Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/323830343a6531343a3a2f33322d3334203d3e203532353433.roa
File:                     323830343a6531343a3a2f33322d3334203d3e203532353433.roa (raw, json)
Hash identifier:          X0m40K72btSx7J4YpmUFHGEnt25QV2QAiTbOybTTEOE=
Subject key identifier:   63:59:64:93:78:16:38:F3:B9:58:13:94:3B:D0:12:E1:6A:28:F1:C5
Certificate issuer:       /CN=2FF599B83A0FDC1744A3B48099E107CF659AB46E
Certificate serial:       18FFD09F8C772799A20256055E24E1B7123CFBFA
Authority key identifier: 2F:F5:99:B8:3A:0F:DC:17:44:A3:B4:80:99:E1:07:CF:65:9A:B4:6E
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/323830343a6531343a3a2f33322d3334203d3e203532353433.roa
Signing time:             Tue 06 Feb 2024 13:00:00 +0000
ROA not before:           Tue 06 Feb 2024 12:55:00 +0000
ROA not after:            Tue 04 Feb 2025 13:00:00 +0000
asID:                     52543
IP address blocks:        2804:e14::/32 maxlen: 34

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            18:ff:d0:9f:8c:77:27:99:a2:02:56:05:5e:24:e1:b7:12:3c:fb:fa
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=2FF599B83A0FDC1744A3B48099E107CF659AB46E
        Validity
            Not Before: Feb  6 12:55:00 2024 GMT
            Not After : Feb  4 13:00:00 2025 GMT
        Subject: CN=63596493781638F3B95813943BD012E16A28F1C5
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d8:77:63:37:45:c5:fc:47:0f:f1:fb:07:53:c6:
                    c5:4b:9c:bb:72:90:eb:6b:3c:e9:b0:82:58:ca:e4:
                    72:15:50:cb:e5:d2:8c:5f:11:b1:ee:f0:d5:8a:4b:
                    53:7f:98:0c:c5:d6:44:4f:f3:08:79:ca:c7:79:d2:
                    79:4c:f0:61:67:fb:04:6a:4f:fd:20:cb:39:1c:e7:
                    c9:a7:4e:38:f6:09:d0:75:03:dc:e1:92:63:68:d3:
                    2a:b2:47:5f:85:33:c5:34:04:e2:29:2b:77:52:cc:
                    52:cd:4d:2f:43:a7:73:fa:c5:42:af:19:d7:a6:26:
                    b2:1f:f9:11:f2:0d:40:ae:71:e4:19:84:a9:04:fc:
                    ce:90:49:38:d1:c4:2b:44:c4:87:76:29:bd:85:cb:
                    ae:97:b6:ba:e2:47:2f:65:7a:f1:c9:fd:dd:2d:21:
                    f4:1d:3f:67:e3:0e:fb:32:59:55:9b:7d:cb:b1:f6:
                    77:6e:3e:5d:a3:29:39:e6:b3:28:2e:52:78:22:60:
                    b6:1d:06:c8:ca:b1:24:39:c9:93:95:35:69:02:7c:
                    2e:e9:1f:3c:76:52:74:73:36:16:05:00:a4:fe:fa:
                    85:9e:ef:1c:b8:e4:7f:b9:0f:f4:e2:53:6c:95:a6:
                    c4:cd:1e:56:91:2a:54:cb:df:27:77:51:90:6e:7c:
                    f2:ff
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                63:59:64:93:78:16:38:F3:B9:58:13:94:3B:D0:12:E1:6A:28:F1:C5
            X509v3 Authority Key Identifier:
                keyid:2F:F5:99:B8:3A:0F:DC:17:44:A3:B4:80:99:E1:07:CF:65:9A:B4:6E

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/2FF599B83A0FDC1744A3B48099E107CF659AB46E.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/A6HtmQi29SqQk8vt7R6hJ977TPXACWn4BuXEcacDjpq9/0/323830343a6531343a3a2f33322d3334203d3e203532353433.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:e14::/32

    Signature Algorithm: sha256WithRSAEncryption
         15:fa:8b:01:89:60:6f:b8:8c:5d:47:a5:86:ac:9f:82:80:e3:
         f9:dc:bf:ce:22:90:c5:1c:3b:09:a2:de:c4:d3:97:88:73:4e:
         8c:2d:3b:e2:62:42:55:f9:e1:11:fc:ea:35:dd:42:69:3e:e8:
         86:2d:64:8a:6c:63:23:e0:b7:97:c3:ae:9c:bf:87:93:cf:bc:
         d5:0d:13:ee:bd:d4:88:60:1d:2f:8d:fb:5c:23:af:25:90:a4:
         33:e8:36:82:d1:cb:75:af:73:da:6a:e7:44:bb:4a:9f:60:f7:
         c9:78:df:ac:ad:a1:d2:44:aa:46:02:eb:9a:ff:d6:74:50:f1:
         c1:a6:de:f9:34:60:ff:a4:d1:ed:88:69:a2:f2:64:00:39:0c:
         74:3e:e9:fd:5b:37:d5:38:85:0f:e3:86:49:c1:35:e7:b8:c4:
         0b:80:3a:ff:ba:93:c1:d7:c0:55:03:34:c4:21:28:3e:ea:14:
         54:e5:39:31:d4:d2:6b:7b:2d:a3:a8:ff:a8:45:45:17:0c:4a:
         c0:ec:18:21:02:79:f9:a2:50:9f:7f:6f:7c:0c:f6:32:fc:e3:
         f5:7e:89:ef:12:fc:01:13:17:36:99:d9:94:b5:da:56:76:32:
         50:02:57:06:4c:e1:f0:9c:fd:3d:c1:19:3c:b5:6f:8c:82:5e:
         8e:8e:47:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:25 2024 by rpki-client on console-ams.rpki-client.org