Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a623161303a3a2f34382d3438203d3e203532353634.roa
File:                     323830343a316562383a623161303a3a2f34382d3438203d3e203532353634.roa (raw, json)
Hash identifier:          zKk1Df84oQwGAp5gWXzBWArcmg45De19kXxoMP3iTLw=
Subject key identifier:   41:BE:80:2F:E1:F1:F3:F8:4E:64:DA:F2:00:BB:23:89:53:58:CC:F1
Certificate issuer:       /CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
Certificate serial:       37C1188C5292744B4D219315A378D07CAAC7A7B2
Authority key identifier: 6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a623161303a3a2f34382d3438203d3e203532353634.roa
Signing time:             Tue 31 Oct 2023 20:33:02 +0000
ROA not before:           Tue 31 Oct 2023 20:28:02 +0000
ROA not after:            Tue 29 Oct 2024 20:33:02 +0000
asID:                     52564
IP address blocks:        2804:1eb8:b1a0::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            37:c1:18:8c:52:92:74:4b:4d:21:93:15:a3:78:d0:7c:aa:c7:a7:b2
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Validity
            Not Before: Oct 31 20:28:02 2023 GMT
            Not After : Oct 29 20:33:02 2024 GMT
        Subject: CN=41BE802FE1F1F3F84E64DAF200BB23895358CCF1
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:d6:b9:a3:36:7e:dd:82:57:00:2a:4f:3a:97:3d:
                    37:a1:3e:dc:cd:92:7f:f2:cf:73:95:c6:f8:d4:d7:
                    66:db:99:3b:7e:5d:45:83:e5:47:17:4e:82:7f:3c:
                    d1:7d:6e:b0:af:99:d8:5e:de:64:29:d6:8d:5a:42:
                    fe:5c:0c:16:c0:99:7a:3c:07:0c:f2:fc:b9:9c:b6:
                    1b:09:62:96:73:d8:00:b0:ad:a0:5f:be:a3:c8:c2:
                    1e:6c:85:68:d4:1f:c4:ba:9b:ad:d6:9d:64:e6:4c:
                    4e:8c:d1:4e:a4:6d:4c:da:c7:8d:80:50:cf:4e:1f:
                    71:b2:3c:06:6b:c4:30:cb:b6:b1:f6:af:56:74:48:
                    5e:38:e6:3a:98:0b:d4:37:fb:c6:86:2f:17:6f:ee:
                    b1:15:53:18:b5:e9:2e:6d:a3:ab:57:b7:59:80:4f:
                    c5:0b:94:f3:1e:1a:4b:1e:a2:a7:aa:c4:e7:ba:ee:
                    9a:6c:39:9f:c3:97:bc:82:49:b5:6c:c9:da:8e:d8:
                    b1:19:95:f6:e6:74:56:b8:67:0e:1a:c3:45:99:e8:
                    89:e8:ca:c7:33:6b:8d:fa:23:b7:19:b2:d7:0f:21:
                    db:5c:ba:3f:d4:32:dc:a6:63:e8:fc:8f:a2:52:68:
                    f6:1d:d3:45:0f:a3:5d:f5:98:00:72:94:49:f7:6a:
                    ba:2f
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                41:BE:80:2F:E1:F1:F3:F8:4E:64:DA:F2:00:BB:23:89:53:58:CC:F1
            X509v3 Authority Key Identifier:
                keyid:6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a623161303a3a2f34382d3438203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1eb8:b1a0::/48

    Signature Algorithm: sha256WithRSAEncryption
         89:d5:2a:2c:0a:27:07:0f:b2:d0:29:32:26:34:cf:a1:e2:e6:
         30:74:24:30:65:07:4b:a2:d2:04:b6:1e:e6:d3:a2:74:3f:e8:
         1e:94:4e:92:49:5d:6a:66:24:88:59:fd:e5:e5:a1:89:6b:86:
         d8:95:73:1e:d6:31:06:e3:65:be:5c:cb:0c:60:7a:ea:0d:ee:
         08:a4:77:5c:06:79:9b:44:7c:50:a9:af:dd:f4:36:8b:9a:1b:
         41:48:af:c4:4a:cc:8b:da:52:62:70:bf:b5:20:ec:94:5a:a6:
         c8:af:1b:61:9d:58:75:50:3b:be:c3:8b:df:30:ec:e0:0c:7e:
         00:b7:db:7e:0b:9b:9d:fd:01:dc:47:ce:c4:34:46:40:c6:78:
         0f:a5:88:23:d9:dd:eb:15:c4:23:04:1e:ca:44:3c:06:95:fe:
         86:33:c3:75:e2:88:bc:82:fd:3f:5e:79:c7:30:cb:4c:89:f2:
         cc:75:f8:26:5a:9b:03:5c:77:21:92:aa:36:5f:9f:f1:8b:04:
         ad:9d:50:8c:fe:30:02:5f:28:5b:c4:dd:44:0a:f1:da:f8:7f:
         0d:82:f4:15:58:e1:ea:5e:4e:a2:00:55:ba:cb:a4:20:1b:a6:
         ce:24:66:11:96:b1:68:01:3d:74:32:3b:a7:40:10:a7:d8:4c:
         fa:4d:44:b0
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org