Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/323830343a3232633a3a2f33322d3634203d3e203232363839.roa
File:                     323830343a3232633a3a2f33322d3634203d3e203232363839.roa (raw, json)
Hash identifier:          B7sZIg61u3Iclp6rc5Gq2sMq90C0sW4p1RDAFrHszJs=
Subject key identifier:   F3:46:C3:72:1F:CE:1F:6F:04:FB:48:92:63:0E:CE:18:C6:DD:6C:CC
Certificate issuer:       /CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
Certificate serial:       3EA03A8E92092249E0B5DF26B13C2DA4970CA11C
Authority key identifier: 60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/323830343a3232633a3a2f33322d3634203d3e203232363839.roa
Signing time:             Tue 20 Feb 2024 16:57:03 +0000
ROA not before:           Tue 20 Feb 2024 16:52:03 +0000
ROA not after:            Tue 18 Feb 2025 16:57:03 +0000
asID:                     22689
IP address blocks:        2804:22c::/32 maxlen: 64

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3e:a0:3a:8e:92:09:22:49:e0:b5:df:26:b1:3c:2d:a4:97:0c:a1:1c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60A9D810BBDA81AF8EADC80C44A936FA5AD6303E
        Validity
            Not Before: Feb 20 16:52:03 2024 GMT
            Not After : Feb 18 16:57:03 2025 GMT
        Subject: CN=F346C3721FCE1F6F04FB4892630ECE18C6DD6CCC
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bb:be:b1:aa:eb:e3:ee:bb:77:36:66:20:65:a0:
                    c7:af:53:49:83:25:a3:0e:d0:a1:ff:3a:14:ac:c6:
                    ed:35:8c:69:d3:e6:50:a5:1f:35:3b:b4:35:ea:6a:
                    76:69:df:53:4b:04:0b:98:16:74:e7:84:39:a7:be:
                    d1:c7:63:24:1a:d8:ac:5c:c1:a2:ef:e1:da:8d:c6:
                    ff:03:be:e2:75:20:c2:24:dc:d9:a5:df:c2:5a:74:
                    c0:b0:37:84:73:5f:0b:f5:f0:3d:e7:b5:97:60:fa:
                    77:b3:64:7f:ad:d2:bc:e8:2b:e9:55:6e:8a:6a:b1:
                    05:33:5d:bd:7f:e6:66:05:4a:b7:f1:be:b9:57:42:
                    e5:f3:d4:bb:e0:06:ea:b3:cb:e0:95:57:c6:09:84:
                    99:46:3d:49:57:39:29:fb:65:54:8c:c3:a5:90:24:
                    b9:04:4b:44:aa:8a:dc:93:40:a5:14:91:fa:36:44:
                    25:06:16:6d:80:1a:06:a3:99:9b:67:fb:4d:b3:c6:
                    a8:72:ca:49:9f:2e:aa:95:85:c8:3e:41:c6:d6:c6:
                    61:80:92:24:2c:ee:75:e8:0e:19:be:3f:46:2b:51:
                    4b:81:47:37:92:56:98:b3:0c:90:08:ca:05:f4:85:
                    9c:26:f3:24:e0:d5:dd:a5:2a:41:00:95:94:2d:fe:
                    13:63
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                F3:46:C3:72:1F:CE:1F:6F:04:FB:48:92:63:0E:CE:18:C6:DD:6C:CC
            X509v3 Authority Key Identifier:
                keyid:60:A9:D8:10:BB:DA:81:AF:8E:AD:C8:0C:44:A9:36:FA:5A:D6:30:3E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60A9D810BBDA81AF8EADC80C44A936FA5AD6303E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7EmDPjydva7e4uddxLt9acmN62xR15eV3UMsgxVUk76S/0/323830343a3232633a3a2f33322d3634203d3e203232363839.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:22c::/32

    Signature Algorithm: sha256WithRSAEncryption
         b1:78:f1:46:12:88:5b:26:4d:bd:7f:49:e8:d3:c2:2c:64:cf:
         ea:24:3b:0f:dd:14:18:49:6a:5f:30:3b:f9:13:0d:98:ee:a8:
         d0:07:10:62:79:51:97:54:b1:ad:72:05:0d:f0:42:c0:4a:67:
         99:fb:ac:c4:17:4f:c9:03:78:a8:b7:5b:fd:08:24:1a:58:74:
         01:28:c0:9f:d2:79:24:55:72:f3:da:00:fe:d9:17:c3:44:fe:
         e5:e9:42:fd:95:95:b5:1b:19:36:89:8c:93:d1:dd:15:dd:a6:
         65:11:4b:53:34:fc:58:2f:49:38:d3:d2:90:06:a2:88:e5:95:
         a3:29:e0:5d:7c:9c:0b:ee:9a:5e:b8:a0:f6:a7:ff:49:34:a2:
         27:42:62:2a:b1:61:e5:b1:96:9b:d4:63:6a:40:5e:7b:8f:66:
         c0:bb:ae:a0:23:62:1d:ba:5f:b8:77:fc:4a:89:26:28:a8:10:
         55:10:ec:05:3b:88:46:4b:5a:b5:bd:c5:d4:c6:3f:9a:12:d7:
         48:1d:d9:3f:d8:19:2b:c8:98:5d:64:18:17:d5:e8:5e:12:5f:
         67:92:e0:a1:fc:ac:ab:4e:64:10:24:2c:fa:e2:b9:d0:12:d2:
         17:f2:69:12:62:b9:df:fd:1a:2c:ba:d4:3e:1a:b0:c3:c5:73:
         28:06:a8:24
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:53 2024 by rpki-client on console-fra.rpki-client.org