Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/323830343a353866343a3a2f33322d3335203d3e20323638313630.roa
File:                     323830343a353866343a3a2f33322d3335203d3e20323638313630.roa (raw, json)
Hash identifier:          TAPcd0PIlPok0nygbEp0I4fapg82IMCGxUbtrnmvF9E=
Subject key identifier:   32:1A:11:19:37:43:B4:75:A5:05:30:E8:0C:AB:DF:A9:63:68:DE:E6
Certificate issuer:       /CN=74CC5D8F94712011D08C267BAB3AEEFF6592BDB4
Certificate serial:       70538D0355616EE290E7AE37DB313B0B868D7A26
Authority key identifier: 74:CC:5D:8F:94:71:20:11:D0:8C:26:7B:AB:3A:EE:FF:65:92:BD:B4
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74CC5D8F94712011D08C267BAB3AEEFF6592BDB4.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/323830343a353866343a3a2f33322d3335203d3e20323638313630.roa
Signing time:             Fri 09 Feb 2024 12:31:01 +0000
ROA not before:           Fri 09 Feb 2024 12:26:01 +0000
ROA not after:            Fri 07 Feb 2025 12:31:01 +0000
asID:                     268160
IP address blocks:        2804:58f4::/32 maxlen: 35

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            70:53:8d:03:55:61:6e:e2:90:e7:ae:37:db:31:3b:0b:86:8d:7a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=74CC5D8F94712011D08C267BAB3AEEFF6592BDB4
        Validity
            Not Before: Feb  9 12:26:01 2024 GMT
            Not After : Feb  7 12:31:01 2025 GMT
        Subject: CN=321A11193743B475A50530E80CABDFA96368DEE6
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:bf:07:d6:99:79:98:ee:69:95:71:07:37:5c:e6:
                    ec:bb:f5:1d:40:b9:a0:50:9b:ad:6b:be:50:3c:35:
                    31:93:ce:9a:f8:f9:4f:33:33:40:df:35:07:39:c8:
                    e0:c0:ba:7c:68:6a:ac:6b:0a:ce:12:91:87:38:7b:
                    b8:47:2e:af:e8:d2:22:c3:90:bf:e4:e1:0f:a5:54:
                    46:81:b0:94:50:6e:80:32:83:f8:79:52:f7:48:21:
                    40:c3:3f:41:62:7d:82:a7:3a:d4:55:47:13:3f:86:
                    c9:b9:28:c1:4d:1b:81:80:a7:04:85:98:5a:e7:22:
                    8e:bd:7e:e9:c0:c5:50:5c:c8:43:b3:da:38:fd:96:
                    89:e1:5a:db:98:89:30:ae:7e:8b:77:8d:f6:2f:6e:
                    e4:ca:0f:61:41:5e:ab:cc:6a:dd:c8:04:49:68:c9:
                    80:27:43:6e:a0:15:97:2c:eb:68:eb:5c:59:0b:26:
                    18:3f:7f:68:d5:21:2e:6b:94:e5:a2:84:e0:6c:8b:
                    c3:f2:51:52:d4:fa:7d:06:23:9e:5b:9c:bd:bc:a9:
                    c4:01:9d:cf:7d:72:1c:4c:cf:45:9d:a6:18:4b:2a:
                    53:3c:72:95:e8:b3:7c:2c:c1:5b:a6:9b:03:b6:b8:
                    ff:17:c0:a6:ea:75:28:88:40:58:34:42:09:4f:bf:
                    63:93
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                32:1A:11:19:37:43:B4:75:A5:05:30:E8:0C:AB:DF:A9:63:68:DE:E6
            X509v3 Authority Key Identifier:
                keyid:74:CC:5D:8F:94:71:20:11:D0:8C:26:7B:AB:3A:EE:FF:65:92:BD:B4

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/74CC5D8F94712011D08C267BAB3AEEFF6592BDB4.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/74CC5D8F94712011D08C267BAB3AEEFF6592BDB4.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bWootc3qaV1oK7H6rcQ4DX32KBTPwfqoNynQ4UbgrTy/0/323830343a353866343a3a2f33322d3335203d3e20323638313630.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:58f4::/32

    Signature Algorithm: sha256WithRSAEncryption
         4d:f5:f9:0c:8f:bd:0e:98:ca:00:f3:b0:cc:15:82:e6:c8:cd:
         90:99:df:e1:36:d2:0a:23:38:23:ea:d4:2a:83:f3:11:ea:9c:
         fb:04:35:cd:62:1e:9e:00:37:64:7e:db:20:cf:9f:03:bc:17:
         1d:49:7c:1d:93:e6:2a:dc:cd:7a:7e:2b:c9:ea:94:c5:d2:16:
         e5:fd:84:d8:58:58:82:bb:c0:0a:04:71:29:bd:d7:be:6a:d4:
         3c:e0:64:da:e7:7d:32:3d:1d:1a:9e:ac:0b:b4:08:69:4e:66:
         de:44:4f:25:66:42:e0:d7:04:d5:d4:84:aa:3e:0f:c4:84:bc:
         04:56:25:51:e5:16:58:0a:0c:82:f6:05:8a:12:93:61:4c:5d:
         65:41:83:c1:8b:2d:ff:2f:a0:59:b9:08:36:9a:ad:c1:6d:90:
         6d:85:51:e2:73:00:ed:3f:cb:b5:a7:5c:48:e2:77:1b:97:fd:
         ae:42:ab:cd:13:d8:f1:ab:c5:40:bc:b4:53:3c:f2:29:ab:45:
         d7:31:30:cb:c4:19:7c:72:34:25:af:91:03:20:9d:29:ee:82:
         57:80:0a:10:e2:39:e4:09:ce:db:02:71:ce:9b:d3:46:ae:8e:
         67:b9:0a:15:99:54:8a:10:e0:8b:5d:4c:67:7c:ea:f0:4c:8f:
         c9:9e:f1:4c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:40:42 2024 by rpki-client on console-ams.rpki-client.org