Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a666666663a3a2f34382d3438203d3e203532353634.roa
File:                     323830343a316562383a666666663a3a2f34382d3438203d3e203532353634.roa (raw, json)
Hash identifier:          j4UNVdwbVxhSdwyo5syCAcbb8tI3dkRty5RAvU5tloo=
Subject key identifier:   21:51:27:7A:14:6B:9B:FF:C8:52:4A:83:E8:47:61:98:5C:F2:08:5D
Certificate issuer:       /CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
Certificate serial:       76B4D76173DF1913241EDC33D6317099997F9B6A
Authority key identifier: 6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a666666663a3a2f34382d3438203d3e203532353634.roa
Signing time:             Tue 31 Oct 2023 20:33:03 +0000
ROA not before:           Tue 31 Oct 2023 20:28:03 +0000
ROA not after:            Tue 29 Oct 2024 20:33:03 +0000
asID:                     52564
IP address blocks:        2804:1eb8:ffff::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:b4:d7:61:73:df:19:13:24:1e:dc:33:d6:31:70:99:99:7f:9b:6a
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=6F302B4EBC08D62D14C6ED76F61D1763BC9ED748
        Validity
            Not Before: Oct 31 20:28:03 2023 GMT
            Not After : Oct 29 20:33:03 2024 GMT
        Subject: CN=2151277A146B9BFFC8524A83E84761985CF2085D
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ad:11:49:99:8b:f3:9f:3e:c0:11:85:84:f6:7c:
                    18:e3:68:e5:f8:05:57:5d:14:64:2a:4d:e9:03:5b:
                    3c:83:03:68:b3:3f:b8:e8:d8:d5:da:bc:42:3e:f1:
                    9d:e7:bd:cc:50:ab:7e:71:34:d0:ba:06:f2:75:a1:
                    12:98:14:c0:c2:13:eb:4d:4c:b4:49:0f:d2:c3:3e:
                    22:5e:fc:7a:25:c9:6f:e8:69:f3:44:55:f3:5a:cc:
                    df:fc:5e:a3:3a:e9:2b:e1:20:15:0b:0d:8f:dc:f4:
                    48:4f:cb:72:3d:3e:3d:9e:29:e8:48:a2:98:bb:b1:
                    65:fb:57:37:ac:e7:c7:76:f5:78:3f:ee:23:eb:30:
                    7c:0f:86:f3:97:23:3e:1c:c0:ac:f8:ce:46:7d:2f:
                    39:37:71:1d:ce:c2:de:0d:53:50:c6:3c:bb:f8:0d:
                    45:2c:b9:1c:3e:a1:40:70:7b:16:35:d1:6a:2e:96:
                    e7:60:37:c7:b2:f2:39:e5:15:21:4f:cd:97:95:f6:
                    0f:29:68:c7:b3:af:98:a8:c8:cb:05:83:57:a3:93:
                    2e:88:45:3c:52:d3:1d:6f:7c:d0:fd:52:ed:a5:56:
                    55:a0:84:a0:b5:75:5d:5d:2f:0b:d5:0c:a3:3e:d6:
                    17:1e:dc:ae:e9:e8:97:32:43:94:df:7d:b1:05:8e:
                    6d:13
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                21:51:27:7A:14:6B:9B:FF:C8:52:4A:83:E8:47:61:98:5C:F2:08:5D
            X509v3 Authority Key Identifier:
                keyid:6F:30:2B:4E:BC:08:D6:2D:14:C6:ED:76:F6:1D:17:63:BC:9E:D7:48

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/6F302B4EBC08D62D14C6ED76F61D1763BC9ED748.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/AKdXbgdpFxz1BSuBA2tgmS3MgFSANYNWWxyfQE6AyrBL/0/323830343a316562383a666666663a3a2f34382d3438203d3e203532353634.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:1eb8:ffff::/48

    Signature Algorithm: sha256WithRSAEncryption
         35:eb:c9:1b:cf:4c:bd:90:2d:4a:e5:d9:c5:28:31:a9:bb:17:
         22:f5:80:28:f2:a6:64:eb:e2:20:79:e5:33:a0:e1:f4:5f:d6:
         0b:72:53:8b:f6:f7:36:d3:1a:62:1a:2d:50:5a:dc:5b:c4:69:
         fd:6b:29:d4:fb:29:cf:0b:b4:98:c3:d9:62:ea:d6:07:0a:9d:
         8b:03:7c:31:2d:5e:67:b0:1d:45:7b:4e:dd:e4:74:1d:bc:11:
         cc:f4:a8:7c:4d:c3:da:84:d4:57:01:09:9d:24:47:0d:59:66:
         7b:7c:de:5b:86:58:8a:4f:15:6e:22:74:eb:01:e5:fb:3d:03:
         f0:04:d4:65:44:87:50:2d:51:a4:ad:fc:c5:e4:20:fa:c0:20:
         8f:98:38:eb:71:cc:ef:3e:a5:ec:7e:36:f4:fd:24:a0:7e:17:
         bc:23:46:c1:9e:13:b3:26:5c:00:7c:6c:55:73:dc:5c:5b:3b:
         06:51:6d:48:8f:80:85:aa:bf:9b:a6:57:55:a4:29:dc:4b:c4:
         60:55:e4:d7:de:a4:39:33:f5:74:33:6a:ec:eb:99:2c:80:fb:
         ec:39:10:09:2c:07:6d:24:74:84:7a:42:3d:70:d2:78:83:bb:
         1d:84:05:f6:f8:1c:1c:95:1e:d0:02:cc:31:41:07:5d:b1:fb:
         84:e5:42:6c
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:30 2024 by rpki-client on console-ams.rpki-client.org