Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/323830343a3232633a3a2f33322d3438203d3e203232363839.roa
File:                     323830343a3232633a3a2f33322d3438203d3e203232363839.roa (raw, json)
Hash identifier:          w6V+AxRHsJoWRyCJHS+Dey1ZyK+u44BoEkX/wGjpvn8=
Subject key identifier:   D3:D4:1C:89:C7:8F:66:0A:01:DF:1A:66:D5:72:45:F0:31:3C:0F:E8
Certificate issuer:       /CN=0618956D94033147EE5E1CF9B3A961B0A521A367
Certificate serial:       555BA0C48F3BE0371B7EC7B8593800EA36928FF6
Authority key identifier: 06:18:95:6D:94:03:31:47:EE:5E:1C:F9:B3:A9:61:B0:A5:21:A3:67
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0618956D94033147EE5E1CF9B3A961B0A521A367.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/323830343a3232633a3a2f33322d3438203d3e203232363839.roa
Signing time:             Wed 01 Mar 2023 13:00:02 +0000
ROA not before:           Wed 01 Mar 2023 12:55:02 +0000
ROA not after:            Wed 28 Feb 2024 13:00:02 +0000
asID:                     22689
IP address blocks:        2804:22c::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            55:5b:a0:c4:8f:3b:e0:37:1b:7e:c7:b8:59:38:00:ea:36:92:8f:f6
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=0618956D94033147EE5E1CF9B3A961B0A521A367
        Validity
            Not Before: Mar  1 12:55:02 2023 GMT
            Not After : Feb 28 13:00:02 2024 GMT
        Subject: CN=D3D41C89C78F660A01DF1A66D57245F0313C0FE8
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:da:a2:8f:1f:0d:5a:bc:16:16:81:fd:06:6c:
                    e1:ef:c2:8a:c8:c1:11:a2:b8:4a:e2:a5:40:2f:4f:
                    85:08:90:a5:a4:16:f6:f4:df:3e:8b:b7:84:c8:f6:
                    b5:cd:61:51:0a:5f:a0:a0:ac:36:0d:da:8a:b0:cf:
                    d2:6a:ee:b3:0d:94:49:88:94:bb:00:a9:0d:13:39:
                    5b:8a:8e:44:a2:20:40:a9:ea:cf:23:a7:a4:0b:23:
                    5d:33:88:2b:59:23:0f:61:6b:1b:23:dc:6c:4b:23:
                    75:6a:9d:f7:de:79:91:9b:7f:2f:8d:b9:ad:bd:32:
                    94:bb:11:09:d2:60:ff:3b:24:60:71:81:b4:71:e4:
                    44:48:78:a8:d6:4c:c7:87:6f:77:0f:11:0c:fd:06:
                    f6:65:7a:27:65:1f:34:8d:b7:a6:40:a6:82:4e:05:
                    1e:45:60:41:99:7e:e7:df:e0:71:c0:1f:c0:41:34:
                    28:f5:28:cb:ce:b7:5a:81:9c:09:2b:1c:33:cb:0d:
                    73:d2:bb:1f:b4:ba:8a:19:91:22:a7:11:de:2e:e5:
                    e2:ba:aa:ef:ef:45:98:7b:d8:26:1c:cb:78:56:79:
                    be:0a:fb:98:4b:19:c2:30:6a:b6:f2:93:dc:8e:93:
                    cd:18:65:df:93:4f:8f:a9:6c:8e:c1:8a:50:10:25:
                    97:bf
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                D3:D4:1C:89:C7:8F:66:0A:01:DF:1A:66:D5:72:45:F0:31:3C:0F:E8
            X509v3 Authority Key Identifier:
                keyid:06:18:95:6D:94:03:31:47:EE:5E:1C:F9:B3:A9:61:B0:A5:21:A3:67

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/0618956D94033147EE5E1CF9B3A961B0A521A367.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/0618956D94033147EE5E1CF9B3A961B0A521A367.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/323830343a3232633a3a2f33322d3438203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22c::/32

    Signature Algorithm: sha256WithRSAEncryption
         04:46:6b:b1:93:b6:fc:0b:47:a4:f2:41:83:05:03:a5:bc:f9:
         99:c1:02:b9:28:c2:4e:62:df:d9:72:e4:ab:b3:f3:b3:35:eb:
         3f:d8:f7:2f:51:e4:58:55:d3:41:6c:c6:fb:ea:ae:5f:5c:c3:
         e9:bf:af:79:64:40:6f:2b:28:fe:c5:eb:bf:4d:9d:22:90:7e:
         d7:fc:f2:19:4a:4b:3e:87:90:cd:21:73:ca:ab:a7:a2:a3:7c:
         31:2f:ea:e3:bb:0d:b5:ff:17:51:f8:f9:47:5a:95:ea:c7:e5:
         ef:43:56:ab:f2:c3:bb:f6:65:e5:30:9f:0c:18:eb:87:ee:fe:
         a5:2f:bb:e2:b8:0e:2c:8f:31:e7:e8:7e:3f:fa:cb:09:58:79:
         9f:31:aa:37:39:21:21:0a:fb:7f:b3:fd:e4:8f:db:fc:cf:b2:
         d7:2b:ed:ea:2d:dc:0b:f9:e9:41:30:29:81:4c:59:68:e1:95:
         b0:5c:a9:f7:57:07:e2:3c:1b:a6:67:39:28:53:da:70:a5:38:
         96:ee:46:ea:f8:a2:f5:4c:c3:c5:00:08:43:75:3c:b9:56:c9:
         17:29:d4:4d:4f:6d:8a:3e:cf:d8:df:18:d7:4b:20:a0:da:13:
         1a:0d:6a:0a:47:57:b1:3d:d4:63:e4:f8:40:13:f9:e7:d5:b6:
         fc:b8:3b:e9
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org