Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323032303a3a2f34382d3438203d3e203238333036.roa
File:                     323830343a33343a323032303a3a2f34382d3438203d3e203238333036.roa (raw, json)
Hash identifier:          xu/l0PiYTSjc8WQZAGrREBK6Be1UhMDLo1zSFLNYocY=
Subject key identifier:   6F:7A:16:0D:CD:1B:1C:20:D9:E4:E6:9A:9C:20:43:CC:6C:CC:50:F2
Certificate issuer:       /CN=DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D
Certificate serial:       17C21ACF846B7CA5D8B273BCDFFB17702579D02F
Authority key identifier: DE:11:7D:F6:BC:F3:61:FA:73:A8:1F:DE:AE:5B:6C:BC:6D:D0:64:0D
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323032303a3a2f34382d3438203d3e203238333036.roa
Signing time:             Thu 21 Sep 2023 19:38:01 +0000
ROA not before:           Thu 21 Sep 2023 19:33:01 +0000
ROA not after:            Thu 19 Sep 2024 19:38:01 +0000
asID:                     28306
IP address blocks:        2804:34:2020::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            17:c2:1a:cf:84:6b:7c:a5:d8:b2:73:bc:df:fb:17:70:25:79:d0:2f
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D
        Validity
            Not Before: Sep 21 19:33:01 2023 GMT
            Not After : Sep 19 19:38:01 2024 GMT
        Subject: CN=6F7A160DCD1B1C20D9E4E69A9C2043CC6CCC50F2
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a3:a7:60:2a:cf:84:42:e7:44:ec:83:68:a1:3e:
                    bc:23:ba:db:05:1b:85:cd:da:bf:9a:07:71:9c:21:
                    50:8c:fb:ac:51:37:f6:bd:c6:19:33:5a:3b:72:3c:
                    55:f3:9c:a7:7b:92:a5:34:fc:fa:51:74:c5:2d:fd:
                    d1:f5:b4:0f:c6:e8:51:8e:8d:0c:1e:e8:4a:e3:07:
                    66:31:a0:a7:89:7b:c2:07:7f:d1:04:57:40:bb:fe:
                    a5:93:48:51:cd:f8:1d:40:d7:4e:29:15:b7:a0:fa:
                    74:76:ad:7b:d8:ff:65:0d:e3:16:8a:d0:44:ab:ff:
                    34:bf:41:ec:65:d5:83:11:ef:62:7a:ab:80:50:79:
                    23:ce:77:f7:f0:61:9c:66:aa:e6:df:9a:18:d4:24:
                    5b:1c:7f:3b:d9:9a:87:44:fb:bb:37:54:49:fb:2d:
                    40:7d:65:54:a6:da:f7:16:62:73:c2:c1:f6:9c:81:
                    9b:c1:5c:cc:f0:1d:37:65:ed:52:af:b9:0d:97:d9:
                    91:8f:3d:7c:02:5c:e8:50:44:64:b6:12:e5:93:f2:
                    e1:96:6e:87:00:10:c1:0f:00:f5:06:3f:49:64:0a:
                    f1:97:1d:72:2f:19:cc:73:ef:5d:de:4d:a8:cc:be:
                    fd:74:d5:e2:10:9d:09:ee:69:19:0f:91:e2:3c:9b:
                    46:f7
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6F:7A:16:0D:CD:1B:1C:20:D9:E4:E6:9A:9C:20:43:CC:6C:CC:50:F2
            X509v3 Authority Key Identifier:
                keyid:DE:11:7D:F6:BC:F3:61:FA:73:A8:1F:DE:AE:5B:6C:BC:6D:D0:64:0D

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/DE117DF6BCF361FA73A81FDEAE5B6CBC6DD0640D.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7PD2Pnw1ZrREnV3rNk8azZj1Xy6vfte1WLMJ9gBPNNug/0/323830343a33343a323032303a3a2f34382d3438203d3e203238333036.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:34:2020::/48

    Signature Algorithm: sha256WithRSAEncryption
         83:a9:7c:a7:03:15:af:7d:fb:bd:aa:e2:a3:c2:a3:3c:b6:34:
         b8:ef:4c:59:61:be:9f:04:20:03:3f:dd:3d:6a:b8:1f:1a:45:
         b8:5b:aa:d8:49:6b:44:a8:97:b7:7f:ce:6b:89:87:7e:8d:92:
         dc:cd:5c:ce:ea:86:1a:ff:be:50:ed:de:10:6a:c5:31:cc:e5:
         e6:7c:43:f8:1d:dd:d1:bd:de:20:42:db:c3:84:d4:72:72:8b:
         0c:ce:de:12:b5:3f:b0:ba:ea:a2:ac:99:4a:a7:2f:e7:62:07:
         d8:0c:8f:a8:7f:1b:ae:96:d0:e3:1b:0c:60:c0:7f:59:3b:d7:
         c1:02:95:64:cc:cd:b4:8d:43:c0:bc:48:c4:4f:a7:d9:61:48:
         68:d1:c8:2b:b4:72:84:69:70:43:75:91:a2:f0:50:4f:18:5e:
         33:e0:0e:47:cf:2d:64:07:db:3a:ff:ff:cf:37:0f:02:ff:3d:
         68:e5:2f:c1:2c:99:ca:d7:13:83:d9:e0:2e:39:2a:7e:1f:7a:
         a7:82:2f:c5:13:90:e5:da:68:61:26:1d:24:c5:83:45:6e:e6:
         d8:8a:12:df:db:20:6a:c2:f3:12:de:6a:89:02:87:4a:3b:05:
         db:2a:47:6e:67:98:27:40:85:29:f1:19:f7:65:83:62:4e:fa:
         c3:fb:db:f5
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:40 2024 by rpki-client on console-ams.rpki-client.org