40

    Signature Algorithm: sha256WithRSAEncryption
         1f:2e:87:b3:a9:8d:c2:c2:29:a5:8d:d6:fc:14:2f:19:8f:2b:
         fe:83:3f:50:0a:1a:c4:3c:6d:e6:24:35:ec:af:24:49:9e:b7:
         98:cd:2f:b8:b9:6a:44:d4:83:ed:bf:46:64:d4:c7:73:0b:09:
         60:0e:55:6d:d6:59:57:9b:36:ba:fd:32:f9:e2:35:14:6d:ae:
         02:28:d5:64:19:f1:4d:d2:7d:49:d8:d9:23:3b:fa:8c:5a:10:
         fc:1e:7b:89:16:24:25:da:00:67:cd:4e:00:43:c4:ff:a9:06:
         73:92:75:76:aa:9e:03:61:ab:03:3b:2e:a3:9a:04:5b:60:c1:
         de:11:cd:cb:00:0b:4d:46:22:32:47:91:02:4a:1c:5d:1f:2d:
         84:d6:0c:67:33:ae:0e:80:08:64:02:57:4b:68:f7:05:d8:5e:
         3d:ba:d2:e5:eb:dc:3a:61:a7:b5:16:7b:87:39:4c:ff:19:42:
         71:ee:65:f8:68:56:db:47:47:5d:18:4a:b6:12:1e:58:98:57:
         46:3d:27:c8:16:51:67:03:8a:6e:cd:c1:c0:0d:75:59:97:ee:
         34:9b:65:ba:04:8e:1f:62:47:f5:0c:50:88:23:77:40:41:53:
         af:22:1c:8b:92:12:34:fb:41:40:2c:0f:3b:1e:c3:f9:65:3f:
         4b:75:06:f6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org