Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/323830343a346438303a3a2f33322d3438203d3e20323638323030.roa
File:                     323830343a346438303a3a2f33322d3438203d3e20323638323030.roa (raw, json)
Hash identifier:          XP6C4ZmDczWXnjDG1JvQ7uC46nRxAi5s0xHXoBugsII=
Subject key identifier:   54:A3:A6:42:F7:51:C3:59:53:CB:EA:76:66:37:A6:6F:1B:0D:E4:49
Certificate issuer:       /CN=6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84
Certificate serial:       1B8557CF6F1C24E55AF8F367B7CF2BFFA9472A26
Authority key identifier: 6F:3C:B5:D7:68:70:1F:AF:EA:70:64:BE:F7:BD:95:14:1D:F9:CA:84
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/323830343a346438303a3a2f33322d3438203d3e20323638323030.roa
Signing time:             Fri 27 Oct 2023 13:42:09 +0000
ROA not before:           Fri 27 Oct 2023 13:37:09 +0000
ROA not after:            Fri 25 Oct 2024 13:42:09 +0000
asID:                     268200
IP address blocks:        2804:4d80::/32 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1b:85:57:cf:6f:1c:24:e5:5a:f8:f3:67:b7:cf:2b:ff:a9:47:2a:26
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84
        Validity
            Not Before: Oct 27 13:37:09 2023 GMT
            Not After : Oct 25 13:42:09 2024 GMT
        Subject: CN=54A3A642F751C35953CBEA766637A66F1B0DE449
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e4:cc:a0:55:94:18:fd:be:b2:c8:75:c7:f7:84:
                    f5:50:7c:b8:39:6b:dc:79:da:15:b7:ed:ea:7b:6e:
                    a3:86:c7:0b:60:5a:4c:4a:41:b4:08:cb:06:10:a0:
                    55:a7:b7:e8:70:33:87:4e:c5:12:3b:d4:8f:12:54:
                    81:06:18:02:17:83:64:97:25:04:56:cd:89:d3:f6:
                    03:75:77:e4:22:19:eb:ae:d3:a4:80:8a:91:b5:67:
                    31:58:89:86:1d:76:e4:68:99:13:d4:93:25:76:91:
                    bc:94:ae:55:48:38:e6:a8:63:2d:79:a1:05:d2:c8:
                    49:49:38:13:db:66:df:84:f5:b8:59:da:d3:ae:62:
                    a5:76:dc:fc:92:54:e1:65:23:ad:db:3e:04:82:5e:
                    f3:44:ce:49:cf:71:39:e3:2a:87:a3:b8:8f:3c:24:
                    c8:93:6b:f4:25:ae:6c:da:e5:eb:f6:b6:d7:be:7a:
                    23:da:e0:7d:1f:99:68:6d:e8:b5:a1:95:a5:93:3f:
                    65:ce:e1:44:2e:f6:ce:17:b2:64:2e:90:61:45:58:
                    96:e4:46:52:f0:32:bc:78:95:aa:82:b7:85:70:c5:
                    a9:5a:f8:c3:49:16:b3:d5:41:ec:91:4a:c0:09:7d:
                    80:e2:c9:77:05:76:9b:79:d7:9f:da:3a:cb:d8:84:
                    46:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                54:A3:A6:42:F7:51:C3:59:53:CB:EA:76:66:37:A6:6F:1B:0D:E4:49
            X509v3 Authority Key Identifier:
                keyid:6F:3C:B5:D7:68:70:1F:AF:EA:70:64:BE:F7:BD:95:14:1D:F9:CA:84

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F3CB5D768701FAFEA7064BEF7BD95141DF9CA84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8bPCsCn3mhiyv1jGXs2zBbyRT1ZETBxkKLNshfj3FTcW/0/323830343a346438303a3a2f33322d3438203d3e20323638323030.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4d80::/32

    Signature Algorithm: sha256WithRSAEncryption
         8c:38:1b:7b:d0:63:d4:81:5d:13:3d:d3:3b:1b:03:7e:ef:56:
         94:26:c6:84:2f:cb:e8:8b:10:52:15:ae:9f:f2:11:3a:c1:fa:
         a8:4c:40:1c:8c:36:fb:98:2b:e7:e4:39:7b:b2:4a:d4:c3:7b:
         e5:d7:27:12:41:c4:e0:9e:32:f5:40:4e:4b:e9:e2:a7:7d:b8:
         8e:de:c1:ed:f0:15:7a:89:37:da:8e:ab:69:96:70:79:d0:06:
         b2:99:f5:b7:46:8e:49:42:30:6b:a2:4c:07:ec:7c:ae:43:3d:
         24:3b:94:73:eb:a6:a1:d0:d3:a5:5a:3a:ee:a1:7f:d2:66:9a:
         94:e2:a3:0b:0c:1d:ae:b8:56:b6:cd:ad:51:60:76:b3:41:62:
         7f:62:dd:41:27:57:70:b4:68:02:44:27:a5:24:17:bd:94:3b:
         73:a1:05:ed:70:54:81:da:da:e9:05:ca:a8:24:bc:59:bb:8e:
         e1:9e:a4:89:a2:6b:f5:4a:e9:f3:c5:f3:0e:3e:14:8d:f0:89:
         9a:a7:d8:0c:f2:43:13:ba:80:e5:5f:6a:b0:2a:95:95:47:cf:
         db:dc:6d:fe:ec:ea:ac:e8:b9:00:f3:b7:a1:f6:77:04:68:22:
         0b:54:b2:6a:72:f3:fc:84:15:5e:12:43:7b:8d:0a:df:b6:96:
         30:f7:82:b6
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:01 2024 by rpki-client on console-fra.rpki-client.org