Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/323830343a313137633a383030303a3a2f34342d3434203d3e203533303631.roa
File:                     323830343a313137633a383030303a3a2f34342d3434203d3e203533303631.roa (raw, json)
Hash identifier:          ctxBRnFulrslDgzUnvzsuqAGujc68JCOoox1Qbo1BVQ=
Subject key identifier:   64:85:39:FD:C5:E9:ED:25:B4:27:25:81:21:88:56:C6:B1:76:93:97
Certificate issuer:       /CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
Certificate serial:       514131131464500958F7478AE55CD77DF91835E2
Authority key identifier: 64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/323830343a313137633a383030303a3a2f34342d3434203d3e203533303631.roa
Signing time:             Thu 05 May 2022 18:45:51 +0000
ROA not before:           Thu 05 May 2022 18:40:51 +0000
ROA not after:            Thu 04 May 2023 18:45:51 +0000
asID:                     53061
IP address blocks:        2804:117c:8000::/44 maxlen: 44

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            51:41:31:13:14:64:50:09:58:f7:47:8a:e5:5c:d7:7d:f9:18:35:e2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6409C080E90CD4DF34A2B2740447E95499B2DF14
        Validity
            Not Before: May  5 18:40:51 2022 GMT
            Not After : May  4 18:45:51 2023 GMT
        Subject: CN=648539FDC5E9ED25B4272581218856C6B1769397
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:c0:c8:ef:aa:5a:7c:31:09:d6:25:d4:65:23:d0:
                    80:60:16:00:b6:c7:62:46:91:7e:c5:7c:5f:4b:60:
                    19:0a:fc:d7:b0:3a:0f:6c:e2:ea:c5:62:69:7b:6b:
                    4a:9b:7c:f6:b9:ea:a6:9f:49:5a:3c:bb:ce:86:c5:
                    5b:0e:24:eb:34:19:cd:28:a8:ac:4a:e5:d9:6b:8e:
                    ec:23:09:ea:d4:fa:0e:ac:d4:0f:30:09:01:fb:a1:
                    b9:ea:de:f7:31:ff:2a:43:bd:a7:a0:7c:b2:5a:bf:
                    5a:7f:eb:b6:e6:aa:4d:e8:c8:99:a8:25:b7:d3:78:
                    b4:ed:8d:b9:de:71:94:17:e6:3d:69:fe:1e:67:a8:
                    69:f9:a6:96:4c:b6:f1:89:b0:80:c6:2c:22:70:59:
                    07:9d:fe:ad:45:a8:72:13:ec:67:92:4d:7d:74:a0:
                    32:77:d6:36:7e:2e:00:9b:82:15:cc:89:a1:57:44:
                    7b:94:d5:2b:2a:da:3f:3f:37:ef:3a:5d:f0:7e:6b:
                    8e:9f:37:41:c0:94:c7:e1:a7:8d:61:eb:b5:66:79:
                    f4:c6:5f:91:f7:dd:9f:41:9f:f9:7c:6a:a9:e9:27:
                    41:d8:d6:8e:6f:bd:0f:95:68:85:3f:c1:be:a5:26:
                    1d:ce:8d:9f:75:91:dd:5a:7b:97:1a:8a:2b:76:fb:
                    94:ab
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                64:85:39:FD:C5:E9:ED:25:B4:27:25:81:21:88:56:C6:B1:76:93:97
            X509v3 Authority Key Identifier:
                keyid:64:09:C0:80:E9:0C:D4:DF:34:A2:B2:74:04:47:E9:54:99:B2:DF:14

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6409C080E90CD4DF34A2B2740447E95499B2DF14.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7bZnWd6Y35ctc3aXdxWUxvfA51rT1Cj8D5zHtuK72t9c/0/323830343a313137633a383030303a3a2f34342d3434203d3e203533303631.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:117c:8000::/44

    Signature Algorithm: sha256WithRSAEncryption
         38:f1:be:a3:c1:15:f7:13:c2:55:70:88:22:5c:78:17:0f:2a:
         37:1f:ac:43:b7:f3:f1:98:f9:59:3d:cd:9d:3f:a6:d1:4a:94:
         01:d2:db:f8:53:0c:e5:e2:2f:eb:8f:b6:ec:d8:12:dc:e6:9a:
         28:4f:24:f0:47:fa:81:dc:d2:44:67:c0:f7:1a:b6:e0:a6:1d:
         e0:90:2e:88:68:ae:78:9f:c4:01:82:8d:07:22:bf:ec:99:4f:
         74:bd:0c:33:87:ed:54:89:39:1f:97:05:87:4e:48:d2:46:42:
         9d:1c:e8:16:48:f0:2f:60:80:ed:e5:44:fb:f5:4a:61:fb:c1:
         9e:b0:57:0f:a2:96:8e:36:66:d1:85:cf:e5:33:41:13:42:19:
         35:43:57:85:90:10:21:3f:90:fb:be:32:db:c4:1c:cb:55:46:
         64:d2:8d:b6:4a:66:5d:e0:d3:b1:b4:26:b1:e0:21:77:7d:08:
         64:78:8a:83:0b:f5:6b:c2:15:c2:b1:5e:03:b2:b0:d6:55:43:
         4a:a9:a9:23:97:9d:8b:a3:4f:f0:eb:0b:31:56:dd:3c:48:5b:
         26:07:a9:5f:d6:6e:8e:4e:da:88:8f:ab:f7:8c:bb:60:df:e6:
         83:d2:b9:18:b4:ce:9e:e4:ed:24:56:aa:d1:5d:67:17:38:87:
         1a:ef:49:de
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org