Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/323830343a323931633a3a2f33362d3336203d3e20323633393938.roa
File:                     323830343a323931633a3a2f33362d3336203d3e20323633393938.roa (raw, json)
Hash identifier:          RGiNbSfMcch3GUeUuRvR3daw7aAKCxIF5+5M1UGX07s=
Subject key identifier:   6B:4F:41:C9:B9:E6:8E:47:D3:71:F2:1D:B5:C8:1D:C4:3E:FB:D5:73
Certificate issuer:       /CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
Certificate serial:       0BB158D640D1A29AA1498A7C6CAB204BDF2E826E
Authority key identifier: 98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/323830343a323931633a3a2f33362d3336203d3e20323633393938.roa
Signing time:             Mon 24 Apr 2023 18:18:34 +0000
ROA not before:           Mon 24 Apr 2023 18:13:34 +0000
ROA not after:            Mon 22 Apr 2024 18:18:34 +0000
asID:                     263998
IP address blocks:        2804:291c::/36 maxlen: 36

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            0b:b1:58:d6:40:d1:a2:9a:a1:49:8a:7c:6c:ab:20:4b:df:2e:82:6e
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=984A4E66BC65EB5C94C289F8249033C67BBB81E7
        Validity
            Not Before: Apr 24 18:13:34 2023 GMT
            Not After : Apr 22 18:18:34 2024 GMT
        Subject: CN=6B4F41C9B9E68E47D371F21DB5C81DC43EFBD573
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b4:3a:d6:d8:54:c6:e6:f0:99:fe:b2:40:39:d0:
                    8f:7b:7f:b4:66:46:94:0b:64:08:c1:17:1f:ad:c9:
                    30:4d:e9:18:6d:db:6d:9c:56:a7:a9:58:13:ab:6a:
                    8c:28:0e:a5:11:4a:7f:04:43:4a:95:4a:fb:f9:0a:
                    41:1b:35:8c:f3:8c:b3:cf:41:b0:e9:f0:cf:05:a5:
                    3f:1c:49:18:b4:b6:84:bb:0c:b9:b0:43:87:01:8c:
                    75:b4:43:ec:77:5e:00:6c:5a:85:8b:91:af:7f:81:
                    9a:ab:08:8e:10:3d:2c:d2:30:47:fc:4f:cb:91:13:
                    e8:b3:93:97:96:c0:0f:99:b0:27:4e:6e:32:0d:73:
                    b0:1f:00:98:9c:4c:0d:85:de:98:07:90:39:2a:71:
                    3f:53:e6:ce:18:8b:ad:3d:a9:87:1e:df:4f:b9:c8:
                    79:20:6e:e8:0b:03:09:9e:37:48:5f:f9:4b:69:b4:
                    e9:86:b2:31:72:9c:9f:bf:04:93:93:d0:ab:19:4b:
                    f3:96:dd:17:7e:7b:10:4c:a8:75:6f:75:0a:3e:ed:
                    f5:25:c9:23:8a:0d:bc:32:35:07:72:7c:6d:44:9b:
                    88:bf:a8:17:4c:17:9b:d4:86:25:0f:6e:6e:ee:16:
                    5e:12:0f:f4:f1:4e:e2:b8:31:48:a9:10:13:48:ad:
                    4a:e9
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                6B:4F:41:C9:B9:E6:8E:47:D3:71:F2:1D:B5:C8:1D:C4:3E:FB:D5:73
            X509v3 Authority Key Identifier:
                keyid:98:4A:4E:66:BC:65:EB:5C:94:C2:89:F8:24:90:33:C6:7B:BB:81:E7

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/984A4E66BC65EB5C94C289F8249033C67BBB81E7.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/B1Yn2fQjFTZCKqzfpDwrsh9oZWBoUxTW1RppNjEU3ehH/0/323830343a323931633a3a2f33362d3336203d3e20323633393938.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:291c::/36

    Signature Algorithm: sha256WithRSAEncryption
         29:37:51:bd:9d:3e:fe:4e:bb:a7:65:36:b6:92:03:c1:0f:2f:
         ee:76:71:b1:68:44:d9:63:c7:e0:f5:e5:88:c1:21:ff:b2:dc:
         ad:21:fc:5b:8c:bb:31:3f:d5:f8:30:ea:26:6a:ba:8f:75:ba:
         f3:76:43:7a:4d:b8:35:75:e5:b1:c4:51:22:42:bd:b6:23:35:
         a7:a2:80:d9:80:c7:26:e4:6d:c2:c0:3a:e8:a2:38:a0:12:8e:
         07:74:3f:88:11:e1:5e:96:f3:b0:d0:2e:e1:bd:c5:a3:64:ed:
         cf:70:d0:b6:bc:d5:05:45:6c:f1:bf:b2:40:e6:2a:f8:cb:61:
         80:44:8e:6b:c2:a6:fa:e9:23:80:e4:cb:77:86:1f:21:50:33:
         f1:ad:fb:8e:39:aa:d1:d9:81:ff:79:11:2e:9a:90:f6:a3:65:
         27:42:31:86:3e:b4:a0:f1:df:dc:2a:15:66:5c:97:ce:4f:7c:
         a6:2f:2b:43:aa:8a:f8:c6:5a:e1:d9:1c:f7:e1:20:f4:06:6f:
         a8:29:89:e4:5f:16:ac:9f:46:ce:ec:76:be:e8:60:31:10:8b:
         39:e9:71:e9:49:21:83:3c:0d:52:79:2b:e0:89:76:1a:f8:33:
         d6:f6:28:11:f0:70:0c:95:31:3e:65:5e:66:13:2a:95:3e:95:
         43:a8:ee:bc
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 16:39:14 2024 by rpki-client on console-fra.rpki-client.org