Route Origin Authorization

$ rpki-client -vvf rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343930303a3a2f34302d3430203d3e20323634333434.roa
File:                     323830343a323637343a343930303a3a2f34302d3430203d3e20323634333434.roa (raw, json)
Hash identifier:          pMflJ4AAv5d058sup09PSo6zXAVSEBhqgc80pv3hicc=
Subject key identifier:   06:C4:1C:2A:85:E7:F3:D0:62:C2:41:5B:1A:47:8E:34:69:8C:5F:44
Certificate issuer:       /CN=C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458
Certificate serial:       76BC41ED14AA20EEB6361CC8AC77128462350CDA
Authority key identifier: C9:7C:F8:9D:A8:C9:7F:B7:6F:8C:2F:7C:04:8F:E8:86:DC:E1:F4:58
Authority info access:    rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458.cer
Subject info access:      rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343930303a3a2f34302d3430203d3e20323634333434.roa
Signing time:             Fri 10 Nov 2023 17:12:18 +0000
ROA not before:           Fri 10 Nov 2023 17:07:18 +0000
ROA not after:            Fri 08 Nov 2024 17:12:18 +0000
asID:                     264344
IP address blocks:        2804:2674:4900::/40 maxlen: 40

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            76:bc:41:ed:14:aa:20:ee:b6:36:1c:c8:ac:77:12:84:62:35:0c:da
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458
        Validity
            Not Before: Nov 10 17:07:18 2023 GMT
            Not After : Nov  8 17:12:18 2024 GMT
        Subject: CN=06C41C2A85E7F3D062C2415B1A478E34698C5F44
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ae:89:13:c3:ab:58:7d:0c:59:09:22:ff:19:e4:
                    70:60:8e:82:c1:89:5c:6e:74:1b:e6:ed:7c:52:87:
                    4a:07:f9:50:ba:ce:7a:9f:e8:2a:3c:08:33:aa:16:
                    30:5f:a1:ab:d6:3c:68:19:19:76:12:27:9e:a4:6f:
                    7f:dd:98:4f:84:28:20:93:c9:05:7c:49:fc:f9:6c:
                    17:24:4b:43:9e:be:28:f6:89:c7:a8:2a:3d:92:82:
                    e7:74:fb:bb:8c:46:d1:69:c8:fd:b9:fe:44:89:7f:
                    bc:3e:dc:0c:03:43:f0:af:6f:2d:e4:74:9f:19:48:
                    9b:4c:a1:0b:72:78:8c:45:66:76:1f:79:d7:e1:5e:
                    c3:26:a6:85:7a:42:25:0d:03:3e:16:50:db:e0:a2:
                    ff:72:33:30:bc:65:68:78:bc:15:2d:45:28:4c:2e:
                    4b:fe:49:6d:f4:6c:5f:76:a2:8d:a7:27:7a:34:a7:
                    c0:83:b1:20:e2:83:92:43:61:f0:5e:29:b7:95:24:
                    38:01:b8:df:99:28:17:ac:d7:46:6d:28:89:4a:04:
                    66:4f:02:fe:5b:f4:a8:3f:95:a9:7d:a7:b6:0f:11:
                    ff:df:d0:e6:7b:55:57:5b:bb:8e:85:db:99:c0:58:
                    fa:41:ef:8e:7b:03:e4:b4:25:03:3b:34:60:16:d3:
                    71:19
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                06:C4:1C:2A:85:E7:F3:D0:62:C2:41:5B:1A:47:8E:34:69:8C:5F:44
            X509v3 Authority Key Identifier:
                keyid:C9:7C:F8:9D:A8:C9:7F:B7:6F:8C:2F:7C:04:8F:E8:86:DC:E1:F4:58

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki-repo.registro.br/repo/nicbr_repo/0/C97CF89DA8C97FB76F8C2F7C048FE886DCE1F458.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki-repo.registro.br/repo/BLsmdpsFQWBnzhX6RPTtcmSJiKKsjv6QpBr4Q8kwMw5A/0/323830343a323637343a343930303a3a2f34302d3430203d3e20323634333434.roa

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv6:
                  2804:2674:4900::/40

    Signature Algorithm: sha256WithRSAEncryption
         1e:66:ed:86:c0:f9:22:4f:17:17:97:7f:a2:fe:6f:cf:03:b1:
         55:af:f4:05:51:41:28:28:f8:ef:e2:0a:c8:04:de:56:e1:c4:
         dd:34:ad:d3:b6:12:9e:e6:16:58:77:e0:b5:ae:e3:71:d5:a6:
         d9:6a:04:33:56:44:46:ef:e5:ed:c9:c8:2c:3c:53:d7:5c:8a:
         d7:7c:04:8c:86:5a:17:63:bd:9c:3c:e7:d7:6e:ff:5b:ae:07:
         71:8d:48:fe:d4:98:58:2e:42:9e:3d:aa:77:b7:02:14:59:b9:
         68:6b:a5:37:00:b5:e6:c9:45:1d:70:07:fe:fc:6a:48:16:ea:
         7e:71:de:6d:da:b2:32:5f:fd:9f:96:8c:73:1e:03:70:a1:1b:
         3b:29:29:7a:8e:64:a4:6b:be:21:e1:02:f3:b8:56:6c:91:0e:
         bb:48:c9:bc:a0:fd:5c:a5:f1:d7:95:5b:ca:87:b7:bb:6e:09:
         d1:d3:18:77:cb:d6:d6:b7:f2:e7:77:f9:cd:63:5f:b2:b9:59:
         4c:72:f2:65:81:b0:e3:13:ca:f9:c8:30:e8:27:99:7a:27:e2:
         a4:51:32:2e:ec:00:bf:36:56:cc:18:46:2f:d2:db:78:8e:c6:
         25:5d:6e:29:87:a3:a8:47:78:68:a1:14:4f:f9:59:d1:b0:d5:
         b0:4a:48:27
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Thu Jun 6 17:41:52 2024 by rpki-client on console-ams.rpki-client.org