Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a346265633a3a2f33322d3536203d3e203238363639.roa
File:                     323830343a346265633a3a2f33322d3536203d3e203238363639.roa (raw, json)
Hash identifier:          GCVEFhYDK4uIDRt6GLK4vtF+GJEJ20FvQjIe7x9TapM=
Subject key identifier:   EC:ED:37:58:F4:0A:BC:E5:67:7E:2C:FC:98:3F:CD:85:3A:D9:90:E0
Certificate issuer:       /CN=7ABB6B59054A649CACCC9CEA32D96A4D579F1370
Certificate serial:       3780861950C19CDAF9775718517AD2FC9503DDD0
Authority key identifier: 7A:BB:6B:59:05:4A:64:9C:AC:CC:9C:EA:32:D9:6A:4D:57:9F:13:70
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ABB6B59054A649CACCC9CEA32D96A4D579F1370.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a346265633a3a2f33322d3536203d3e203238363639.roa
Signing time:             Thu 01 Jun 2023 17:50:46 +0000
ROA not before:           Thu 01 Jun 2023 17:45:46 +0000
ROA not after:            Thu 30 May 2024 17:50:46 +0000
asID:                     28669
IP address blocks:        2804:4bec::/32 maxlen: 56

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:80:86:19:50:c1:9c:da:f9:77:57:18:51:7a:d2:fc:95:03:dd:d0
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=7ABB6B59054A649CACCC9CEA32D96A4D579F1370
        Validity
            Not Before: Jun  1 17:45:46 2023 GMT
            Not After : May 30 17:50:46 2024 GMT
        Subject: CN=ECED3758F40ABCE5677E2CFC983FCD853AD990E0
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:e6:97:ea:7e:77:39:47:b1:17:a4:dd:d6:f9:eb:
                    bb:7d:7a:ae:c6:33:68:ab:45:f2:41:f7:37:7d:64:
                    34:69:a3:8e:47:bd:e8:78:67:c8:34:41:4f:72:d6:
                    50:15:a5:8a:57:9a:3c:90:ce:ce:f7:bf:e2:2c:4f:
                    ed:ab:89:9e:8a:c1:d5:4a:99:c3:83:d3:fd:10:5f:
                    ad:f0:25:72:13:72:bc:5f:73:a2:13:31:b1:5c:97:
                    b8:47:ea:dc:c8:22:7e:78:17:1f:36:a9:01:ad:25:
                    cf:22:71:80:54:cc:ac:e9:f5:0a:ed:ab:b2:06:68:
                    46:40:78:48:d1:08:cd:dd:cc:e1:47:0a:d7:49:16:
                    c4:6a:c4:f1:45:5b:b0:fc:a4:68:1c:90:27:41:45:
                    e1:1d:01:82:c8:71:09:2e:c4:78:98:6b:29:83:91:
                    e5:b8:ff:cf:16:a9:47:06:1b:5a:5a:f2:61:91:2a:
                    e4:71:73:1d:dc:ee:82:d8:84:77:fb:f6:4f:e7:62:
                    7e:b9:a9:d8:c2:d5:8e:12:74:ff:64:b4:0b:4e:c1:
                    77:26:21:4d:33:21:c2:f1:c3:af:9a:92:1e:b1:3b:
                    cc:55:ea:cb:f7:5c:5e:44:5e:fc:eb:ab:b9:07:0b:
                    91:d9:91:f1:27:60:84:9b:93:e4:fb:34:24:dd:a7:
                    1b:eb
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                EC:ED:37:58:F4:0A:BC:E5:67:7E:2C:FC:98:3F:CD:85:3A:D9:90:E0
            X509v3 Authority Key Identifier:
                keyid:7A:BB:6B:59:05:4A:64:9C:AC:CC:9C:EA:32:D9:6A:4D:57:9F:13:70

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/7ABB6B59054A649CACCC9CEA32D96A4D579F1370.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/7ABB6B59054A649CACCC9CEA32D96A4D579F1370.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/8r98vZ1NAzKJKQmHJMAjipoMmYL6gZb5R3ghXGDmcFGN/1/323830343a346265633a3a2f33322d3536203d3e203238363639.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:4bec::/32

    Signature Algorithm: sha256WithRSAEncryption
         69:df:30:e5:29:67:a0:76:0e:8a:8e:f0:55:75:ae:97:d0:6f:
         be:ab:77:00:22:ea:7e:e7:a1:e1:d0:f2:7e:1c:43:88:c3:92:
         d4:be:91:d4:80:2b:2d:01:75:98:65:1d:38:ac:16:aa:a0:d1:
         23:6a:77:11:7c:d5:20:40:70:2d:af:11:2d:c0:72:0b:f6:8c:
         74:73:0d:ca:b2:9b:53:d0:ef:1d:28:4b:69:20:d2:5a:d7:7f:
         78:bd:db:c8:b6:e8:a7:d6:29:8d:2f:b5:f3:79:68:25:c5:08:
         c7:d9:29:f9:08:e2:34:8e:32:1e:22:9e:0f:b0:ea:97:02:f5:
         87:bd:c9:ce:2b:70:07:65:52:3e:87:df:3c:5b:f6:f4:fe:d3:
         17:94:71:80:da:69:69:97:30:40:af:62:54:5a:bc:3f:f2:5a:
         43:8e:50:88:bc:a8:c1:70:0c:63:c2:9a:b7:79:10:b5:58:e4:
         ed:7d:ae:ce:74:e7:98:4f:27:aa:e5:98:b8:b8:34:2f:db:7a:
         0a:a7:f4:83:fe:95:f6:ac:d7:3b:30:11:fe:a3:de:90:c4:22:
         91:34:bf:8a:a5:b4:c6:58:e3:eb:15:19:6e:21:ee:30:41:59:
         fb:4d:3e:b1:de:94:a7:92:e1:8b:dc:a4:da:05:59:ad:66:73:
         c7:f6:fc:57
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org