Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a623161353a3a2f34382d3438203d3e203532353634.roa
File:                     323830343a316562383a623161353a3a2f34382d3438203d3e203532353634.roa (raw, json)
Hash identifier:          bCU00P89cDu6rolxlAIj6p87KblW8Ry/ThAPb2FHHs8=
Subject key identifier:   CA:1B:8B:11:CE:8D:D4:86:45:07:62:B3:43:F8:44:08:94:D4:CE:4D
Certificate issuer:       /CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
Certificate serial:       71788FC73C48D25C1536E55C834BFB1CF3DF68EF
Authority key identifier: 6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a623161353a3a2f34382d3438203d3e203532353634.roa
Signing time:             Tue 31 Oct 2023 20:33:03 +0000
ROA not before:           Tue 31 Oct 2023 20:28:03 +0000
ROA not after:            Tue 29 Oct 2024 20:33:03 +0000
asID:                     52564
IP address blocks:        2804:1eb8:b1a5::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            71:78:8f:c7:3c:48:d2:5c:15:36:e5:5c:83:4b:fb:1c:f3:df:68:ef
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Validity
            Not Before: Oct 31 20:28:03 2023 GMT
            Not After : Oct 29 20:33:03 2024 GMT
        Subject: CN=CA1B8B11CE8DD486450762B343F8440894D4CE4D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:9d:cf:7a:6d:93:13:17:4d:14:e6:24:ba:2a:a9:
                    ed:bd:56:c1:28:80:0c:83:60:5b:e4:60:ef:d8:04:
                    4e:a3:c7:84:f1:2b:d4:6c:e9:58:f0:d6:91:06:9f:
                    53:b5:c7:b7:d7:f2:03:4c:b5:12:23:12:35:7a:a3:
                    1a:2d:55:c2:31:b1:c6:3b:36:12:37:d9:d8:3b:5d:
                    6e:ae:1d:be:4a:78:7a:63:aa:3d:71:22:b6:f0:bd:
                    ad:0d:65:db:76:f3:ff:a9:dd:a5:d3:38:ce:4a:e5:
                    3b:50:d1:47:6e:d9:ae:0c:ad:73:4d:89:07:c1:04:
                    93:40:d4:e6:db:8a:bf:94:ad:af:a0:db:f5:38:dc:
                    ef:73:0e:96:bb:6e:dd:45:e7:c8:62:8c:b6:09:8b:
                    76:23:39:44:a9:67:0b:d8:75:9d:b0:7c:bd:78:e2:
                    1e:d1:41:56:b1:a9:ac:66:ff:4d:77:ea:84:23:43:
                    a7:c7:1f:2f:f3:da:4c:5b:44:31:04:2f:b8:40:8a:
                    37:7e:06:b5:58:1d:64:8c:51:71:8f:45:43:46:ec:
                    a9:cc:3f:a0:c5:e8:48:0b:4b:46:dd:a2:72:54:c5:
                    d0:c7:f7:f1:67:a4:d7:9f:1f:00:e2:c3:4f:bb:28:
                    af:79:c6:40:ab:4a:2a:84:32:1f:c0:78:d3:fe:30:
                    9f:17
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                CA:1B:8B:11:CE:8D:D4:86:45:07:62:B3:43:F8:44:08:94:D4:CE:4D
            X509v3 Authority Key Identifier:
                keyid:6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a623161353a3a2f34382d3438203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1eb8:b1a5::/48

    Signature Algorithm: sha256WithRSAEncryption
         c3:c1:ce:15:8d:32:34:8a:68:fe:e9:27:2c:a5:3e:b3:5e:46:
         b1:b9:a5:2c:27:e2:f4:e6:59:9b:0f:2d:88:48:5a:ad:c6:48:
         23:a6:df:a8:13:a8:c2:a9:7b:68:9c:ac:76:0d:e4:e0:28:50:
         d6:5b:03:c1:a3:7c:80:b4:45:46:22:6f:6d:db:e8:79:ea:b0:
         19:e1:29:6f:6b:2c:1d:02:50:11:6c:35:b8:aa:26:0c:76:eb:
         a1:d6:67:b8:22:35:2a:6b:30:62:9c:f6:35:de:52:4d:14:08:
         b6:e7:4b:33:51:c9:9c:5a:f5:27:63:0a:10:68:3a:eb:60:ed:
         71:80:2b:b1:03:c5:bf:db:57:0e:da:89:57:c9:65:e8:f4:b4:
         0c:f5:ac:79:fc:c2:b3:c7:9b:e8:dd:ed:c6:d6:6a:49:d5:13:
         c5:29:c9:1c:e3:90:13:4c:a7:7a:d9:86:35:3e:54:1b:b5:cf:
         2d:d6:53:d4:43:39:d2:13:9b:72:8a:4c:9d:aa:98:91:31:0a:
         3e:b9:f5:fa:60:eb:a9:22:63:1f:f3:7a:9b:35:43:b0:3a:b1:
         72:12:5d:90:69:51:6e:cd:7b:d8:df:47:88:b9:cc:26:a9:09:
         34:fc:bd:0e:a8:3b:21:b7:ee:fa:e0:87:52:39:b3:47:0e:5a:
         07:00:0a:cd
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:11 2024 by rpki-client on console-fra.rpki-client.org