Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a3562303a383030303a3a2f33342d3334203d3e20323636313831.roa
File:                     323830343a3562303a383030303a3a2f33342d3334203d3e20323636313831.roa (raw, json)
Hash identifier:          mNlgbXKVH5WS7qqa2GMPbIDejU+pzP2jKf3WuT1ja+k=
Subject key identifier:   92:A9:7D:E3:F8:28:9B:0C:BE:8E:31:0F:35:7D:F0:F6:20:8B:75:63
Certificate issuer:       /CN=60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F
Certificate serial:       3BE1330C32B5F1C869D140787441697A9609834C
Authority key identifier: 60:E9:4A:F7:2A:CD:FF:C1:8F:91:51:26:1A:92:F7:8E:5C:E8:FF:6F
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a3562303a383030303a3a2f33342d3334203d3e20323636313831.roa
Signing time:             Thu 29 Jun 2023 14:57:37 +0000
ROA not before:           Thu 29 Jun 2023 14:52:37 +0000
ROA not after:            Thu 27 Jun 2024 14:57:37 +0000
asID:                     266181
IP address blocks:        2804:5b0:8000::/34 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            3b:e1:33:0c:32:b5:f1:c8:69:d1:40:78:74:41:69:7a:96:09:83:4c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F
        Validity
            Not Before: Jun 29 14:52:37 2023 GMT
            Not After : Jun 27 14:57:37 2024 GMT
        Subject: CN=92A97DE3F8289B0CBE8E310F357DF0F6208B7563
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a5:07:17:94:6a:77:1a:a5:03:46:c3:de:10:cd:
                    5d:90:c4:7e:f2:86:e4:7e:0c:2d:db:91:12:81:ed:
                    e3:89:7c:c7:d1:b5:28:f2:b1:f7:bc:4a:65:e1:6f:
                    77:71:44:e0:eb:aa:11:25:a4:43:96:62:d1:c5:ae:
                    bd:92:8e:98:57:67:09:c6:5f:ea:65:d1:3a:74:3f:
                    53:6c:bd:02:c1:cf:f8:51:2c:74:95:6d:7c:5b:e7:
                    f1:99:a3:2c:96:32:06:c1:29:54:0f:f4:4e:26:99:
                    ad:de:53:8b:24:23:7b:3c:58:ae:ee:77:85:ec:fe:
                    e7:47:14:4e:37:d8:4b:40:a5:ce:61:ed:60:e1:1f:
                    d3:0e:b0:25:7b:78:82:f8:ff:03:3c:29:14:95:12:
                    2f:aa:8b:33:db:1e:a4:52:38:88:f3:6d:a5:1c:24:
                    cd:3c:2e:f7:07:cf:d4:76:0b:5c:13:d6:b6:01:be:
                    ca:61:84:5e:f7:79:a7:23:c5:42:73:a5:d6:d9:22:
                    d6:71:44:15:6c:6d:58:b9:7e:a4:33:d6:fd:1e:ae:
                    01:d1:6f:53:c7:68:08:4a:c6:c1:a0:16:ed:17:b5:
                    e0:01:ae:ca:24:38:4d:1c:ca:7a:62:00:29:5b:cb:
                    95:8f:10:1a:93:23:40:09:ef:5c:69:1b:79:8b:e0:
                    b1:23
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                92:A9:7D:E3:F8:28:9B:0C:BE:8E:31:0F:35:7D:F0:F6:20:8B:75:63
            X509v3 Authority Key Identifier:
                keyid:60:E9:4A:F7:2A:CD:FF:C1:8F:91:51:26:1A:92:F7:8E:5C:E8:FF:6F

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/60E94AF72ACDFFC18F9151261A92F78E5CE8FF6F.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7WQuHKj3iTpNtjkd519p56qSHzFXLwbU3N2aTsFUNvm5/0/323830343a3562303a383030303a3a2f33342d3334203d3e20323636313831.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:5b0:8000::/34

    Signature Algorithm: sha256WithRSAEncryption
         c0:e6:55:42:8b:a4:c0:71:3c:00:08:b6:c1:8f:2e:d2:85:25:
         d2:af:3d:39:8c:dc:b2:be:b0:14:bc:d9:c3:3d:7e:58:85:91:
         3d:9b:89:6b:bc:36:83:5f:94:09:63:7e:a5:43:09:b9:f5:c9:
         03:34:24:b2:11:35:47:5f:bf:e5:e7:50:b9:12:dd:a2:2a:e7:
         4d:9d:e9:e2:8b:08:f3:9a:63:ca:3d:e4:83:e1:40:c4:5e:fc:
         07:26:7d:0f:86:f1:7e:1a:6c:e6:9a:63:5b:30:63:c8:e3:5d:
         0f:b8:31:8f:89:4b:73:07:48:00:e3:63:b0:10:57:9e:f6:3b:
         a6:5d:1d:2d:cd:b0:37:ed:41:79:50:b6:fe:2b:c1:99:e7:1d:
         96:b6:9a:10:c4:01:e7:93:78:e5:d2:5b:50:4f:c5:10:4e:b1:
         70:fa:96:2a:aa:67:73:da:34:6c:0d:06:8f:58:84:75:a0:66:
         0a:44:1b:12:a2:75:68:52:f3:aa:60:87:a1:2d:93:8c:fe:b7:
         bb:30:1a:b4:97:d9:f0:77:a7:4f:68:25:c9:89:dc:b6:93:9d:
         c8:1c:ff:d5:95:5c:7d:9e:61:6f:87:36:cf:04:8e:a5:ff:b9:
         00:de:70:bd:55:44:37:fb:6c:4e:20:ad:0f:56:8c:2d:c7:04:
         0a:ed:70:d2
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:54 2024 by rpki-client on console-fra.rpki-client.org