Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/323830343a336131633a3a2f33322d3332203d3e20323636303731.roa
File:                     323830343a336131633a3a2f33322d3332203d3e20323636303731.roa (raw, json)
Hash identifier:          YBcSC1pTx+fFEa/CuAEMOJ6xADZE6r4Kc0cPiT30RJA=
Subject key identifier:   81:3A:54:78:CD:54:5C:60:3C:7F:E6:3F:31:A4:28:0E:90:9A:6D:25
Certificate issuer:       /CN=1C0D57B6A3245283DC081118F5FA77723813EFED
Certificate serial:       6B64249314E44C6F5BE6CDE7E2C1358E027C059C
Authority key identifier: 1C:0D:57:B6:A3:24:52:83:DC:08:11:18:F5:FA:77:72:38:13:EF:ED
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C0D57B6A3245283DC081118F5FA77723813EFED.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/323830343a336131633a3a2f33322d3332203d3e20323636303731.roa
Signing time:             Thu 11 Jan 2024 12:28:31 +0000
ROA not before:           Thu 11 Jan 2024 12:23:31 +0000
ROA not after:            Thu 09 Jan 2025 12:28:31 +0000
asID:                     266071
IP address blocks:        2804:3a1c::/32 maxlen: 32

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            6b:64:24:93:14:e4:4c:6f:5b:e6:cd:e7:e2:c1:35:8e:02:7c:05:9c
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1C0D57B6A3245283DC081118F5FA77723813EFED
        Validity
            Not Before: Jan 11 12:23:31 2024 GMT
            Not After : Jan  9 12:28:31 2025 GMT
        Subject: CN=813A5478CD545C603C7FE63F31A4280E909A6D25
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b9:e7:5a:01:1b:51:ba:56:b8:57:64:87:ec:7e:
                    6a:50:ec:45:44:ac:5f:51:fd:5b:c1:20:15:50:64:
                    98:99:b2:3f:33:09:54:42:df:36:14:8c:df:2c:eb:
                    33:7d:fd:0a:b1:c1:fe:4d:01:5e:ce:77:8e:be:76:
                    2c:6d:39:86:07:4d:8f:44:8e:03:e9:db:3f:d5:b6:
                    51:46:8d:fa:b6:df:04:da:96:5b:51:b1:a2:3f:e1:
                    37:25:6f:a3:ad:ab:39:b5:fb:e6:1a:0d:14:46:ba:
                    96:e3:aa:df:02:1c:40:2f:e8:c5:4b:48:bc:89:bd:
                    45:c6:7c:e1:26:31:ed:57:d0:15:d3:1c:9d:cf:fc:
                    8f:83:13:25:d4:41:31:0f:18:a2:30:30:02:11:74:
                    93:d5:e6:a2:5c:d1:97:55:bb:c7:ec:e6:d0:e0:3d:
                    ca:a8:59:0d:ee:c6:04:b0:b3:1a:43:d5:63:5b:4c:
                    76:36:02:c9:9a:2b:cc:c8:fc:70:c1:f5:99:56:b2:
                    ef:7c:15:09:86:73:63:d8:b3:5c:5d:08:d4:73:ae:
                    4e:61:05:e9:64:53:9d:ce:84:c3:95:63:c0:c7:77:
                    f0:e8:fd:55:8f:40:31:43:2d:ab:f8:a7:61:c0:76:
                    ec:eb:1a:4d:4e:15:19:41:bf:ae:03:b2:3a:ba:a1:
                    c7:8f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                81:3A:54:78:CD:54:5C:60:3C:7F:E6:3F:31:A4:28:0E:90:9A:6D:25
            X509v3 Authority Key Identifier:
                keyid:1C:0D:57:B6:A3:24:52:83:DC:08:11:18:F5:FA:77:72:38:13:EF:ED

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/1C0D57B6A3245283DC081118F5FA77723813EFED.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1C0D57B6A3245283DC081118F5FA77723813EFED.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/7fEV3GRx2ANNciV9RhMxbRS9aNUuppNGfWHmnj2qhrvW/0/323830343a336131633a3a2f33322d3332203d3e20323636303731.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3a1c::/32

    Signature Algorithm: sha256WithRSAEncryption
         ae:f6:8f:86:39:06:20:04:6a:fd:b8:c6:89:82:d1:2e:73:ff:
         3b:b2:61:4d:b1:8d:10:06:a1:25:48:c8:3f:e6:11:9e:e1:d6:
         c0:cc:35:fb:e0:2c:9f:dc:e2:38:c7:c2:ea:46:75:6a:9a:30:
         84:ae:06:e5:7e:6a:e6:78:dd:51:71:67:b5:7d:76:32:f9:c8:
         c3:3c:91:54:64:a3:3f:ad:7f:cd:02:75:e1:86:58:61:5b:ce:
         28:db:9a:8b:a1:16:9f:d2:30:89:8f:88:f1:ce:25:d7:66:4c:
         f6:b5:45:f8:56:5e:07:1e:b4:7a:7c:cc:e6:3c:59:28:fa:3b:
         76:18:f4:75:b6:e5:28:d2:0b:06:47:32:2d:b7:5b:10:e7:31:
         c7:f8:97:0e:19:21:45:73:d3:8a:56:dc:df:fb:f4:22:b2:86:
         d7:3e:d3:81:93:d3:de:e0:03:24:cf:28:79:d9:42:83:46:70:
         49:22:0c:10:02:a2:50:8a:33:e1:8a:0e:cb:ab:70:8f:6c:65:
         57:83:c5:13:66:58:f6:d9:10:59:3f:19:ab:a8:76:23:24:12:
         c3:ad:88:b3:5f:9a:69:e4:7f:88:0c:26:55:52:6c:1d:5d:0c:
         b0:fd:9f:3e:40:f4:6c:f2:8b:2e:52:ab:19:fe:91:ac:a3:3a:
         d4:b0:3f:86
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:38:55 2024 by rpki-client on console-fra.rpki-client.org