Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a663030303a3a2f33362d3336203d3e20323635343936.roa
File:                     323830343a333530383a663030303a3a2f33362d3336203d3e20323635343936.roa (raw, json)
Hash identifier:          Jxdh8qBD62vBnou8ZooO4Njz5AIVfxyQSercADGHI0c=
Subject key identifier:   27:7D:60:29:B8:C0:B9:77:96:99:63:D7:DF:A4:27:E0:AD:9D:75:98
Certificate issuer:       /CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
Certificate serial:       1E64EE32C3B3534DB129BD8018504C975582EBF4
Authority key identifier: 14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a663030303a3a2f33362d3336203d3e20323635343936.roa
Signing time:             Mon 03 Apr 2023 10:56:36 +0000
ROA not before:           Mon 03 Apr 2023 10:51:36 +0000
ROA not after:            Mon 01 Apr 2024 10:56:36 +0000
asID:                     265496
IP address blocks:        2804:3508:f000::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            1e:64:ee:32:c3:b3:53:4d:b1:29:bd:80:18:50:4c:97:55:82:eb:f4
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517
        Validity
            Not Before: Apr  3 10:51:36 2023 GMT
            Not After : Apr  1 10:56:36 2024 GMT
        Subject: CN=277D6029B8C0B977969963D7DFA427E0AD9D7598
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b6:29:76:76:d2:53:8c:f5:1c:d2:f4:7f:25:c8:
                    b8:67:3a:fb:58:68:24:ce:e6:76:2b:16:05:06:a4:
                    96:8c:49:55:c4:91:04:4e:c3:96:c2:39:2a:94:dc:
                    6e:47:a6:7b:3c:71:ea:fc:bc:ab:8a:c8:19:65:99:
                    27:73:54:ce:93:82:a1:49:8f:09:29:3a:e7:88:65:
                    f1:a7:07:97:a7:75:38:17:63:4a:0c:dd:3e:3e:58:
                    a6:36:2f:68:91:8d:ee:99:d1:a8:8c:4f:67:ed:1c:
                    a2:cb:f9:02:95:d7:46:7e:77:e4:89:e9:0e:83:05:
                    7c:82:e9:b9:a6:6e:7a:24:a3:b0:29:78:ae:3f:22:
                    cc:6b:4a:14:61:71:f1:95:13:e0:25:32:ee:77:0b:
                    74:16:d6:1e:cf:16:2d:ac:4c:28:6e:35:f6:bf:41:
                    60:05:b6:73:08:fc:5d:14:15:69:16:69:18:ed:b3:
                    a8:de:cb:0c:40:34:dc:61:1f:ee:92:e9:b6:a3:ce:
                    b0:93:cb:dd:7f:60:ab:45:3d:80:9d:f4:dc:5d:af:
                    b4:89:92:53:30:3a:18:e0:57:92:6f:39:97:38:38:
                    14:fb:32:d3:ee:ac:49:6c:ea:9f:f5:f1:1d:67:1b:
                    f1:b7:4a:41:5b:4a:92:58:c9:ae:68:93:ed:bc:6b:
                    61:5f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                27:7D:60:29:B8:C0:B9:77:96:99:63:D7:DF:A4:27:E0:AD:9D:75:98
            X509v3 Authority Key Identifier:
                keyid:14:53:E0:F3:4C:FC:80:20:A8:BB:A2:A1:7C:CD:B7:CA:BC:9C:05:17

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/1453E0F34CFC8020A8BBA2A17CCDB7CABC9C0517.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/968QkKig5o6mr4uTTadVwHeo6YtMEszkK9xQcqYB1aAv/0/323830343a333530383a663030303a3a2f33362d3336203d3e20323635343936.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:3508:f000::/36

    Signature Algorithm: sha256WithRSAEncryption
         8f:f0:df:0b:5f:f6:a1:4e:10:2e:f3:b8:aa:c8:c6:a4:6a:46:
         3c:c9:bf:54:76:9b:c1:22:9b:74:fd:96:8c:43:48:34:06:4e:
         88:cb:77:e6:0c:06:0a:a1:4d:0d:17:51:5b:dd:4b:48:c6:a8:
         74:cc:f2:17:dd:cf:07:56:47:c1:09:47:19:e1:5b:ab:81:76:
         7f:fd:ce:7e:e3:4d:08:0b:3b:a0:07:83:bb:11:23:b2:71:65:
         3c:e8:e2:a2:b5:8c:07:69:ec:aa:d6:5e:da:9b:0f:22:f7:ef:
         b9:2f:23:a9:a6:91:a9:c4:ae:1f:ec:70:eb:74:62:b3:0d:7e:
         26:65:58:3e:1c:7a:44:1e:8b:b7:b9:98:a1:69:e3:6e:03:0c:
         9e:a3:86:90:06:79:7b:88:71:40:23:df:09:82:f0:e2:2f:9b:
         dd:d6:76:db:65:29:9c:2d:1f:89:4a:db:76:ff:7d:76:31:c8:
         ee:e5:da:b5:6c:18:af:10:5d:6c:f8:f3:bc:42:cc:61:f8:28:
         a7:4c:28:9d:5d:1f:92:b0:be:d0:ad:27:23:4a:a7:04:67:66:
         8a:a4:ca:79:d3:01:b4:7e:55:87:17:0e:4f:22:b9:38:ef:04:
         aa:76:a4:74:83:a2:9c:c2:f2:b0:5f:34:44:da:26:72:c1:e6:
         e4:a8:67:b3
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:03 2024 by rpki-client on console-fra.rpki-client.org